Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
File:                     xPPi6r3p45Aa27wxyfJTXN47HG8.mft (raw, json)
Hash identifier:          oF8WWDIoktWOlxlYJfV5S3oJLpziHlXt5LWswIrUBrM=
Subject key identifier:   A5:4F:E9:5B:0D:64:11:5B:93:97:58:7C:53:45:02:C4:59:9F:4A:7D
Authority key identifier: C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
Certificate issuer:       /CN=F36B49FAAR/serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
Certificate serial:       0D0B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
Manifest number:          0D0B
Signing time:             Sat 03 May 2025 01:02:40 +0000
Manifest this update:     Sat 03 May 2025 01:02:39 +0000
Manifest next update:     Mon 05 May 2025 01:02:39 +0000
Files and hashes:         1: xPPi6r3p45Aa27wxyfJTXN47HG8.crl (hash: rMF2BPDQkADZKtoGJ5AxubQyBCT0gUEqDMURoGDWHlQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                          rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 May 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3339 (0xd0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAR, serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
        Validity
            Not Before: May  3 01:02:39 2025 GMT
            Not After : May  5 01:02:39 2025 GMT
        Subject: CN=68156b30-ddec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c2:c6:c2:52:f2:eb:db:42:e0:c5:a4:ab:ee:
                    22:6c:dc:c0:a3:9c:15:c2:dc:1a:fd:a1:0e:2d:c5:
                    d2:77:63:5a:c1:4b:2d:6d:dc:ed:2e:0c:48:ba:57:
                    8e:73:2c:6c:7a:c7:db:49:30:51:0a:b2:16:59:0b:
                    7b:a1:75:6f:40:d2:55:54:6c:16:eb:30:d1:a4:37:
                    7a:f8:95:a5:9d:c2:12:e8:a6:7c:95:33:d8:ae:57:
                    c4:d2:9c:c9:9c:81:5b:39:dd:d9:76:f5:d3:7b:45:
                    63:cf:b2:14:be:78:f4:b7:01:0c:d3:27:a2:8f:8e:
                    31:a4:a2:bd:13:39:38:d6:51:41:32:c3:c6:c2:ba:
                    cf:ab:34:8c:ae:15:84:f8:d1:c9:e6:77:71:9d:65:
                    5c:e0:46:fc:7c:26:10:39:5a:b0:59:07:bc:da:24:
                    b5:b0:24:20:25:ca:27:56:e2:ca:28:31:41:57:a8:
                    f8:0d:9d:d2:64:40:8c:00:a9:aa:12:b8:03:df:73:
                    bf:d3:6b:62:06:a7:02:61:83:99:73:21:f5:d4:97:
                    14:e9:71:0e:ee:11:e0:f5:ac:f9:82:f8:ca:f3:e5:
                    fa:fb:85:ed:08:4e:1b:9d:e6:4d:fa:c2:69:52:ec:
                    d0:93:3e:ec:1f:c4:f8:58:01:f6:d8:17:e0:78:74:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4F:E9:5B:0D:64:11:5B:93:97:58:7C:53:45:02:C4:59:9F:4A:7D
            X509v3 Authority Key Identifier:
                keyid:C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:2c:6c:96:77:4e:0a:2c:e6:9e:d7:93:5f:e3:e2:00:b8:cd:
         4d:04:eb:b2:43:5a:95:f3:76:81:4e:65:7f:3a:46:a5:9f:9a:
         f8:af:a6:4c:b8:b7:22:35:1e:c5:a4:d9:a3:78:98:57:ff:0d:
         bf:80:1d:cc:76:0b:67:f0:b6:e2:eb:b0:d6:7f:50:6c:00:65:
         de:58:2e:e3:47:37:eb:38:77:ef:2d:7e:29:f4:b4:4e:09:97:
         f4:5a:64:ab:33:3c:36:bd:1f:f1:9e:de:24:b4:c8:90:f7:5f:
         c7:a1:1a:c2:bc:6e:45:d5:cd:bf:e7:a1:65:58:fd:a4:54:92:
         b7:de:de:b4:77:a2:6c:01:df:f6:40:bc:d5:70:67:aa:80:80:
         44:9a:14:cc:37:44:9a:99:32:14:35:2e:3f:c3:66:2f:d4:6d:
         7a:d8:bd:01:1a:b6:bc:23:64:a9:a9:ed:70:fd:a2:51:5f:f3:
         91:ce:9f:32:28:8b:5e:44:31:a7:46:b8:b2:43:37:5d:cf:42:
         4d:8d:2c:c4:c0:c3:f6:2c:8e:ec:c7:55:81:f3:62:d1:b3:d4:
         a8:14:38:c6:aa:b4:6e:d7:36:b8:ec:60:03:19:99:20:22:05:
         1b:d6:59:c9:71:67:7a:5f:db:d3:3d:26:b8:50:4b:3a:7a:88:
         12:7d:48:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 02:31:36 2025 by rpki-client