Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.mft
File:                     Ex2mcDsWwqK0jDriza4e_9rh-zo.mft (raw, json)
Hash identifier:          UU6mPiv5B+NgGyld//2aF6Mt2xRh+GbeIRbvbOUooJc=
Subject key identifier:   1E:15:46:C8:EF:08:9D:14:88:1F:D5:81:57:9F:C3:7F:89:BD:59:A5
Authority key identifier: 13:1D:A6:70:3B:16:C2:A2:B4:8C:3A:E2:CD:AE:1E:FF:DA:E1:FB:3A
Certificate issuer:       /CN=F365052EAF/serialNumber=131DA6703B16C2A2B48C3AE2CDAE1EFFDAE1FB3A
Certificate serial:       010D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ex2mcDsWwqK0jDriza4e_9rh-zo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.mft
Manifest number:          010C
Signing time:             Tue 29 Apr 2025 04:47:56 +0000
Manifest this update:     Tue 29 Apr 2025 04:47:55 +0000
Manifest next update:     Thu 01 May 2025 04:47:55 +0000
Files and hashes:         1: Ex2mcDsWwqK0jDriza4e_9rh-zo.crl (hash: QUPlZm+F+EcpPCp3SRsm7rDNc+I9gPszkLQWymAS/C4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ex2mcDsWwqK0jDriza4e_9rh-zo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 May 2025 00:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 269 (0x10d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365052EAF, serialNumber=131DA6703B16C2A2B48C3AE2CDAE1EFFDAE1FB3A
        Validity
            Not Before: Apr 29 04:47:55 2025 GMT
            Not After : May  1 04:47:55 2025 GMT
        Subject: CN=681059fb-2a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:4a:28:15:dd:55:2e:07:25:e4:fd:5c:79:
                    81:ca:5c:d6:a7:22:ad:b2:f6:4b:04:ff:e5:b4:2b:
                    8d:60:9e:59:5e:70:5e:37:c1:ca:af:ee:7f:d1:db:
                    6f:a1:cc:2d:21:a7:7b:b6:20:5c:9c:33:55:cd:68:
                    e2:87:42:60:bb:76:6e:48:93:c5:8f:8d:cd:ee:81:
                    e0:59:65:0f:14:5f:39:d6:80:24:9c:2b:a9:f3:78:
                    92:78:ae:7b:31:ab:d0:90:4f:d2:a9:db:ea:c1:79:
                    6d:48:a5:6b:e2:a8:48:db:21:07:e4:b1:35:87:e9:
                    e9:08:6e:0b:e3:14:ac:e4:97:15:83:25:35:de:ab:
                    5b:53:01:23:eb:66:33:e7:a5:1d:55:b3:19:17:7c:
                    58:0c:29:23:fe:90:f6:ac:af:09:b5:fe:ff:00:26:
                    20:55:22:12:8f:fb:1d:d0:6c:be:1a:32:52:5d:24:
                    20:d7:83:9d:de:82:43:47:27:d6:9f:a9:97:2b:d3:
                    f6:af:d4:0e:1f:a0:3f:0d:e4:18:85:0a:b5:46:27:
                    30:32:65:82:db:11:3e:65:ec:73:1e:6c:05:d6:94:
                    24:bc:4a:b6:9e:26:b2:2e:80:3b:d1:38:3f:be:81:
                    f5:41:cb:e2:04:53:52:fa:5f:28:2c:61:d3:84:d4:
                    c6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:15:46:C8:EF:08:9D:14:88:1F:D5:81:57:9F:C3:7F:89:BD:59:A5
            X509v3 Authority Key Identifier:
                keyid:13:1D:A6:70:3B:16:C2:A2:B4:8C:3A:E2:CD:AE:1E:FF:DA:E1:FB:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ex2mcDsWwqK0jDriza4e_9rh-zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:1a:09:7d:ac:5c:e2:71:55:96:3f:19:5d:7f:c0:86:ab:4c:
         6e:c0:cf:73:98:73:90:9a:f3:bc:66:c4:b2:74:b4:5f:f0:0c:
         b1:f3:6a:c9:7f:2b:22:a8:d3:5c:97:8b:2d:a6:68:14:c1:4c:
         4c:78:92:7d:6f:1f:62:15:cb:bf:4c:3e:8e:74:7d:9f:ff:e2:
         dd:05:37:16:41:78:48:6e:53:b6:46:d5:2c:83:66:c9:82:0d:
         44:3d:d2:95:c8:0d:1d:9f:96:32:a8:f7:57:de:44:c9:20:fb:
         8e:35:82:54:2c:74:76:35:83:13:d3:f7:0e:ae:fe:77:81:b8:
         94:b7:ff:93:a3:f7:58:9d:f6:75:d2:ba:64:c6:da:ea:80:a7:
         75:5b:72:52:22:43:a7:29:84:4e:ab:a8:13:ea:26:3f:51:f1:
         df:19:75:eb:cf:2d:2a:54:76:25:4b:05:22:a4:96:f7:05:21:
         87:62:58:e5:80:79:e0:4e:29:e3:e7:41:27:1d:e0:1b:53:33:
         fa:73:80:db:7d:a2:ac:f1:4d:ef:0b:3c:f2:af:21:9d:3b:60:
         ad:dc:90:90:03:e1:44:06:20:07:4d:45:8f:5f:3b:38:59:04:
         24:79:cb:46:d3:51:2a:71:c5:75:dd:46:2a:3b:20:6c:28:ba:
         95:11:df:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:03:45 2025 by rpki-client