Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
File:                     OwiJEFfOiidoEQQFlcyqxAjfUaY.mft (raw, json)
Hash identifier:          X688dDPCChlBXQdqW7GMUTFx8qXqrF1++DAl3WmRzR4=
Subject key identifier:   7C:73:48:D8:73:A2:7B:56:93:85:D2:C3:F9:99:A2:02:42:A4:31:3A
Authority key identifier: 3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6
Certificate issuer:       /CN=F3679CB8AF/serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
Certificate serial:       0510
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
Manifest number:          050F
Signing time:             Mon 28 Apr 2025 02:46:13 +0000
Manifest this update:     Mon 28 Apr 2025 02:46:12 +0000
Manifest next update:     Wed 30 Apr 2025 02:46:12 +0000
Files and hashes:         1: OwiJEFfOiidoEQQFlcyqxAjfUaY.crl (hash: SgLo248CU7FchqiVca4efRy5gnkIOR/df9rtdvawRJo=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1296 (0x510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679CB8AF, serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
        Validity
            Not Before: Apr 28 02:46:12 2025 GMT
            Not After : Apr 30 02:46:12 2025 GMT
        Subject: CN=680eebf5-708d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:42:72:5c:52:de:07:fe:70:3c:07:1f:53:e0:
                    69:84:29:89:15:d9:fc:61:61:3e:69:a7:24:1d:b5:
                    2a:7f:f7:ac:d6:2c:f0:ea:f0:b8:99:e3:01:22:ce:
                    bb:5c:3a:eb:6c:59:fb:4a:54:24:46:ac:20:96:b5:
                    89:9e:a5:96:08:83:6c:82:8d:8f:fc:37:4f:d6:a4:
                    fe:fe:36:b7:32:6d:5d:a7:c8:61:45:fb:b7:c6:e8:
                    e5:68:eb:b0:b9:f4:c7:6e:ff:36:5a:99:88:f6:03:
                    03:18:f4:97:39:bb:88:cb:63:9a:d7:3c:33:69:2c:
                    ae:3b:6c:6a:07:cb:78:7f:a3:8e:c9:ae:a3:f2:9c:
                    59:6e:21:7b:c4:7a:e8:d9:fa:66:05:1b:8b:04:6f:
                    1d:b6:6f:39:24:31:6c:ee:3e:82:6b:19:9f:95:62:
                    35:1d:09:60:80:5c:60:a9:0e:46:8e:e4:cc:21:f7:
                    0e:cb:60:9b:f4:08:80:b9:1c:82:5c:43:af:a9:f4:
                    53:9c:17:b0:83:ea:83:56:64:6e:cb:e7:1d:dc:4f:
                    64:f2:e6:3b:f4:78:63:95:89:a5:37:f3:f5:23:b1:
                    0d:cc:f6:19:86:69:88:85:ef:b7:e4:0b:01:cf:ca:
                    85:98:c1:9e:e2:f0:e7:8b:06:61:d9:c5:f1:ed:8d:
                    e8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:73:48:D8:73:A2:7B:56:93:85:D2:C3:F9:99:A2:02:42:A4:31:3A
            X509v3 Authority Key Identifier:
                keyid:3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:85:f3:a1:ab:ac:a9:fb:80:d0:37:45:17:eb:b1:14:3f:46:
         13:3d:22:ee:dd:55:5c:37:c4:67:a4:39:6c:f8:ed:32:91:f3:
         8b:9c:ee:b3:c6:d5:0f:d6:73:d6:29:14:fe:43:57:e1:bd:05:
         d8:59:ad:24:ed:00:4f:f6:55:7a:45:6c:b4:c6:1b:09:53:36:
         65:ca:7e:17:2e:11:6e:ac:9d:1f:89:ec:eb:fe:7b:a1:61:fb:
         48:33:de:c3:a2:e6:5c:5c:26:bf:92:0e:da:b8:e6:ed:51:43:
         e0:99:3f:51:87:58:25:86:23:f5:f7:9f:42:8a:88:a5:65:9e:
         b5:e1:58:e3:a1:6c:a0:c8:99:1a:75:43:fd:a2:6c:c8:bf:6d:
         d6:33:c7:8e:f6:eb:9d:a6:ac:af:06:0c:2e:e2:6c:8e:0f:c2:
         bf:18:65:51:b2:75:3b:55:44:89:ec:4c:98:0a:d5:64:a4:29:
         f5:cc:f2:8c:ea:b2:1e:30:50:9a:56:b5:2d:2c:a9:11:8b:5b:
         b3:76:03:30:1e:4f:d5:27:51:42:c6:de:e5:14:81:a0:e0:52:
         80:d5:80:ec:17:42:1e:3e:47:2e:5d:54:0a:58:28:c3:7d:b6:
         ed:7f:b7:82:5a:e4:1f:8f:96:a8:37:67:5e:71:03:f7:27:99:
         3f:d7:47:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----