Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
File:                     cJAIrccXkY_f_PFnQftbEwunxDA.mft (raw, json)
Hash identifier:          k+Jjjnh06Hfi8z4ZOb2yPdxEZ9MZHgswT7ZurnXT8PU=
Subject key identifier:   0B:A8:66:47:9C:39:35:68:04:7B:55:87:A1:2C:EE:BF:0D:D2:18:51
Authority key identifier: 70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30
Certificate issuer:       /CN=F36111C6AF/serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
Certificate serial:       01EC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
Manifest number:          01EC
Signing time:             Tue 17 Jun 2025 04:23:52 +0000
Manifest this update:     Tue 17 Jun 2025 04:23:51 +0000
Manifest next update:     Thu 19 Jun 2025 04:23:51 +0000
Files and hashes:         1: cJAIrccXkY_f_PFnQftbEwunxDA.crl (hash: 465iWdlaLC2MBphgLJxP84mvh/b15zkw7AoB+Rrk6Rw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 19 Jun 2025 00:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36111C6AF, serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
        Validity
            Not Before: Jun 17 04:23:51 2025 GMT
            Not After : Jun 19 04:23:51 2025 GMT
        Subject: CN=6850edd8-5a5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d8:3e:f1:b5:db:46:a5:86:88:22:67:4d:65:
                    bb:7d:cb:14:5d:03:a0:69:97:4c:21:63:63:40:7b:
                    63:69:e3:ad:14:fe:ef:08:f0:b1:71:57:8f:c2:91:
                    2d:d3:c7:98:4e:20:c2:e9:32:1e:09:dc:5b:16:04:
                    cc:18:73:e5:06:ec:a5:7b:de:f8:ff:6c:fe:ce:80:
                    2f:4c:5a:bc:26:70:9c:0c:b0:d3:8c:17:42:1d:cd:
                    6b:b5:69:0e:8b:ec:f6:21:51:bb:fd:89:5a:fa:4b:
                    99:92:fd:72:c7:bc:bd:dd:cc:0f:fd:46:bf:d7:7c:
                    ce:91:b2:8c:5a:35:73:70:20:72:51:fb:a9:a4:26:
                    67:ca:0c:0e:21:bf:51:bf:9f:dd:6e:d4:42:c5:b4:
                    10:9e:76:0a:53:75:bf:f5:c2:7e:4d:bc:f7:48:3d:
                    46:e1:8b:8a:fd:42:cb:bf:d9:0e:22:76:1f:0c:b7:
                    22:20:ee:7f:96:e7:e0:02:73:c6:68:4f:79:17:2f:
                    a6:3d:ff:13:28:bc:fb:c3:84:b8:6b:af:ad:61:1b:
                    48:61:f6:89:33:0b:3d:51:fa:7d:36:eb:fe:cb:ff:
                    e0:01:a9:a6:7e:ab:78:63:4e:11:f8:eb:93:10:e3:
                    63:31:59:5f:03:d4:b6:c7:bb:5e:05:96:79:ac:4e:
                    40:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A8:66:47:9C:39:35:68:04:7B:55:87:A1:2C:EE:BF:0D:D2:18:51
            X509v3 Authority Key Identifier:
                keyid:70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:88:1f:1b:81:17:6d:d9:68:6b:ea:77:8d:6d:f3:ec:91:7f:
         1f:67:e9:f4:80:1e:4a:d8:cb:f4:90:d4:db:fb:e7:8a:37:ce:
         d7:46:64:c8:32:1d:e6:a9:84:61:81:10:ca:c7:98:99:2f:21:
         94:3e:0c:12:b0:ae:49:c2:88:5a:54:36:3f:3a:03:60:f0:ab:
         42:5d:54:29:5e:e3:57:97:60:10:59:22:f9:21:f7:61:9b:f7:
         49:78:a2:2c:7b:ae:75:13:78:9e:50:3a:e4:ca:b3:92:a7:a5:
         ae:db:45:29:b2:7f:b5:6f:82:96:b0:d9:d7:1b:60:a8:24:a2:
         f7:73:cb:8d:22:85:cb:ff:e8:80:12:f6:5c:81:1a:8b:04:d7:
         2b:da:6b:a1:d4:fd:fa:1b:20:a8:42:45:c3:35:f6:d6:f2:8e:
         6c:ad:6f:f9:ec:dd:0d:ca:40:84:8e:43:08:04:a4:6e:ea:60:
         f2:53:99:d4:2b:3c:95:e2:51:98:a7:75:8c:78:29:84:c5:2f:
         1b:c5:09:3c:d0:05:9b:51:7b:37:ef:f5:aa:2d:95:79:80:7a:
         78:92:b1:8a:35:55:cc:f3:a8:1c:da:d1:63:bd:61:33:fe:ec:
         2a:7b:29:ae:af:9d:7f:ca:f8:86:a1:0c:ea:8d:90:b6:46:f2:
         2c:34:91:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 11:11:21 2025 by rpki-client