Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
File:                     ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft (raw, json)
Hash identifier:          wh8C7nsJDRzbix7Iz57PMCdJE0EZqQszdeii4izgmYY=
Subject key identifier:   7C:64:B5:0C:26:EE:99:7E:27:64:B8:32:86:D9:45:AF:CB:1F:60:2B
Authority key identifier: 01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
Certificate issuer:       /CN=F36C4E2CAF/serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
Certificate serial:       0426
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
Manifest number:          0425
Signing time:             Mon 28 Apr 2025 03:07:48 +0000
Manifest this update:     Mon 28 Apr 2025 03:07:47 +0000
Manifest next update:     Wed 30 Apr 2025 03:07:47 +0000
Files and hashes:         1: ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl (hash: sw02YFCpH8TDk/RexeRsPPGKpvAXsFlgEr1pm+Y0glw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 03:07:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1062 (0x426)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4E2CAF, serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
        Validity
            Not Before: Apr 28 03:07:47 2025 GMT
            Not After : Apr 30 03:07:47 2025 GMT
        Subject: CN=680ef104-3886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f2:f3:5d:48:22:da:9b:31:a8:6e:3a:a4:86:
                    3b:aa:7a:b1:51:52:7a:5b:72:74:8e:ab:bc:9d:09:
                    ea:42:c3:86:4c:7e:36:52:29:a0:b5:3e:a1:d0:bb:
                    4c:25:d9:56:ba:2e:46:f4:31:b9:af:9b:a5:01:69:
                    4a:4f:91:b2:8c:97:a5:13:a8:e3:01:c1:d5:6a:d1:
                    7c:ed:48:4d:47:e1:82:19:09:68:f8:91:6a:20:91:
                    ef:04:13:db:48:5d:3f:73:aa:a7:a1:17:d2:f5:ee:
                    fe:2f:19:c9:44:8f:ae:d8:93:d4:c3:aa:ef:7e:c0:
                    65:2c:fa:75:ad:f0:6d:4f:cd:c3:02:4d:a9:99:14:
                    5c:a7:1f:23:22:95:54:a7:2b:88:43:62:fc:62:48:
                    32:bd:5f:1e:c3:28:33:f6:b3:ec:2c:70:8d:f2:89:
                    a1:5a:8b:95:88:ec:78:9f:41:69:d0:23:35:8e:79:
                    16:b7:99:d4:8f:bf:b3:a3:e6:7c:13:9d:2e:06:a9:
                    f4:2a:ad:b7:99:c4:fc:e4:8b:45:02:30:6b:30:83:
                    1e:c2:27:6e:98:bf:0d:31:db:32:5a:e0:d9:73:02:
                    36:d4:76:0a:50:ac:fb:e0:cb:bd:65:bd:b4:45:a6:
                    ee:06:24:ee:65:c2:cd:60:fd:c6:e4:e0:8d:73:6b:
                    ba:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:64:B5:0C:26:EE:99:7E:27:64:B8:32:86:D9:45:AF:CB:1F:60:2B
            X509v3 Authority Key Identifier:
                keyid:01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:d8:4d:ae:02:12:ec:ab:4a:d2:56:22:a2:dc:f8:b3:17:40:
         68:66:16:19:45:ed:c5:6b:00:8b:cd:8e:08:3c:70:4b:87:50:
         2c:1c:6d:d4:da:90:4c:0a:c5:05:4a:d9:c8:22:6b:2c:f5:0c:
         86:01:fc:0a:45:8b:05:67:83:b6:fd:f5:8a:8e:7d:12:e7:f9:
         58:56:db:0b:92:78:ac:4b:17:9b:6b:95:d8:0b:ba:47:fa:43:
         37:31:28:07:df:60:06:6a:6f:31:05:01:0e:a2:e8:4f:2e:6c:
         d6:0d:6b:9a:4a:b3:8a:e1:5c:d6:d2:65:69:cb:6f:4a:59:a6:
         22:cd:b3:4c:07:56:48:41:f4:5f:60:17:2b:4b:51:05:70:57:
         7a:0f:7f:af:c2:09:06:3f:0b:44:53:47:dc:81:d8:e2:2a:03:
         11:03:d2:24:a3:86:af:9f:78:f0:12:a3:0c:c8:6d:26:bc:fe:
         39:6f:92:ed:23:b7:0e:7c:ea:e7:02:85:80:93:f9:f3:6f:20:
         67:06:76:74:fa:d0:db:43:5d:8a:52:1a:fb:df:6e:bd:99:4b:
         53:0c:1d:ad:c2:c7:db:5c:ee:df:f1:76:f5:78:29:a3:4f:8a:
         5d:19:63:c9:4e:51:91:87:a0:e1:15:1a:92:0d:2d:65:f4:5c:
         87:c3:5a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:10:00 2025 by rpki-client