Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
File:                     qUI_pMACbS5NqCEtEo2dJwfoHck.mft (raw, json)
Hash identifier:          nwQVOT2lU2vEve0HeTjc4KWxqiJgn+2T9QHmj15m5yY=
Subject key identifier:   5B:38:35:E5:A7:6E:3C:ED:4C:C3:21:C8:77:FB:E3:A3:48:A5:90:66
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Certificate issuer:       /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial:       05B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
Manifest number:          05B1
Signing time:             Sun 15 Jun 2025 02:28:27 +0000
Manifest this update:     Sun 15 Jun 2025 02:28:26 +0000
Manifest next update:     Tue 17 Jun 2025 02:28:26 +0000
Files and hashes:         1: qUI_pMACbS5NqCEtEo2dJwfoHck.crl (hash: x1dxax2Uptzzf23glNx6XIsDD/iPJS/nMUX+KSBlnuw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Jun 2025 02:28:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1459 (0x5b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E70F4AF, serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
        Validity
            Not Before: Jun 15 02:28:26 2025 GMT
            Not After : Jun 17 02:28:26 2025 GMT
        Subject: CN=684e2fcb-7395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:63:b5:5f:03:03:f2:ac:17:f6:26:a8:b7:8b:
                    08:6a:05:40:d6:ea:2c:eb:86:8f:d1:82:71:9d:62:
                    55:eb:0d:58:45:84:54:b7:a6:dc:0c:4c:53:7d:98:
                    9c:ea:2f:8c:0f:23:84:a5:bb:bf:55:88:e3:da:44:
                    46:d9:30:1e:e6:f9:d5:fc:ad:15:31:3f:ea:74:9d:
                    78:a1:e9:59:b8:23:81:a2:f5:5d:b3:6c:c6:be:33:
                    c6:f6:90:30:b4:62:fc:a7:e8:76:42:f3:3a:96:de:
                    e1:c7:90:36:e0:4c:58:0b:31:22:10:46:37:44:8b:
                    2b:6f:f1:0d:0a:93:45:34:4e:6a:7b:47:67:58:46:
                    b9:31:d3:7e:75:75:cb:7a:10:75:71:e0:8f:5e:a0:
                    01:90:cd:69:07:03:76:99:89:4d:df:78:a0:b7:9f:
                    46:f4:1d:9f:a3:98:17:98:70:0d:ef:24:38:fc:a4:
                    18:94:62:da:2c:89:d6:2b:99:9c:f0:d2:fa:65:d8:
                    87:af:ff:33:32:7d:14:26:63:22:51:1e:3e:be:57:
                    8c:52:63:6b:ff:38:c0:8b:75:fb:80:ab:65:ff:e9:
                    fb:18:af:44:e9:16:06:fc:b0:fd:49:97:f0:fc:7f:
                    9e:f8:d3:e6:77:57:5d:9c:63:76:a2:ca:09:f4:4b:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:38:35:E5:A7:6E:3C:ED:4C:C3:21:C8:77:FB:E3:A3:48:A5:90:66
            X509v3 Authority Key Identifier:
                keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ed:9c:3e:d6:3c:b7:70:db:16:aa:c7:8e:2e:7e:89:29:61:
         a8:14:6a:b3:e2:22:84:89:80:6b:7c:cd:74:54:31:a4:30:74:
         ba:39:dd:71:e5:c7:9d:1c:49:8c:97:9f:d2:9c:91:0e:1e:6b:
         56:29:73:e4:59:6d:eb:a8:86:eb:72:c2:bc:5a:ca:f6:ce:b5:
         88:78:6c:31:25:00:d9:99:65:2b:bc:bd:9c:0b:a9:28:81:74:
         df:63:b1:98:16:e1:33:b3:26:b5:76:f9:0a:fb:d6:c9:69:2d:
         6c:71:d6:cf:a0:ed:14:33:67:78:ad:cd:e0:75:67:d0:fc:f2:
         29:c0:a3:c1:18:7a:f7:f9:f6:44:d9:b9:96:88:67:d0:4e:74:
         aa:1b:91:cc:bf:cc:8c:88:b7:12:1a:85:19:07:af:57:a1:7c:
         04:1e:7b:02:75:ab:81:81:7d:9f:53:63:18:95:b3:9e:3f:09:
         27:6f:b7:1b:1f:ad:04:a7:b2:9d:94:c3:b2:06:ed:bb:47:a1:
         39:46:1f:8d:9b:39:df:0b:90:50:19:cd:26:23:12:aa:98:b4:
         71:78:6a:77:50:9b:0f:e5:69:f3:4b:2e:3e:7e:e9:af:68:09:
         e1:d3:e9:66:81:eb:6a:55:06:5c:a5:e5:f6:a4:e0:19:70:9b:
         a8:c1:fd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 03:06:37 2025 by rpki-client