Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
File:                     XyKMRr7ytMupTLKfEMNoDuKIPbM.mft (raw, json)
Hash identifier:          237wSbb2eThnX1z3nDHTBjObzuUp/HzmqYvQPJYSP4I=
Subject key identifier:   86:20:E0:58:D2:6D:ED:F8:77:EF:45:CE:7D:99:80:18:FC:B0:47:6D
Authority key identifier: 5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3
Certificate issuer:       /CN=F36A41A0AF/serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
Certificate serial:       02D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
Manifest number:          02CE
Signing time:             Sat 26 Apr 2025 03:46:19 +0000
Manifest this update:     Sat 26 Apr 2025 03:46:19 +0000
Manifest next update:     Mon 28 Apr 2025 03:46:19 +0000
Files and hashes:         1: XyKMRr7ytMupTLKfEMNoDuKIPbM.crl (hash: 3i4QZoiodyZVqRSIlN49z7QnZw9OlZ0cMyxlEu6Krl0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 03:46:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 728 (0x2d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A41A0AF, serialNumber=5F228C46BEF2B4CBA94CB29F10C3680EE2883DB3
        Validity
            Not Before: Apr 26 03:46:19 2025 GMT
            Not After : Apr 28 03:46:19 2025 GMT
        Subject: CN=680c570b-4260
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:55:e9:3a:bc:5d:6b:6a:32:7d:49:84:75:51:
                    4e:81:12:7f:39:3e:39:ef:29:9a:c0:75:6c:34:42:
                    27:f7:5c:69:b2:44:71:60:2f:05:ee:33:4a:66:09:
                    de:ca:cc:4b:c8:38:90:39:1c:2b:54:a3:fd:81:8f:
                    0c:69:33:2a:50:30:d2:4e:c0:60:83:13:37:4b:a2:
                    be:45:e5:67:d6:cd:b0:0f:e1:da:d0:c9:f2:91:ac:
                    20:ad:b9:b6:ce:19:27:63:fb:4b:0c:54:73:11:c6:
                    ca:14:aa:e5:c1:25:63:57:cd:54:0f:cc:ef:a5:f8:
                    be:b6:26:f6:0a:ea:70:8b:f5:53:cc:62:3f:09:c1:
                    b9:46:83:be:f3:73:de:31:51:f9:51:15:a6:6d:2b:
                    23:a4:f0:d6:5f:cd:a9:37:8b:ec:28:dc:67:b5:30:
                    80:5f:24:e0:0a:0b:7d:bb:f7:7b:c2:4b:04:ed:67:
                    8d:dc:b8:e5:2f:95:6a:6c:b9:27:7c:07:cc:71:44:
                    78:42:4a:71:a9:9d:f3:71:a1:dc:13:68:4c:6c:09:
                    57:c2:36:af:a4:f9:2d:f6:cc:7d:b1:61:4c:eb:46:
                    82:98:02:80:7c:ee:a7:37:f2:82:ad:2d:b9:ce:1a:
                    b7:36:d3:57:71:64:c7:33:0f:21:b7:bd:e3:2b:a1:
                    21:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:20:E0:58:D2:6D:ED:F8:77:EF:45:CE:7D:99:80:18:FC:B0:47:6D
            X509v3 Authority Key Identifier:
                keyid:5F:22:8C:46:BE:F2:B4:CB:A9:4C:B2:9F:10:C3:68:0E:E2:88:3D:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XyKMRr7ytMupTLKfEMNoDuKIPbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A41A0/F063CE320A9711EEB9B425234AD9E6FC/XyKMRr7ytMupTLKfEMNoDuKIPbM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b4:3c:1a:33:01:32:6f:7b:76:b0:dc:65:8c:9e:92:b4:c1:
         5e:85:e5:a9:8d:30:e9:07:1e:f1:0f:5b:c6:a4:c0:d4:10:90:
         89:4a:8e:4b:a8:bb:5f:1f:08:41:5e:80:96:1f:02:c7:8d:48:
         33:74:39:53:83:78:fa:57:33:06:71:12:20:ce:86:d8:d9:81:
         c5:f0:f3:26:31:4d:6d:7b:df:d0:01:a7:7d:a1:e9:55:75:5f:
         c0:56:98:57:60:f1:31:7b:1f:be:d1:45:7a:e2:f5:2c:c6:5f:
         84:29:b1:57:9b:67:16:89:a6:cf:c5:90:59:f6:6f:01:4c:52:
         8f:fa:64:73:27:7b:c9:2b:d1:87:34:25:bf:f0:a1:6e:6a:95:
         f0:23:70:7f:b3:18:de:fe:db:17:4b:0e:f0:e7:a8:16:38:47:
         8a:ce:e8:73:13:d7:d7:ce:37:cd:29:e1:d0:41:8f:2f:bf:1f:
         fd:8f:30:97:ba:06:5c:03:59:72:c0:b9:7a:d1:97:bb:78:f7:
         37:24:ee:e4:f2:53:ec:57:58:71:ed:28:23:42:bb:c8:06:6b:
         b7:bd:49:93:3b:d8:12:5f:f9:86:a2:c9:bf:17:77:8e:b5:bc:
         78:5d:7f:3f:58:a9:42:14:0f:8b:fd:07:78:4e:54:0b:57:74:
         1a:e0:20:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:48:44 2025 by rpki-client