Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
File:                     SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft (raw, json)
Hash identifier:          FPfLBacj5cZxQR8YvCxFD/cfQJokCT18MWTmmFElxT4=
Subject key identifier:   78:5E:42:1D:86:E8:50:8D:D6:17:9C:81:8C:48:46:14:70:43:5A:89
Authority key identifier: 4A:6A:66:3E:7B:46:90:35:3D:2D:F7:B9:50:C9:80:97:C2:80:D5:98
Certificate issuer:       /CN=F3654A44AF/serialNumber=4A6A663E7B4690353D2DF7B950C98097C280D598
Certificate serial:       0354
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
Manifest number:          0354
Signing time:             Sun 27 Apr 2025 03:27:28 +0000
Manifest this update:     Sun 27 Apr 2025 03:27:27 +0000
Manifest next update:     Tue 29 Apr 2025 03:27:27 +0000
Files and hashes:         1: SmpmPntGkDU9Lfe5UMmAl8KA1Zg.crl (hash: XJEeqCxIZO798n/GQB4Cti82MYzGzBA0FcHJB56aXjQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852 (0x354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654A44AF, serialNumber=4A6A663E7B4690353D2DF7B950C98097C280D598
        Validity
            Not Before: Apr 27 03:27:27 2025 GMT
            Not After : Apr 29 03:27:27 2025 GMT
        Subject: CN=680da420-844f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:ca:3c:86:c8:e3:aa:91:02:0b:23:0c:29:
                    04:67:cd:e7:23:58:7f:f3:e6:65:03:a1:c7:e4:e2:
                    55:09:0b:5e:6d:4f:d6:d5:22:bd:0f:95:59:00:b7:
                    28:21:ea:f3:64:92:c2:9a:c8:97:01:6b:15:5d:09:
                    c0:2d:43:a5:e8:f6:fc:02:98:74:ab:83:cf:17:96:
                    6d:64:49:3f:23:12:42:ca:9f:19:e5:c8:5c:ee:4b:
                    c5:e2:c7:b9:1b:6b:05:6d:90:d9:00:6b:5b:8b:ea:
                    a1:c7:58:e4:4a:7f:bb:53:f9:0c:51:72:9b:24:43:
                    cc:6b:eb:95:87:4d:4b:1d:81:cc:b4:7e:e3:bb:42:
                    30:3e:d1:92:30:92:0d:b1:07:55:2c:bd:fe:dd:f9:
                    5f:98:57:cc:4f:8f:7c:34:91:cc:df:f3:dc:bb:b1:
                    10:9c:86:6a:f1:13:6a:11:4f:43:a1:68:49:9a:2b:
                    75:4a:fd:59:05:c5:c4:26:52:f8:83:28:78:11:39:
                    c8:ba:ad:12:12:da:77:bb:b5:de:f7:f6:98:73:b2:
                    77:20:66:5b:8f:a1:e1:fa:c2:9a:4a:ef:d1:aa:ee:
                    b1:d1:ee:d8:81:a6:39:5b:87:74:41:34:b1:f8:6e:
                    cf:78:6b:bc:e1:92:64:98:44:c6:c1:43:c2:d0:1f:
                    b2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5E:42:1D:86:E8:50:8D:D6:17:9C:81:8C:48:46:14:70:43:5A:89
            X509v3 Authority Key Identifier:
                keyid:4A:6A:66:3E:7B:46:90:35:3D:2D:F7:B9:50:C9:80:97:C2:80:D5:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5e:1a:6d:8e:75:20:d4:f6:d2:aa:da:67:73:b7:ce:3b:ad:
         ab:f5:cc:e5:5d:14:ad:8d:41:8b:e8:2d:4a:e3:79:df:f1:32:
         ad:b6:9e:fd:bb:4e:62:8d:1f:27:1d:a1:73:38:f4:88:75:73:
         05:ae:cc:78:3c:77:24:f8:a3:54:6f:d4:9b:fe:17:26:f7:c9:
         3b:95:30:24:90:f1:a4:3d:32:11:a4:c9:2c:e2:f6:6e:c6:a1:
         0e:d8:1b:d7:08:ca:8f:77:9f:a8:27:f5:10:91:52:1d:b8:70:
         d3:50:16:36:63:8a:60:43:65:8f:40:d0:be:3b:22:44:f2:ea:
         2d:a8:e4:2e:db:95:fa:53:03:72:58:d6:6f:26:91:2e:ff:a3:
         05:c4:e3:89:63:e6:2d:0b:56:b3:7d:b2:64:df:5f:e4:9d:76:
         55:e2:80:c9:5f:3c:3e:f4:bc:e1:d6:2c:90:c6:a9:95:76:48:
         8d:4e:ba:76:47:6f:33:5c:a9:74:ec:cc:dd:84:f4:60:14:57:
         2a:f9:3d:1e:38:07:15:0a:c9:30:48:3b:32:0e:2b:a5:a1:60:
         21:9b:87:53:ba:09:52:ae:15:9b:32:e4:6f:2b:b6:26:8e:27:
         1f:cb:08:c4:85:98:43:c9:cd:fd:a1:43:a6:fa:6f:f9:a5:dc:
         4b:f3:a2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:43:43 2025 by rpki-client