Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
File:                     _VmsIHc1mw1yPSCqmZqOFqhLQZM.mft (raw, json)
Hash identifier:          0lhloL86IZmuzbYo4VjyLH6bCTMVDAkz1sbKeiqmIIM=
Subject key identifier:   B7:CC:CE:76:F3:09:B1:0C:AD:C7:7F:C3:4B:95:B7:BD:AD:60:71:D7
Authority key identifier: FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93
Certificate issuer:       /CN=F36B49FAAF/serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
Certificate serial:       0D0F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
Manifest number:          0D0E
Signing time:             Wed 30 Apr 2025 01:02:26 +0000
Manifest this update:     Wed 30 Apr 2025 01:02:25 +0000
Manifest next update:     Fri 02 May 2025 01:02:25 +0000
Files and hashes:         1: _VmsIHc1mw1yPSCqmZqOFqhLQZM.crl (hash: lBLutyhvJWpe3bDTvTsXeezOqNQk8I+4mrP1n3LxRoA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 May 2025 01:02:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3343 (0xd0f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAF, serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
        Validity
            Not Before: Apr 30 01:02:25 2025 GMT
            Not After : May  2 01:02:25 2025 GMT
        Subject: CN=681176a1-0376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b5:4f:6b:af:5e:a0:17:8a:f0:5c:a5:75:a8:
                    6f:b8:e4:60:d7:36:a6:4e:4c:e7:c4:45:47:f8:5f:
                    82:ab:1a:77:9e:10:aa:a1:b2:87:2d:d9:69:78:4b:
                    ce:16:41:0a:4e:03:d1:e1:cf:46:65:8c:e2:f0:6a:
                    27:22:18:13:7a:51:55:21:dd:50:3c:03:8c:3d:c5:
                    8d:ab:bf:f0:af:02:75:e1:60:91:75:b2:3a:ba:18:
                    3c:50:7e:84:1e:04:d3:9c:ad:33:63:1c:a0:3b:25:
                    16:36:34:c3:bf:e5:c7:21:f3:f4:70:78:67:5b:89:
                    78:e1:9a:ab:29:d2:37:88:19:39:3a:40:5d:da:02:
                    c8:0d:32:bd:22:cd:65:42:36:3e:bd:0c:bd:fa:a8:
                    10:05:47:a6:99:27:e8:80:70:90:b0:9a:55:11:95:
                    5d:88:ed:86:38:c5:4c:de:42:74:b3:0e:00:2d:12:
                    ad:43:50:4f:84:e5:e6:c5:db:21:2a:f9:1e:e4:d8:
                    60:00:80:19:07:12:70:0b:91:75:80:3c:93:01:85:
                    52:cb:ca:0d:28:76:a3:fb:e8:d2:18:11:bc:b8:6e:
                    b9:fe:b2:1d:ee:b9:3a:52:10:af:a8:53:62:43:fa:
                    66:5e:90:b6:3c:46:c3:5d:af:6c:cb:01:52:b3:92:
                    ef:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:CC:CE:76:F3:09:B1:0C:AD:C7:7F:C3:4B:95:B7:BD:AD:60:71:D7
            X509v3 Authority Key Identifier:
                keyid:FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:56:3a:42:f2:2d:31:fe:ac:b5:d2:77:99:5a:95:02:89:c6:
         77:21:8b:86:42:d2:f5:a2:2f:d6:b1:5c:0d:6d:ff:96:6e:1b:
         d6:45:05:ea:21:12:27:b0:a0:13:8e:36:66:5d:d6:e7:d0:9d:
         1f:92:55:52:88:22:27:60:f0:8d:63:b6:12:e3:fd:e3:83:ac:
         b0:fd:fd:1a:56:73:b1:29:47:b2:93:d3:48:4c:a4:06:68:ff:
         04:37:fb:ad:e1:2d:8e:75:53:23:fb:bc:4c:ce:1c:33:d0:a0:
         9d:d9:11:41:17:58:cb:7c:43:6d:d6:d7:2a:a4:93:a4:99:2d:
         00:16:de:19:a3:4c:4e:6a:6c:7b:94:4b:80:2a:d4:5f:08:f4:
         3b:a9:51:39:89:e9:84:e8:07:29:81:3f:e5:d9:4a:a0:09:57:
         2a:3b:57:30:97:83:45:60:36:fb:19:dd:c9:7c:1e:ee:58:00:
         8f:4b:87:e0:81:f4:59:ac:84:b6:f0:cb:4f:09:d8:d2:25:08:
         4b:f4:af:30:f8:83:56:f0:c0:6f:dc:b2:dd:15:5b:80:20:85:
         8f:4e:bd:2c:67:1d:08:54:85:09:71:32:17:1c:ee:4c:de:45:
         93:a3:ef:4b:3b:bc:eb:96:2a:b3:4d:0f:a3:35:b5:ed:f2:aa:
         72:90:5c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:12:40 2025 by rpki-client