Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
File:                     v62u3NVIMg_I8seYfA4imdy6Opw.mft (raw, json)
Hash identifier:          xE0d6w0Jp3H+XmMiKtKxJP4yhKlDpkvp6pEdKQhjnws=
Subject key identifier:   58:A5:06:78:91:95:0E:1D:6E:FE:17:42:B3:1D:F1:25:4C:8A:C5:8F
Authority key identifier: BF:AD:AE:DC:D5:48:32:0F:C8:F2:C7:98:7C:0E:22:99:DC:BA:3A:9C
Certificate issuer:       /CN=F3617770AF/serialNumber=BFADAEDCD548320FC8F2C7987C0E2299DCBA3A9C
Certificate serial:       61
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
Manifest number:          61
Signing time:             Wed 30 Apr 2025 05:09:37 +0000
Manifest this update:     Wed 30 Apr 2025 05:09:36 +0000
Manifest next update:     Fri 02 May 2025 05:09:36 +0000
Files and hashes:         1: v62u3NVIMg_I8seYfA4imdy6Opw.crl (hash: /96angD7Y7J0LQuSNTHts119ibWCZmLmn1WrwKzmobw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 May 2025 05:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3617770AF, serialNumber=BFADAEDCD548320FC8F2C7987C0E2299DCBA3A9C
        Validity
            Not Before: Apr 30 05:09:36 2025 GMT
            Not After : May  2 05:09:36 2025 GMT
        Subject: CN=6811b091-91b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:36:53:1c:78:66:1b:82:ce:61:d0:a4:5e:80:
                    c1:be:d2:74:6c:17:8c:79:b3:26:ec:38:b2:0b:85:
                    0e:69:0b:42:cf:23:ba:c9:91:c9:a7:e2:2d:84:90:
                    df:25:d1:22:0e:3a:24:23:d3:c8:68:23:31:96:f2:
                    33:8d:de:a5:68:72:dd:0c:d2:b5:7a:a5:e5:fe:44:
                    33:ea:4c:31:ac:18:72:30:5b:69:15:5a:5f:f4:85:
                    11:2f:68:8c:77:db:08:91:54:de:f5:7b:32:ac:ec:
                    ea:4e:31:5a:da:82:4d:61:fe:13:e1:9d:ec:8e:0c:
                    9e:3a:8d:ca:e1:69:0e:f9:e5:05:ff:fb:6e:7d:72:
                    f0:ff:93:0c:6a:04:c0:1c:1a:9b:52:83:bf:f6:d8:
                    32:a3:b3:9c:25:36:28:45:7e:8f:f9:dc:9f:ed:42:
                    48:e0:8d:a1:97:08:1c:41:31:92:8b:6b:62:c9:0c:
                    67:97:68:22:48:1d:e4:1b:e8:35:4f:0a:8f:ce:0e:
                    9e:c5:e2:a6:02:80:a7:fc:a0:31:bd:e1:15:63:28:
                    2d:9c:5d:9e:6e:a6:94:41:2e:54:ca:ca:55:4d:e6:
                    7d:36:a8:8c:40:d1:4c:01:d0:9a:02:de:0d:d3:77:
                    91:3d:ea:f5:c1:02:7f:db:28:14:74:c6:13:0e:14:
                    9e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A5:06:78:91:95:0E:1D:6E:FE:17:42:B3:1D:F1:25:4C:8A:C5:8F
            X509v3 Authority Key Identifier:
                keyid:BF:AD:AE:DC:D5:48:32:0F:C8:F2:C7:98:7C:0E:22:99:DC:BA:3A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v62u3NVIMg_I8seYfA4imdy6Opw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617770/E57BA9D8DC0311EF9C482C52762E951A/v62u3NVIMg_I8seYfA4imdy6Opw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e2:d9:1c:ae:d0:a8:ba:8f:df:cc:0b:a4:3d:bc:f1:79:ea:41:
         db:23:81:74:e8:94:c5:0a:ac:68:f4:00:62:07:21:c8:7f:24:
         cf:3b:4c:4b:03:78:1e:07:33:66:fa:e1:8a:1b:c4:bf:83:90:
         fb:3e:b8:b1:b3:dc:3c:4d:c5:7b:42:20:75:55:3b:95:ae:79:
         bb:65:93:94:28:32:27:32:c1:63:13:a4:4f:2a:d5:b6:60:ec:
         aa:a6:39:88:1f:f7:14:54:7a:93:5e:59:20:25:ee:6e:98:89:
         4f:ae:fd:42:05:17:bc:60:bc:91:e9:ab:f9:b0:e9:64:77:d4:
         b2:30:2d:cc:74:82:60:da:33:89:fe:ff:32:ce:4e:9b:35:3b:
         4d:f7:38:a2:07:de:4a:06:a7:d6:ca:5c:20:b0:dc:cc:d1:80:
         1c:6b:0e:83:23:e4:24:b9:67:34:02:31:62:37:bd:cd:10:5f:
         93:98:ca:ae:21:7d:bb:e8:c0:d5:5a:a4:ca:7d:20:eb:ba:53:
         bb:67:e4:d6:fe:df:5b:89:c9:f3:86:7d:d1:d5:d4:f6:ee:93:
         47:49:43:da:fa:f4:c4:71:31:97:c6:ec:20:03:48:95:79:49:
         5b:df:31:bb:11:6e:bd:a0:e1:e3:03:60:91:cd:70:b8:85:a8:
         5b:5a:d2:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:27:43 2025 by rpki-client