Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
File:                     xE7ima9Yscv0a9HSD8fc2XxqV2g.mft (raw, json)
Hash identifier:          sWb7YMTPJA7jsETe69M8m+B3V2Xum1svDv0XJN+YSCI=
Subject key identifier:   91:6B:75:71:44:8A:40:AC:E2:28:A8:86:8C:23:BF:70:82:F1:43:CE
Authority key identifier: C4:4E:E2:99:AF:58:B1:CB:F4:6B:D1:D2:0F:C7:DC:D9:7C:6A:57:68
Certificate issuer:       /CN=F36A413FAF/serialNumber=C44EE299AF58B1CBF46BD1D20FC7DCD97C6A5768
Certificate serial:       9A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
Manifest number:          9A
Signing time:             Sun 15 Jun 2025 05:10:57 +0000
Manifest this update:     Sun 15 Jun 2025 05:10:56 +0000
Manifest next update:     Tue 17 Jun 2025 05:10:56 +0000
Files and hashes:         1: xE7ima9Yscv0a9HSD8fc2XxqV2g.crl (hash: NqjapLQvjb3ut8+Gj1qXPb8BTtgQlCz9fGRBWrXwNBU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Jun 2025 00:06:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A413FAF, serialNumber=C44EE299AF58B1CBF46BD1D20FC7DCD97C6A5768
        Validity
            Not Before: Jun 15 05:10:56 2025 GMT
            Not After : Jun 17 05:10:56 2025 GMT
        Subject: CN=684e55e1-c9f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f7:35:6f:dc:12:f2:1b:19:0a:ac:64:c0:1d:
                    c6:8f:09:bd:e8:29:4e:6e:3e:3c:8c:c7:19:0e:df:
                    19:6b:24:06:9e:35:c1:5d:58:0b:90:c9:f0:74:8e:
                    d0:14:29:ee:50:3f:47:cb:f1:23:fd:7b:51:64:70:
                    95:28:be:83:3b:ea:3c:79:a3:f6:83:8b:42:ab:12:
                    7f:a2:aa:9e:41:c5:36:8f:1a:e7:be:b3:b6:cd:a9:
                    b6:0b:5d:27:80:fd:25:77:a5:cd:92:5f:74:06:b2:
                    de:a8:13:61:9e:09:99:fe:1c:91:9c:4a:09:c1:b8:
                    1f:8a:38:3a:e1:0b:15:21:be:37:e2:8f:43:d6:4f:
                    66:92:18:8f:e5:c1:5b:6e:8d:1c:ab:cd:63:e3:2b:
                    57:1f:c7:74:cb:62:67:06:cc:79:82:c0:fc:9f:ef:
                    d3:78:7d:81:4d:ca:ee:20:44:bd:d1:63:e9:01:a9:
                    f2:88:bd:cb:55:dc:0c:78:e4:0f:56:91:b6:3d:dc:
                    19:7a:02:53:0c:58:39:f5:07:e9:f9:d6:f5:77:01:
                    88:e8:ea:c5:3f:5f:f5:a4:29:54:81:ff:6b:14:87:
                    06:b9:c0:49:f9:1c:a1:64:78:b9:42:6b:4d:4b:82:
                    4e:ca:5d:58:80:db:b1:d0:d2:2a:e2:51:8c:b7:6d:
                    f2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6B:75:71:44:8A:40:AC:E2:28:A8:86:8C:23:BF:70:82:F1:43:CE
            X509v3 Authority Key Identifier:
                keyid:C4:4E:E2:99:AF:58:B1:CB:F4:6B:D1:D2:0F:C7:DC:D9:7C:6A:57:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:bc:01:99:c8:79:8e:27:d1:0a:a1:c6:44:b9:cc:fa:fd:f7:
         33:31:31:a0:ba:26:63:63:a4:34:e0:1c:7b:21:a6:be:1d:ac:
         7c:e0:fa:91:de:b0:bc:08:0c:b6:9b:8e:5a:66:52:30:3e:fb:
         7c:fc:6a:8b:31:ba:f0:b0:73:ec:51:8e:65:19:00:13:49:28:
         ad:a5:e6:22:6f:90:1b:85:e6:6b:11:10:fc:b0:fb:dc:e3:fa:
         e1:5f:b1:95:df:f3:3f:53:4b:9b:b7:fc:2c:76:f8:37:78:96:
         b0:ee:2c:2c:37:06:8b:88:5d:9d:27:c8:7a:62:5e:4c:e8:59:
         10:e8:7a:a9:60:95:14:87:2d:db:90:bd:d9:2b:b9:91:a4:48:
         8b:73:47:c5:29:0e:2a:8a:6f:ee:3f:9e:0b:77:6d:87:6b:cd:
         c4:a3:e1:10:40:8b:e3:f0:13:b4:b3:e3:c0:de:ab:85:80:37:
         c0:6d:85:7b:5c:ff:06:1d:e1:3c:50:b5:41:cb:48:6b:59:31:
         50:73:d3:1f:d1:db:63:c0:c0:3b:2b:df:8a:cb:cf:e8:47:50:
         fc:f6:ae:37:63:71:16:c5:1f:d4:a7:30:28:cf:f0:74:76:47:
         c6:f5:4d:54:06:7a:ef:b0:bd:e9:c1:92:b7:06:82:30:f1:cd:
         d9:d8:f4:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:26:34 2025 by rpki-client