Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/4BB574F4D45211EF9F7859B1762E951A/wuBZxqiBjrGd_aowkraqE5_oOPY.mft
File:                     wuBZxqiBjrGd_aowkraqE5_oOPY.mft (raw, json)
Hash identifier:          VAUZCOPxvoIFcUSIY+5zy/pYmDuU2ZHMm7qeNkM1tv8=
Subject key identifier:   0B:EC:70:75:EC:57:C6:B2:0D:A8:12:AC:3D:E4:92:1F:00:0A:1A:A7
Authority key identifier: C2:E0:59:C6:A8:81:8E:B1:9D:FD:AA:30:92:B6:AA:13:9F:E8:38:F6
Certificate issuer:       /CN=F36CFBB0AF/serialNumber=C2E059C6A8818EB19DFDAA3092B6AA139FE838F6
Certificate serial:       6A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wuBZxqiBjrGd_aowkraqE5_oOPY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/4BB574F4D45211EF9F7859B1762E951A/wuBZxqiBjrGd_aowkraqE5_oOPY.mft
Manifest number:          6A
Signing time:             Mon 28 Apr 2025 05:14:21 +0000
Manifest this update:     Mon 28 Apr 2025 05:14:20 +0000
Manifest next update:     Wed 30 Apr 2025 05:14:20 +0000
Files and hashes:         1: wuBZxqiBjrGd_aowkraqE5_oOPY.crl (hash: 1PdRluXiuokVxzmbpmZIEtM/RtrSfxQcwojsJS3EGvE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/4BB574F4D45211EF9F7859B1762E951A/wuBZxqiBjrGd_aowkraqE5_oOPY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/4BB574F4D45211EF9F7859B1762E951A/wuBZxqiBjrGd_aowkraqE5_oOPY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wuBZxqiBjrGd_aowkraqE5_oOPY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CFBB0AF, serialNumber=C2E059C6A8818EB19DFDAA3092B6AA139FE838F6
        Validity
            Not Before: Apr 28 05:14:20 2025 GMT
            Not After : Apr 30 05:14:20 2025 GMT
        Subject: CN=680f0ead-897b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:b8:7d:31:68:c8:9f:78:34:55:50:89:40:
                    a3:cb:c4:e9:ee:f1:7c:eb:88:64:04:e0:2c:a5:b8:
                    ab:0c:c2:2d:e0:5f:12:84:21:10:29:53:c8:d0:00:
                    e4:bf:99:98:74:12:ca:3f:63:dd:b9:82:25:d2:5a:
                    5c:1d:c5:f8:3c:4a:71:f3:64:e2:22:20:49:ee:24:
                    20:58:4c:df:91:9f:e2:fd:50:ee:1a:df:28:45:e4:
                    16:1a:14:52:ad:e1:39:45:be:d3:f6:99:66:b7:a8:
                    c9:26:fb:ae:18:d5:1a:25:1f:03:8c:ef:d9:4e:f9:
                    39:3f:ae:16:8f:cc:55:fb:c9:bb:71:44:4c:4d:82:
                    18:f7:63:1c:24:13:3d:5d:64:8c:ae:09:9e:e2:fe:
                    4e:23:97:7f:fa:99:a3:6a:e7:eb:aa:1e:6b:06:f0:
                    7e:6f:f7:28:3c:e1:e1:ee:aa:98:0f:86:0f:c3:b3:
                    c4:38:e4:eb:eb:c2:e8:4d:15:61:f4:c4:dd:50:65:
                    e1:bf:0d:f2:3c:75:e4:8b:59:91:3f:24:0f:09:df:
                    a7:9d:b4:9e:81:fa:25:b9:3b:46:82:aa:06:6c:99:
                    3b:53:d8:20:4f:7f:11:dc:06:c8:5a:3d:64:08:91:
                    89:cf:9b:81:d4:19:ee:34:14:68:80:6b:be:1a:31:
                    b3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:EC:70:75:EC:57:C6:B2:0D:A8:12:AC:3D:E4:92:1F:00:0A:1A:A7
            X509v3 Authority Key Identifier:
                keyid:C2:E0:59:C6:A8:81:8E:B1:9D:FD:AA:30:92:B6:AA:13:9F:E8:38:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/4BB574F4D45211EF9F7859B1762E951A/wuBZxqiBjrGd_aowkraqE5_oOPY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wuBZxqiBjrGd_aowkraqE5_oOPY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/4BB574F4D45211EF9F7859B1762E951A/wuBZxqiBjrGd_aowkraqE5_oOPY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:12:4b:c7:7f:0e:55:a9:99:d8:d5:21:8b:d8:3f:3c:ba:ed:
         32:20:51:10:17:7e:0a:9b:df:6e:97:4b:4e:69:99:ba:29:ea:
         f5:8a:1b:f3:c3:eb:8a:13:e7:97:36:dc:3a:48:12:f4:b8:bf:
         4a:3f:ac:19:ed:86:74:aa:4a:d5:5f:45:cb:34:62:21:61:90:
         54:46:50:53:fa:a0:25:ae:3c:38:f8:8f:46:0c:bb:a1:2a:db:
         4c:0c:2c:4b:7c:eb:1e:ca:30:d5:78:2c:1b:6b:78:c1:03:b8:
         b3:f4:a4:37:b1:13:2e:76:c0:b2:b1:e3:db:72:76:67:be:38:
         23:f1:62:c6:95:12:f5:3c:99:dc:73:5e:af:8b:53:b9:e3:dd:
         45:58:f8:37:60:26:56:c9:7c:47:89:ef:09:43:ee:f1:c7:27:
         a7:54:a4:5c:9c:3b:5d:eb:a6:54:0c:2f:d1:69:01:87:64:ae:
         03:87:18:56:18:22:bf:5e:39:eb:07:4c:5a:fc:93:f1:2c:11:
         c7:e3:37:b0:27:71:9c:6e:80:45:94:38:61:7c:40:2d:75:53:
         ff:78:44:e7:7d:64:f8:fb:05:98:e7:f7:0a:c0:fe:40:3f:8d:
         3a:43:2b:0a:fd:dd:32:cd:23:9a:ff:d3:8d:03:02:20:d3:3b:
         8f:cb:b9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 19:11:22 2025 by rpki-client