Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3649F7F/D87A6124FAEE11EB99E2AE31D8A014CE/TPVuEXLS09hhK0RRgkYe6qsf5tQ.mft
File:                     TPVuEXLS09hhK0RRgkYe6qsf5tQ.mft (raw, json)
Hash identifier:          zLhqoriRwQNO8soCV/KbIeE3GrAjEFqHfinJtBe2cfI=
Subject key identifier:   24:2D:07:0D:A9:69:C3:CF:52:F7:40:27:4E:A6:8F:06:44:40:47:80
Authority key identifier: 4C:F5:6E:11:72:D2:D3:D8:61:2B:44:51:82:46:1E:EA:AB:1F:E6:D4
Certificate issuer:       /CN=F3649F7FAF/serialNumber=4CF56E1172D2D3D8612B445182461EEAAB1FE6D4
Certificate serial:       05AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TPVuEXLS09hhK0RRgkYe6qsf5tQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3649F7F/D87A6124FAEE11EB99E2AE31D8A014CE/TPVuEXLS09hhK0RRgkYe6qsf5tQ.mft
Manifest number:          05AB
Signing time:             Wed 18 Jun 2025 09:29:47 +0000
Manifest this update:     Wed 18 Jun 2025 09:29:46 +0000
Manifest next update:     Fri 20 Jun 2025 09:29:46 +0000
Files and hashes:         1: TPVuEXLS09hhK0RRgkYe6qsf5tQ.crl (hash: 2NDD6mPUGoo+XHiZyAQv4LXVaDMItT7Tk6nRD1bGxXU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3649F7F/D87A6124FAEE11EB99E2AE31D8A014CE/TPVuEXLS09hhK0RRgkYe6qsf5tQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3649F7F/D87A6124FAEE11EB99E2AE31D8A014CE/TPVuEXLS09hhK0RRgkYe6qsf5tQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TPVuEXLS09hhK0RRgkYe6qsf5tQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 20 Jun 2025 09:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1452 (0x5ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3649F7FAF, serialNumber=4CF56E1172D2D3D8612B445182461EEAAB1FE6D4
        Validity
            Not Before: Jun 18 09:29:46 2025 GMT
            Not After : Jun 20 09:29:46 2025 GMT
        Subject: CN=6852870b-fd9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3e:80:47:07:35:7f:91:ee:6f:5d:ee:24:06:
                    da:b9:93:37:d6:8c:7d:7b:5d:ce:fa:26:b6:47:a7:
                    3a:97:4b:93:58:ba:6a:3c:d4:54:f1:93:37:f3:0f:
                    a2:91:b9:40:d1:fc:8f:3a:e4:10:2b:c8:c4:f5:61:
                    bc:e3:25:3d:48:a3:56:dd:52:d8:e1:d7:58:63:2b:
                    54:64:13:4b:8d:a8:1b:18:24:47:59:b4:b4:b8:77:
                    72:13:89:d0:bf:6b:ef:88:59:0e:5a:2f:da:84:e8:
                    be:66:96:f0:e8:9f:f3:a9:45:03:63:4f:13:bd:e7:
                    a1:ca:5c:3d:87:b9:47:8d:26:ca:34:fc:d0:54:02:
                    f8:0d:84:38:96:b5:ce:7e:23:9b:81:7c:fa:b6:82:
                    df:47:22:01:b0:e2:5c:fb:ea:60:e5:45:c6:96:85:
                    49:4b:02:d0:d9:1b:11:6f:52:d1:35:e6:5f:5f:24:
                    e1:5f:b8:7a:57:12:18:5f:be:80:a0:9b:2a:2a:41:
                    e8:4d:8a:d8:ea:03:ba:08:b9:5b:87:65:99:78:d4:
                    18:8c:a5:e9:71:a0:d2:48:12:a8:59:fd:3f:a7:60:
                    16:14:f4:a4:80:f9:df:88:fd:1d:67:bc:24:0a:01:
                    29:b7:0b:d3:e0:83:ee:9b:58:65:86:dd:37:64:57:
                    f3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2D:07:0D:A9:69:C3:CF:52:F7:40:27:4E:A6:8F:06:44:40:47:80
            X509v3 Authority Key Identifier:
                keyid:4C:F5:6E:11:72:D2:D3:D8:61:2B:44:51:82:46:1E:EA:AB:1F:E6:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3649F7F/D87A6124FAEE11EB99E2AE31D8A014CE/TPVuEXLS09hhK0RRgkYe6qsf5tQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TPVuEXLS09hhK0RRgkYe6qsf5tQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3649F7F/D87A6124FAEE11EB99E2AE31D8A014CE/TPVuEXLS09hhK0RRgkYe6qsf5tQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:92:27:6c:96:d9:25:45:2a:02:c8:ca:5c:51:51:ce:d0:83:
         3f:97:4a:66:f1:10:b5:16:b0:08:ed:b5:c7:ea:6f:e6:db:48:
         29:53:45:e0:43:23:a3:ca:cf:50:18:3c:dd:55:e2:c4:9f:5b:
         e7:96:09:3f:de:98:f4:90:7b:52:a2:89:af:73:1b:78:87:ff:
         52:fb:31:ff:20:03:c2:69:91:b2:70:14:c4:f3:11:23:fe:d1:
         22:0f:de:af:0e:5d:1d:d7:4d:ac:ee:59:60:4a:a2:1a:ed:ad:
         9f:2c:7a:40:87:1b:82:cf:e5:1e:8f:42:21:86:96:19:22:7b:
         e1:3d:1a:63:ed:80:64:36:f5:6b:08:20:32:9b:69:80:73:e8:
         40:a7:fc:ae:66:b2:d0:b5:dc:cb:00:78:f7:2b:53:a2:3f:5e:
         5a:3a:43:17:5e:7d:e5:3a:09:de:76:18:39:4b:14:52:f4:96:
         d4:3e:32:de:62:1b:40:fc:5c:83:d6:94:28:89:31:5c:7b:a2:
         17:52:6d:02:5c:46:0f:13:8d:8d:8b:96:88:71:df:c3:dd:5e:
         c2:cb:65:87:a5:a9:c0:c5:62:55:ca:82:15:b9:06:e7:fc:65:
         07:2d:4e:20:2c:45:f8:44:76:73:3d:68:da:06:09:5c:a9:e8:
         1c:95:45:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:14:28 2025 by rpki-client