Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
File:                     _VmsIHc1mw1yPSCqmZqOFqhLQZM.mft (raw, json)
Hash identifier:          IC+HfzUncQQWF1QCA/92lazQk/d4NDmMU6JSx7GWuEI=
Subject key identifier:   ED:D1:42:AD:30:E9:90:16:D0:F6:B0:BA:52:D9:F7:63:AB:F5:AF:23
Authority key identifier: FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93
Certificate issuer:       /CN=F36B49FAAF/serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
Certificate serial:       0D42
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
Manifest number:          0D41
Signing time:             Thu 19 Jun 2025 01:02:26 +0000
Manifest this update:     Thu 19 Jun 2025 01:02:25 +0000
Manifest next update:     Sat 21 Jun 2025 01:02:25 +0000
Files and hashes:         1: _VmsIHc1mw1yPSCqmZqOFqhLQZM.crl (hash: nSuLQ8IPjjEwvPFP1ICv6l0t1T2Ds8vVhHzE1002D10=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 21 Jun 2025 00:06:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3394 (0xd42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAF, serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
        Validity
            Not Before: Jun 19 01:02:25 2025 GMT
            Not After : Jun 21 01:02:25 2025 GMT
        Subject: CN=685361a2-4caa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4d:78:3a:3c:5b:ad:5c:d0:48:22:73:9b:8b:
                    22:c0:bc:86:16:0a:06:87:1a:5e:4b:d3:d8:ef:ad:
                    10:40:86:54:09:11:9b:d3:ef:2b:75:09:53:ab:f8:
                    df:03:fe:b2:a2:73:dd:e3:62:ca:72:70:84:d7:e2:
                    81:01:ab:8d:15:46:9e:ff:2b:40:a4:0b:2c:d1:19:
                    d0:80:9b:38:c2:da:8f:db:dc:94:b2:72:2e:f1:f2:
                    4d:10:de:41:58:ca:77:f9:30:83:e5:14:dc:73:e9:
                    47:1c:73:d3:bf:8d:51:e5:b6:ef:0c:f5:95:f6:17:
                    eb:9c:6b:34:cb:2d:17:66:4e:95:e3:e6:27:6f:e2:
                    02:da:60:91:fb:ab:40:6f:4b:3b:16:c8:89:27:17:
                    d0:7b:4e:db:bf:63:e0:ed:9b:1f:a1:14:12:0f:4b:
                    8e:05:22:7d:aa:10:2a:03:55:57:61:e3:4d:e4:01:
                    b1:2f:01:bb:c5:fd:19:aa:61:ee:6e:08:77:e3:58:
                    85:6b:43:f5:50:91:1f:c8:4e:ee:a9:52:a6:61:c4:
                    fb:3f:f5:f9:c0:a6:78:35:02:85:ea:00:68:71:90:
                    17:93:2d:d8:c1:40:0d:12:f0:75:91:be:a6:99:8f:
                    60:c5:65:9e:fc:e7:f9:91:8a:5e:ec:e8:e1:15:79:
                    e6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D1:42:AD:30:E9:90:16:D0:F6:B0:BA:52:D9:F7:63:AB:F5:AF:23
            X509v3 Authority Key Identifier:
                keyid:FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:22:d7:be:b3:80:71:74:db:d9:82:80:03:f3:a1:51:34:9d:
         7d:84:ad:8d:43:98:48:25:c2:39:ea:e4:ea:b4:1a:46:72:b5:
         a7:6b:c3:7f:92:a2:41:a5:16:d2:cc:f8:08:0f:ab:9f:c6:8e:
         2f:fb:e4:f2:0d:32:d0:69:bc:d1:33:50:18:7c:d3:17:ec:36:
         e1:96:fa:04:65:06:8d:28:50:f9:7e:87:37:5c:af:54:32:37:
         d4:86:c5:bf:5d:07:78:cf:f1:dd:38:a5:fe:55:70:78:e4:99:
         9b:e8:73:80:94:ae:2f:03:04:1c:ba:ab:23:7c:85:87:ed:e7:
         19:7c:94:32:40:84:10:a5:38:04:4a:1e:6d:fa:b7:e7:81:85:
         96:9d:8e:7f:3c:7c:02:55:b7:1b:5c:0e:96:80:1d:c2:1b:6c:
         a3:c7:88:c9:8e:f4:2a:87:f8:2d:d2:47:a2:6e:74:85:81:41:
         a8:c8:fd:1d:d4:63:4b:b1:c2:c2:67:1a:2d:be:55:44:51:be:
         98:b0:5a:bd:69:2c:03:6d:45:59:f6:e8:67:0a:57:43:05:65:
         8e:d8:68:0c:83:ec:e6:5f:4b:57:b7:a3:da:7c:d7:0e:3e:77:
         84:65:a7:ec:1f:c5:42:4e:93:4c:0b:8e:41:49:5a:85:63:e3:
         87:66:ea:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 07:34:20 2025 by rpki-client