Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
File:                     hv5z7TaP-SiSCjS0l1tObR5U4GM.mft (raw, json)
Hash identifier:          LUWEtnGcUSZQ4agbcmfill/yEgH/eGsEzeaTcRgtcHo=
Subject key identifier:   51:3D:88:43:35:2C:D6:75:8F:78:34:C4:11:F8:C6:37:FD:74:66:48
Authority key identifier: 86:FE:73:ED:36:8F:F9:28:92:0A:34:B4:97:5B:4E:6D:1E:54:E0:63
Certificate issuer:       /CN=F3627A5BAF/serialNumber=86FE73ED368FF928920A34B4975B4E6D1E54E063
Certificate serial:       0159
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
Manifest number:          0159
Signing time:             Mon 16 Jun 2025 04:45:22 +0000
Manifest this update:     Mon 16 Jun 2025 04:45:21 +0000
Manifest next update:     Wed 18 Jun 2025 04:45:21 +0000
Files and hashes:         1: hv5z7TaP-SiSCjS0l1tObR5U4GM.crl (hash: KhWUAE4Nttrel1u2cnKiIoKeSAfqXFEtDKllY51PkCs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A5BAF, serialNumber=86FE73ED368FF928920A34B4975B4E6D1E54E063
        Validity
            Not Before: Jun 16 04:45:21 2025 GMT
            Not After : Jun 18 04:45:21 2025 GMT
        Subject: CN=684fa162-f5a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b4:02:c3:f2:5b:cc:3b:92:80:9f:b5:b4:7f:
                    25:79:67:54:20:bf:ed:51:6f:83:bd:c8:8d:ee:ed:
                    38:61:a5:53:79:f9:93:14:74:e6:df:ec:86:20:94:
                    b4:2a:17:c7:14:c2:c1:48:ca:e8:5f:81:cb:25:a5:
                    e1:f4:71:30:7b:c4:3c:dc:df:b7:c6:52:9e:63:f0:
                    aa:ce:6e:00:bc:5c:5b:ff:89:c9:a4:ff:c6:75:c7:
                    40:0e:9e:cf:ba:53:77:4a:0e:93:5f:43:5f:e1:13:
                    a1:91:30:62:7a:e8:3a:4e:71:42:aa:d4:13:4b:e0:
                    c7:25:28:05:4c:b9:d2:c1:c6:d0:07:28:f4:78:44:
                    0c:78:5f:61:c3:b1:ad:0a:f7:d3:00:41:13:94:33:
                    0a:96:f5:9e:1b:d1:f9:f8:fb:8f:a7:54:08:3c:63:
                    b6:b5:53:79:5a:3c:fb:06:cc:23:64:d8:0c:af:79:
                    3b:a0:04:34:71:bb:1d:82:bb:d8:b2:bd:e3:6b:d2:
                    94:42:e1:1e:7b:4f:45:80:8d:91:b4:e0:50:d0:93:
                    98:6a:fd:d6:c7:66:dd:07:1a:b8:0a:30:1c:1d:3c:
                    17:f4:9a:fb:4b:f6:28:2d:77:9b:8f:29:ef:53:ee:
                    62:da:07:a2:06:35:4c:62:76:21:f9:b8:db:d2:55:
                    1b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:3D:88:43:35:2C:D6:75:8F:78:34:C4:11:F8:C6:37:FD:74:66:48
            X509v3 Authority Key Identifier:
                keyid:86:FE:73:ED:36:8F:F9:28:92:0A:34:B4:97:5B:4E:6D:1E:54:E0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hv5z7TaP-SiSCjS0l1tObR5U4GM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A5B/6C5DCE44434411EFB7629DBE762E951A/hv5z7TaP-SiSCjS0l1tObR5U4GM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:cf:90:cf:c0:40:9b:1f:8c:5c:67:ba:66:cf:62:c5:ee:6f:
         ed:37:59:08:60:a3:e4:a0:91:28:a3:c8:94:08:ff:cd:0a:be:
         4b:ce:5c:52:bd:33:7f:af:36:1a:15:8a:23:80:ab:4b:6d:3d:
         3c:68:f8:35:77:1b:3b:06:02:a9:e8:85:08:a2:58:5b:7b:33:
         db:76:ad:83:b1:6f:78:07:a3:43:b1:0f:f2:3b:bc:65:58:38:
         67:11:86:f2:6b:ce:d3:67:dc:42:2c:7c:d7:9e:ca:5f:94:08:
         8f:9f:da:33:64:57:b5:ef:07:73:ab:f6:24:70:da:6b:5e:ab:
         11:5c:c9:f8:6e:41:ed:25:2f:13:96:8a:92:8f:03:23:47:4e:
         ba:74:4d:94:ed:5d:67:9e:ee:a8:1c:76:56:d9:e8:48:1b:65:
         2e:43:d1:b4:51:f3:c4:65:08:5c:af:9a:e8:6f:6e:ed:44:cb:
         ce:98:87:86:ec:7b:67:48:ad:74:50:cc:8f:1f:f0:16:6c:49:
         09:9b:a9:43:c9:b6:12:85:41:4c:ac:d0:d5:a9:6c:79:ee:b5:
         d8:9f:f7:6f:27:ed:db:64:5e:4c:27:c0:b7:64:5b:1a:d3:e2:
         d9:57:75:f2:99:c6:34:ff:75:4b:43:2b:66:55:57:54:e3:1f:
         05:4d:22:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:35:50 2025 by rpki-client