Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
File:                     JBS5msCAHawVts3PjThpoMT_Gh0.mft (raw, json)
Hash identifier:          rohTPHCr/ikFTvHqycUPDMPPJ7iNXnNgkRp0kjYlhVQ=
Subject key identifier:   31:FA:AD:A8:73:14:DC:51:2E:74:9F:9B:59:8B:BD:20:A7:94:7A:1D
Authority key identifier: 24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D
Certificate issuer:       /CN=F369AFD9AF/serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
Certificate serial:       04EA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
Manifest number:          04E8
Signing time:             Mon 04 Aug 2025 02:53:18 +0000
Manifest this update:     Mon 04 Aug 2025 02:53:17 +0000
Manifest next update:     Wed 06 Aug 2025 02:53:17 +0000
Files and hashes:         1: JBS5msCAHawVts3PjThpoMT_Gh0.crl (hash: 5APdI9UOQUB8zYLhAe5RtLr2RuN1XuMyWjLzEIv+oGg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 06 Aug 2025 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1258 (0x4ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369AFD9AF, serialNumber=2414B99AC0801DAC15B6CDCF8D3869A0C4FF1A1D
        Validity
            Not Before: Aug  4 02:53:17 2025 GMT
            Not After : Aug  6 02:53:17 2025 GMT
        Subject: CN=6890209e-5000
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:c3:ac:11:51:06:4b:e8:ce:ce:45:7e:fb:92:
                    7e:4a:9c:43:76:6d:a2:53:f2:0d:0b:f1:f4:47:aa:
                    71:de:b4:3a:cc:d2:99:02:9c:b3:8f:b9:9f:10:47:
                    f0:67:8f:e5:90:ff:b0:10:8c:a6:5e:7b:64:57:ac:
                    86:4a:f1:17:91:be:68:47:4b:68:71:44:a5:cc:b5:
                    88:fb:c6:e7:04:6a:8e:02:3b:cd:9d:fe:23:5a:29:
                    36:9b:90:9f:dc:bc:92:53:69:31:83:12:2d:83:77:
                    44:4e:5f:17:ab:f8:5b:a7:3a:8a:a5:f9:fb:e6:e1:
                    83:dc:4b:40:28:09:4e:62:1b:cc:4c:0a:40:2f:16:
                    ff:74:cb:a7:ca:ca:b2:6c:47:57:c9:eb:57:e4:c4:
                    1d:b3:87:29:93:5c:36:3e:e2:6f:e2:9e:fc:cc:18:
                    f7:8e:1b:2a:39:98:3e:e4:a5:97:58:bf:8e:a3:53:
                    05:2f:5c:b8:6f:a1:bd:c1:49:a7:f2:0c:68:d6:19:
                    51:90:79:7b:dd:a0:70:8a:43:55:d9:d8:13:8c:e8:
                    01:cd:74:78:76:4e:83:c4:af:84:18:3a:3f:ed:d8:
                    ea:35:d6:d7:0b:71:9a:96:d4:49:9d:9e:75:a6:2f:
                    71:86:9f:ac:da:a3:94:2e:8c:9b:f9:39:fe:9f:28:
                    ec:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:FA:AD:A8:73:14:DC:51:2E:74:9F:9B:59:8B:BD:20:A7:94:7A:1D
            X509v3 Authority Key Identifier:
                keyid:24:14:B9:9A:C0:80:1D:AC:15:B6:CD:CF:8D:38:69:A0:C4:FF:1A:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JBS5msCAHawVts3PjThpoMT_Gh0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369AFD9/AC4F9A86B44511EC9DB81AC85A40D577/JBS5msCAHawVts3PjThpoMT_Gh0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:5e:91:e2:86:95:bd:eb:27:9a:70:44:0d:68:f0:0a:b6:5a:
         ac:7d:e4:ab:1f:0e:17:07:6a:88:04:77:44:58:a5:b8:33:60:
         7e:e2:af:e5:f8:03:f4:c6:ae:89:15:5d:b3:2b:a9:d7:da:41:
         b4:b7:54:b6:00:9a:0d:fd:fa:ff:36:60:03:9d:78:74:c9:6d:
         7d:64:9b:4e:9e:05:99:b6:d1:22:81:92:3f:15:a7:c6:70:c0:
         3f:0c:2b:10:75:09:b2:86:73:6b:7a:3a:b9:b2:a8:3e:83:22:
         7c:b8:95:b2:ab:f1:98:c5:86:b6:2a:aa:23:4b:11:d2:f3:00:
         dc:5d:48:37:65:c0:80:57:6f:b8:c0:71:51:8a:51:21:8f:fd:
         87:ea:73:56:ad:be:88:cb:e2:89:36:ca:e7:33:db:50:fe:bc:
         84:81:1f:ec:18:be:58:8a:4f:2e:86:70:c3:c8:ab:e7:3a:9e:
         84:dc:98:b7:3e:6b:64:ef:46:3b:2f:93:80:81:d9:00:59:05:
         ae:94:6a:10:ef:02:3a:b2:cb:92:ea:55:b6:46:27:1e:89:c7:
         92:30:fe:8c:d9:fe:0f:0f:f9:ea:d3:5d:7f:3e:6f:dc:0a:0c:
         2d:89:6e:84:14:a8:46:bb:66:4a:ca:de:7c:ff:97:be:8a:5a:
         44:0e:fc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:28 2025 by rpki-client