Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
File:                     GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft (raw, json)
Hash identifier:          /QkaAomEHnMDnoxExBO5fYIubukMgqmEyJ+rTwE9dIo=
Subject key identifier:   99:74:03:7F:B7:83:74:80:56:DD:A8:AB:15:98:F9:54:B5:2F:04:0D
Authority key identifier: 18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3
Certificate issuer:       /CN=F361E99DAF/serialNumber=18DA682C1E3EC3464D391D9B71A5B852A6C9B6E3
Certificate serial:       0630
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
Manifest number:          062E
Signing time:             Sun 27 Apr 2025 02:07:07 +0000
Manifest this update:     Sun 27 Apr 2025 02:07:06 +0000
Manifest next update:     Tue 29 Apr 2025 02:07:06 +0000
Files and hashes:         1: GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl (hash: XHQ5b9Xagi3sNPtHzoMPH0O1SPjNVY4i4Z95+YwHEnY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1584 (0x630)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361E99DAF, serialNumber=18DA682C1E3EC3464D391D9B71A5B852A6C9B6E3
        Validity
            Not Before: Apr 27 02:07:06 2025 GMT
            Not After : Apr 29 02:07:06 2025 GMT
        Subject: CN=680d914a-1f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:51:f7:83:88:1c:f6:c1:5a:fc:a9:ab:93:d1:
                    62:54:01:ec:25:b3:60:d8:1e:8f:7f:66:2c:6b:2e:
                    64:90:ac:60:a1:31:97:ed:b0:08:3f:38:bf:79:40:
                    30:5d:9f:44:63:88:86:f1:04:fa:0e:f1:5a:6e:3e:
                    86:8b:0d:37:8d:32:45:b1:e2:6e:a8:74:24:73:49:
                    80:eb:9d:fa:e6:26:cc:14:cd:89:c8:a3:7c:dc:fe:
                    0e:e3:d8:3f:60:d2:a5:29:58:5a:3d:d2:6a:c1:94:
                    79:06:3a:cc:10:7b:58:2a:65:d0:19:3f:21:2c:23:
                    17:f9:1a:5e:2c:2e:18:74:69:24:89:bf:ac:6b:7b:
                    ae:bd:49:15:df:d7:4b:54:f3:e3:0b:2d:06:cc:44:
                    ba:e9:8e:ca:5d:bd:08:c2:97:b0:29:1d:b6:e4:a9:
                    f7:90:d0:66:d5:4e:b3:5e:14:b9:ee:92:84:2b:53:
                    3a:0d:ed:05:80:9a:72:97:ef:ec:17:b4:16:14:4d:
                    11:6b:a3:d7:06:59:15:a7:e9:57:79:fc:a4:77:64:
                    e8:ab:65:d7:56:f0:96:c3:54:05:2d:88:94:b8:06:
                    2a:4f:69:5d:b3:c1:b1:8e:60:77:4b:8b:8f:a7:da:
                    b2:32:c6:55:09:29:b7:d5:1f:e6:fd:37:4a:3d:e9:
                    ec:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:74:03:7F:B7:83:74:80:56:DD:A8:AB:15:98:F9:54:B5:2F:04:0D
            X509v3 Authority Key Identifier:
                keyid:18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:50:fe:de:90:e9:1f:94:58:5b:28:e0:84:af:05:eb:6c:47:
         83:db:40:1f:12:60:8c:1c:ae:e6:b5:bc:03:5f:36:37:e6:6c:
         6c:42:34:4f:3d:17:58:0f:6a:bd:ee:c7:8a:4c:b5:83:f6:e0:
         f7:c3:52:66:c7:60:17:32:8a:cd:c5:e0:14:1d:9a:bf:d5:a3:
         43:68:17:73:bb:e6:b6:fa:63:0f:d4:be:0f:1a:10:22:10:6d:
         fe:74:bb:a1:ba:17:4f:b5:df:4d:26:18:f8:74:5d:48:54:b4:
         7e:20:30:e3:1d:85:fb:72:83:ef:65:b3:28:5a:37:96:1b:1d:
         48:43:21:c8:2c:d1:02:d2:e6:e8:0f:43:b3:31:06:18:b0:5e:
         5b:a9:29:68:13:0b:75:f5:b4:35:06:16:b5:2b:d7:87:6a:8e:
         62:f5:f8:05:0c:2d:e5:b5:8b:10:68:42:b0:60:c7:4d:59:94:
         35:44:86:d3:8d:95:63:d5:18:c2:bf:c6:1b:95:37:f7:db:e2:
         7a:37:d7:9e:09:29:34:5d:87:ed:78:28:98:42:8d:00:37:cc:
         6f:e2:cb:b8:7a:3a:98:3e:58:e3:ea:81:2c:f2:69:86:01:de:
         06:63:00:06:e0:b7:43:7b:bd:34:79:d5:02:25:df:8a:6c:56:
         a0:ed:7e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 21:04:00 2025 by rpki-client