Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
File:                     iVUnx34gFEZnMJDwgWSPGGEnsbo.mft (raw, json)
Hash identifier:          ki/fxglUnBhtK3W4g6CxO4bcOBRIxa4s7Jt8U2LPDLE=
Subject key identifier:   A5:10:B0:5F:F6:F8:22:07:53:09:4A:11:A2:6E:1B:8F:AF:3F:F5:2F
Authority key identifier: 89:55:27:C7:7E:20:14:46:67:30:90:F0:81:64:8F:18:61:27:B1:BA
Certificate issuer:       /CN=F36ED442AF/serialNumber=895527C77E201446673090F081648F186127B1BA
Certificate serial:       0E39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
Manifest number:          0E39
Signing time:             Wed 18 Jun 2025 07:57:08 +0000
Manifest this update:     Wed 18 Jun 2025 07:57:07 +0000
Manifest next update:     Fri 20 Jun 2025 07:57:07 +0000
Files and hashes:         1: iVUnx34gFEZnMJDwgWSPGGEnsbo.crl (hash: NJqWQ1HHZ6/5kLAwoHiQFXHUP9/Ksib392bKX/qXpmY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 20 Jun 2025 07:57:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3641 (0xe39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED442AF, serialNumber=895527C77E201446673090F081648F186127B1BA
        Validity
            Not Before: Jun 18 07:57:07 2025 GMT
            Not After : Jun 20 07:57:07 2025 GMT
        Subject: CN=68527154-cb82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:3e:f3:ba:c3:fc:5c:4d:31:73:e3:0f:2a:
                    31:36:2b:f0:a2:54:6d:fe:05:3e:bc:86:1b:f5:3e:
                    48:63:89:a7:58:ef:7b:a1:3a:3b:62:4e:bb:a9:38:
                    65:a1:26:ff:a0:56:e1:fb:58:fd:ad:2a:9f:5c:52:
                    ed:e4:b1:fd:8e:bd:82:5a:ec:4f:74:de:77:45:da:
                    42:bc:a5:f1:81:59:65:bb:d7:9a:af:c7:6f:d4:76:
                    58:32:19:04:72:c8:a9:61:81:c8:37:55:17:c8:98:
                    71:d0:55:36:20:14:5d:47:67:5f:f7:e9:3f:9f:be:
                    39:31:0c:99:1f:8e:4d:e1:01:9b:b6:04:07:be:7a:
                    66:bc:f0:16:c2:7f:1e:71:5b:fa:5b:85:66:64:22:
                    ab:18:4e:bf:f9:b6:27:65:3d:b4:0b:b6:c7:71:d9:
                    df:ba:33:f6:3f:08:8f:fb:72:27:b8:f3:4e:ec:73:
                    c6:fd:1a:75:6a:10:78:6f:61:dc:d6:d1:b6:0c:90:
                    76:03:b9:31:d0:0e:75:12:05:b9:8a:48:ac:b5:3c:
                    7d:20:08:6d:4f:1d:28:f0:7f:f0:24:fb:89:a4:e0:
                    c9:83:9f:aa:19:00:c3:b5:e8:96:2f:97:9f:5e:d3:
                    37:53:94:da:fd:7b:43:22:e7:e7:41:76:4a:9f:7e:
                    26:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:10:B0:5F:F6:F8:22:07:53:09:4A:11:A2:6E:1B:8F:AF:3F:F5:2F
            X509v3 Authority Key Identifier:
                keyid:89:55:27:C7:7E:20:14:46:67:30:90:F0:81:64:8F:18:61:27:B1:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iVUnx34gFEZnMJDwgWSPGGEnsbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/9ED8257A57C811E5A805BD3EF8AEA228/iVUnx34gFEZnMJDwgWSPGGEnsbo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:35:06:1e:7c:20:08:4a:77:47:d3:3f:21:ec:0d:d0:9c:52:
         36:f9:7b:91:2a:34:fc:b3:09:b0:dc:4b:4d:b6:53:40:63:8e:
         d5:2e:81:95:f8:39:9f:5b:1b:7d:29:3f:c9:33:17:5c:bb:4b:
         5c:52:01:70:b3:0c:b4:d4:74:97:96:06:24:3a:39:89:ce:18:
         51:e0:82:53:ee:bd:71:3e:ea:cf:49:f2:12:d0:62:de:0a:6b:
         21:a2:5f:3d:43:59:90:28:bd:ed:b4:02:5a:ba:cc:14:c5:d7:
         39:25:f3:49:14:aa:1e:34:9a:1b:44:74:e4:b5:d7:90:53:8f:
         2a:a9:4b:c4:0e:f3:98:54:2a:75:b8:0d:23:22:ca:6d:94:a5:
         4f:57:e1:aa:2c:8c:a1:db:37:dd:54:44:fc:fe:b5:cb:7f:7a:
         11:db:24:0e:bf:c1:e4:f0:cd:60:bc:b1:74:6a:fc:31:de:65:
         94:e2:ac:29:1f:0e:f2:9c:1e:03:87:7b:32:80:16:b7:66:dd:
         4d:16:8a:3f:5c:ad:0d:2a:a8:f9:c0:d1:d6:11:0c:20:82:64:
         84:90:0f:33:39:21:b7:b8:ce:ac:32:da:4f:59:14:8e:37:68:
         69:02:eb:a6:de:5c:59:2f:78:09:c0:00:82:e2:47:84:52:af:
         85:48:04:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 19:40:41 2025 by rpki-client