Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File:                     rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier:          spFL9tBul5YSGZrAjpmvkLPH7IIxYwh14f7IdkWFMT0=
Subject key identifier:   A7:6D:2C:8F:A1:FE:7D:AB:B0:8B:1B:63:EB:03:C8:D0:29:26:82:4D
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer:       /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial:       0320
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number:          0320
Signing time:             Mon 05 May 2025 03:37:43 +0000
Manifest this update:     Mon 05 May 2025 03:37:42 +0000
Manifest next update:     Wed 07 May 2025 03:37:42 +0000
Files and hashes:         1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: hbeykEnfVxjlhYppkW5rkyXDSOvAwrOOyBfFvhbPWhM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 May 2025 00:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 800 (0x320)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656B95AF, serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
        Validity
            Not Before: May  5 03:37:42 2025 GMT
            Not After : May  7 03:37:42 2025 GMT
        Subject: CN=68183287-92b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6f:83:c6:8a:32:90:a0:82:5a:95:4a:2f:f2:
                    01:e5:b2:31:07:0f:fa:e6:81:4a:04:cd:5d:e0:2a:
                    b7:67:bb:98:d8:c5:c1:cb:04:f7:8a:ca:fe:b0:c4:
                    63:f3:84:c0:3e:d7:57:57:30:08:b9:cb:53:0b:92:
                    e5:35:d0:85:43:bd:d0:ea:11:a0:3b:2b:22:e5:21:
                    b6:bf:80:cb:66:d5:00:60:41:8f:86:0b:24:81:87:
                    bd:c2:59:d1:0c:10:c5:f9:19:d7:46:a9:ad:d7:b0:
                    a6:11:69:d8:e9:49:6a:03:57:16:4b:42:d4:ea:46:
                    4c:1f:61:43:bf:48:32:69:e9:4e:13:6d:2d:02:60:
                    57:4b:f3:63:3d:68:60:aa:76:4a:94:09:75:6a:47:
                    c6:34:79:c7:8e:6b:36:d9:1e:45:6f:6b:6e:b4:a4:
                    de:36:f5:94:65:7f:71:79:fa:e2:e1:57:37:e0:cb:
                    e7:dd:be:93:61:2f:b6:8c:bd:58:13:5d:d5:19:1e:
                    ab:72:8b:5a:61:31:9d:af:c9:92:42:01:4e:c7:86:
                    a2:77:44:68:1f:b4:e3:38:55:06:93:0f:98:a8:73:
                    f3:a8:27:92:3e:b3:76:46:38:db:91:c1:fd:f0:4a:
                    26:9c:a4:23:96:5a:b0:a9:04:ad:50:91:84:3e:94:
                    be:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6D:2C:8F:A1:FE:7D:AB:B0:8B:1B:63:EB:03:C8:D0:29:26:82:4D
            X509v3 Authority Key Identifier:
                keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:8f:23:cb:d5:7a:5f:8c:65:12:4b:db:41:32:38:2a:b6:70:
         28:58:50:10:5b:d0:55:c5:90:19:f4:eb:8b:cb:02:b5:bf:59:
         52:06:82:73:ef:80:a1:d4:e6:26:a8:1f:28:2a:03:e5:b2:75:
         cb:11:d1:b1:45:d3:b0:e7:f1:2d:1e:e6:bb:80:5b:76:2e:17:
         2d:82:bb:b7:90:25:74:9a:10:4b:69:0d:ea:41:80:88:08:3c:
         f8:cc:66:f4:b9:39:bf:37:28:84:41:67:45:f0:16:51:32:d0:
         d2:e3:84:ec:da:f3:25:72:3e:4c:ef:fa:7c:95:6b:48:94:42:
         4c:f4:9e:7d:32:46:d0:1f:67:a7:e5:93:bd:07:c0:d3:48:64:
         cc:97:a2:80:a8:b0:7e:2c:73:37:36:09:2b:f0:c3:26:14:0f:
         bb:ba:8d:17:a6:4a:74:96:51:45:78:6a:bb:26:32:ca:3e:24:
         a9:10:42:72:62:75:85:d9:d9:21:61:b2:b2:6c:a1:48:57:23:
         c9:bc:4f:ae:14:75:e8:20:05:7d:6d:f0:b5:b8:8c:0f:4c:ad:
         87:0b:77:cc:d8:17:a7:10:26:1d:14:74:6d:1d:99:33:89:3c:
         33:a0:b4:f4:30:c2:f9:73:20:a1:79:52:c3:87:0d:d6:2c:18:
         82:39:26:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:55:55 2025 by rpki-client