Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
File:                     bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft (raw, json)
Hash identifier:          Ro2jQHpaxL61gZ4b9zUxBMryHQmkqEeUvN8skCoEMHs=
Subject key identifier:   7F:17:58:20:88:47:D6:A7:2C:8B:D0:4E:44:48:AF:69:6C:63:AC:44
Authority key identifier: 6C:0B:46:38:4E:93:9A:20:D7:78:36:46:56:64:50:13:B5:F7:66:FE
Certificate issuer:       /CN=F36C3584AF/serialNumber=6C0B46384E939A20D778364656645013B5F766FE
Certificate serial:       0333
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
Manifest number:          0333
Signing time:             Sun 15 Jun 2025 03:41:17 +0000
Manifest this update:     Sun 15 Jun 2025 03:41:16 +0000
Manifest next update:     Tue 17 Jun 2025 03:41:16 +0000
Files and hashes:         1: bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl (hash: OFuVBsE6Yhsughi5E6SqUiXJV9jbXgIBYHmuFyz/v5A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Jun 2025 03:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819 (0x333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3584AF, serialNumber=6C0B46384E939A20D778364656645013B5F766FE
        Validity
            Not Before: Jun 15 03:41:16 2025 GMT
            Not After : Jun 17 03:41:16 2025 GMT
        Subject: CN=684e40dc-8d63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9d:47:99:84:82:1b:fb:32:a6:bd:3e:64:62:
                    f4:0c:cf:e2:3a:0f:20:25:9a:dc:fb:e7:04:28:3e:
                    eb:09:41:65:46:e1:55:01:a0:7e:f2:ec:6e:a5:4f:
                    1a:97:0d:b7:65:68:b5:a1:f3:f0:7e:21:f3:d1:88:
                    b5:83:6a:31:d5:39:4a:6c:57:3c:a7:63:96:10:52:
                    98:d8:22:dd:86:bb:a6:8d:1a:d3:c6:84:47:93:6f:
                    2b:8e:f5:98:7f:aa:05:d1:a0:95:96:1a:76:16:45:
                    f3:4d:e4:8b:44:25:10:45:53:61:79:85:e0:a6:71:
                    d2:90:37:7e:d8:1a:57:2a:ea:a4:7f:5d:ac:90:62:
                    10:16:aa:26:84:b2:c8:a2:69:54:5d:22:c4:1f:6d:
                    a3:34:39:3d:7b:1a:d2:39:05:01:71:bb:b1:e6:02:
                    44:47:28:76:de:10:bc:74:54:d9:26:24:5c:f1:a4:
                    e4:e3:66:a7:57:7a:c2:3f:f6:0d:25:a0:00:5f:db:
                    80:bb:8d:00:cb:5b:73:5c:15:98:f8:19:c4:a6:b6:
                    2d:d6:4a:51:6f:fe:44:d3:d9:75:7d:61:71:79:0f:
                    07:45:b2:4b:55:44:10:5c:a2:a3:8c:96:f4:7b:a6:
                    6b:d0:02:a1:95:aa:85:b4:fe:87:bf:59:e6:25:9b:
                    cc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:17:58:20:88:47:D6:A7:2C:8B:D0:4E:44:48:AF:69:6C:63:AC:44
            X509v3 Authority Key Identifier:
                keyid:6C:0B:46:38:4E:93:9A:20:D7:78:36:46:56:64:50:13:B5:F7:66:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3584/95BF1038DB7E11ED90298FD42F6D8C1D/bAtGOE6TmiDXeDZGVmRQE7X3Zv4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:fd:d7:98:eb:5c:d5:af:65:4f:79:43:33:19:75:73:fa:1f:
         d5:b3:74:28:9e:bf:3b:45:65:f1:cc:37:52:b8:d4:fd:de:0c:
         ee:4a:60:70:fa:b5:51:b4:ea:b2:c8:4b:11:9d:68:4a:db:f2:
         f7:6c:e6:43:4d:70:c0:c6:17:aa:c8:4b:9f:44:47:8b:0d:2c:
         49:a3:dc:f1:e9:ae:0d:18:a9:3b:4d:72:c4:30:b7:67:b4:db:
         fc:ad:2e:ca:70:b2:ac:ed:af:b2:14:b1:2a:48:c5:f4:b1:30:
         6e:3a:76:60:99:cd:cb:8e:c0:bb:45:6d:11:a9:97:bb:87:e1:
         3a:1c:82:f4:da:db:4b:87:78:70:1a:7f:15:e7:34:ad:e7:8b:
         5f:b1:2b:5c:ba:66:6d:36:15:56:28:f3:fd:e4:0b:03:cc:f4:
         6e:e8:b8:bb:13:f8:18:3d:e4:7f:a3:a4:da:38:57:02:b9:dc:
         6b:3f:46:2c:47:fa:be:18:3a:5d:82:12:2d:26:b4:93:c6:10:
         c5:7a:ab:43:df:a1:e1:f1:85:76:3e:48:66:a6:16:dd:d6:b4:
         a5:2e:62:ee:d1:f1:45:c3:48:28:b0:4a:fb:a9:a4:b0:e3:1b:
         79:b3:8e:ff:47:7d:71:d4:88:93:7c:be:b6:9b:0f:b2:3f:6c:
         e3:14:5a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 05:30:07 2025 by rpki-client