Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft
File:                     sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft (raw, json)
Hash identifier:          mKt7W/mGFAAZe1OvSTopKBnr/+Yr02pl9Y5++AbxyaU=
Subject key identifier:   33:BC:9F:B6:EE:5D:56:17:F8:51:4D:BA:1B:B5:D8:47:DB:7A:67:26
Authority key identifier: B0:F8:FF:A5:BB:CE:CD:31:3D:F9:8E:A4:4A:4F:3E:A5:CF:D7:C4:7C
Certificate issuer:       /CN=F36702EEAF/serialNumber=B0F8FFA5BBCECD313DF98EA44A4F3EA5CFD7C47C
Certificate serial:       060F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft
Manifest number:          060D
Signing time:             Wed 07 May 2025 02:11:27 +0000
Manifest this update:     Wed 07 May 2025 02:11:26 +0000
Manifest next update:     Fri 09 May 2025 02:11:26 +0000
Files and hashes:         1: sPj_pbvOzTE9-Y6kSk8-pc_XxHw.crl (hash: xcIjsOaqEwwRfuPFqYYTP3dlA0FhG02Bhl8I2ctvFC0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 May 2025 00:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1551 (0x60f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36702EEAF, serialNumber=B0F8FFA5BBCECD313DF98EA44A4F3EA5CFD7C47C
        Validity
            Not Before: May  7 02:11:26 2025 GMT
            Not After : May  9 02:11:26 2025 GMT
        Subject: CN=681ac14f-62db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:75:f8:51:fb:6f:e5:ec:2c:d2:33:ad:f9:08:
                    fc:1c:2f:43:89:6d:6e:08:af:9c:47:62:08:34:a7:
                    e0:b2:a6:a9:20:71:d8:e7:87:1a:c4:ea:32:54:d2:
                    a4:ec:70:be:26:7f:ad:9b:bb:1a:89:da:06:de:88:
                    a5:b6:cf:eb:49:75:5b:58:6e:b8:38:e1:d0:f1:3e:
                    eb:a6:1e:ec:ff:fc:84:09:a9:4e:e7:f2:69:d5:e1:
                    57:48:7d:a2:a6:a5:89:ac:88:bf:da:ae:4c:43:14:
                    e2:88:24:51:64:6c:86:b6:3f:8b:b8:db:91:55:2c:
                    1f:7c:6f:ff:52:be:94:01:70:94:80:13:8e:13:f4:
                    99:37:7c:1c:ad:0e:eb:a5:31:39:4a:23:2a:e6:17:
                    2c:c2:c8:aa:77:ce:72:83:f0:10:bb:2f:a4:3a:2f:
                    47:f6:a6:f9:28:09:04:ef:aa:a5:79:55:38:f8:d2:
                    56:d5:26:26:23:c2:c0:c1:42:19:71:f3:55:a1:a9:
                    dc:bc:2c:db:0a:47:8d:ac:3c:ba:85:ab:90:94:64:
                    ed:ee:69:dd:7e:06:09:fa:fd:6f:e6:38:60:53:ab:
                    f3:34:14:54:2c:a0:ee:a1:7e:93:e3:bb:3b:7a:ff:
                    7c:eb:d2:9a:e4:87:23:14:d5:f6:cd:07:49:4f:7f:
                    74:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BC:9F:B6:EE:5D:56:17:F8:51:4D:BA:1B:B5:D8:47:DB:7A:67:26
            X509v3 Authority Key Identifier:
                keyid:B0:F8:FF:A5:BB:CE:CD:31:3D:F9:8E:A4:4A:4F:3E:A5:CF:D7:C4:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36702EE/3E8613EA8D6311EBAA2EE15EF8AEA228/sPj_pbvOzTE9-Y6kSk8-pc_XxHw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:0b:41:97:84:08:4f:fe:6c:72:7c:cb:cc:72:7f:16:39:42:
         6f:dc:af:21:21:46:b2:c0:67:96:56:7d:0b:f4:92:ad:5b:b0:
         84:2b:39:80:11:e3:45:4a:dc:51:3b:8a:ba:97:ad:40:8b:60:
         94:64:7d:09:ef:44:16:cc:44:55:61:b6:5b:6c:7d:80:0b:c2:
         87:80:f0:87:ba:d5:a9:68:2f:bd:b3:21:1e:d9:a1:8d:91:51:
         11:b7:f1:ab:00:d1:03:76:3a:30:46:94:4b:35:83:98:b5:96:
         0c:71:e0:c1:13:8b:99:e4:72:a8:ba:d6:bf:b8:e0:08:8e:0e:
         48:c4:3f:9e:fe:63:f0:eb:12:ed:19:1d:99:56:40:c1:fd:56:
         02:63:4e:74:fb:c0:df:ba:b8:4b:e9:b7:89:61:c8:cc:28:4b:
         5b:2d:6f:0e:a3:8b:de:3d:af:8a:6d:68:75:6b:74:07:66:3c:
         f2:71:ec:70:45:a7:33:f5:ab:ae:55:e2:5e:0a:9c:1b:30:29:
         d4:67:fc:c9:26:41:3c:72:b2:a4:e3:15:09:39:57:da:6d:f0:
         e8:1f:be:ec:c2:bb:af:74:3d:df:3a:ab:54:d9:3b:f4:3e:65:
         5c:ce:4f:b9:d5:7a:b2:45:db:32:b6:17:aa:86:7e:6d:3f:73:
         8b:9a:61:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 20:57:19 2025 by rpki-client