Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36999E0/D1F53DAE146311EC96145233D8A014CE/5WM0RkX330scDN9ef2icLgvfkMU.mft
File:                     5WM0RkX330scDN9ef2icLgvfkMU.mft (raw, json)
Hash identifier:          c9U35Qi4NziKE7dJkRgdyHQrbX6Pu3R8ETG3hewWwb4=
Subject key identifier:   BA:49:25:96:F7:5E:F1:71:30:2C:27:C3:AE:C3:4B:21:8E:A0:AA:28
Authority key identifier: E5:63:34:46:45:F7:DF:4B:1C:0C:DF:5E:7F:68:9C:2E:0B:DF:90:C5
Certificate issuer:       /CN=F36999E0AF/serialNumber=E563344645F7DF4B1C0CDF5E7F689C2E0BDF90C5
Certificate serial:       0551
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5WM0RkX330scDN9ef2icLgvfkMU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36999E0/D1F53DAE146311EC96145233D8A014CE/5WM0RkX330scDN9ef2icLgvfkMU.mft
Manifest number:          0551
Signing time:             Sun 27 Apr 2025 02:31:30 +0000
Manifest this update:     Sun 27 Apr 2025 02:31:29 +0000
Manifest next update:     Tue 29 Apr 2025 02:31:29 +0000
Files and hashes:         1: 5WM0RkX330scDN9ef2icLgvfkMU.crl (hash: b5IzJhIhoQ0ht1fYh4IrhTf5hN1Hu8IIAeitByWSrDs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36999E0/D1F53DAE146311EC96145233D8A014CE/5WM0RkX330scDN9ef2icLgvfkMU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36999E0/D1F53DAE146311EC96145233D8A014CE/5WM0RkX330scDN9ef2icLgvfkMU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5WM0RkX330scDN9ef2icLgvfkMU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1361 (0x551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36999E0AF, serialNumber=E563344645F7DF4B1C0CDF5E7F689C2E0BDF90C5
        Validity
            Not Before: Apr 27 02:31:29 2025 GMT
            Not After : Apr 29 02:31:29 2025 GMT
        Subject: CN=680d9702-0215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8e:6c:01:8d:8d:88:e4:c1:57:44:b0:b5:bb:
                    e6:0c:c8:f9:fe:f5:5f:2a:66:ed:81:76:6b:bc:ac:
                    67:83:3a:03:06:a7:4b:76:e8:1f:4c:ea:0a:df:0d:
                    38:67:62:03:e3:f5:56:57:05:d4:23:a9:f0:ea:fc:
                    0b:5f:87:08:73:1a:8c:7f:50:ee:b5:4d:9e:53:eb:
                    db:cc:90:29:8e:69:be:db:f7:32:a2:94:b2:7c:ba:
                    e6:99:e9:c7:ab:0e:f4:1f:c2:9e:6f:ac:30:f5:ed:
                    04:32:1e:b8:f2:62:53:98:cd:34:b9:2e:52:47:a2:
                    1f:61:65:26:d1:0f:3e:78:86:9e:16:ce:0f:ab:c6:
                    83:95:5a:1c:b8:cf:c8:07:08:70:46:5a:6c:b9:05:
                    c3:e1:f1:dd:64:f5:b0:dd:6c:5c:ee:95:3c:93:c0:
                    e6:59:ec:6b:2e:59:b6:3d:fc:be:d3:65:7e:b0:08:
                    af:a0:d0:1a:4e:7d:5e:87:ba:df:2a:81:cb:b7:52:
                    f2:10:13:e7:9b:c3:0f:fd:82:71:3b:fa:89:40:73:
                    ee:c7:e2:86:5d:a6:e2:f1:04:9a:c5:ac:b9:f7:a5:
                    41:b0:5d:40:01:e2:55:e2:a7:4e:2e:f6:d3:6c:c4:
                    f1:b5:c7:b1:14:d3:4d:91:2e:5f:e0:3b:6f:7e:c9:
                    62:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:49:25:96:F7:5E:F1:71:30:2C:27:C3:AE:C3:4B:21:8E:A0:AA:28
            X509v3 Authority Key Identifier:
                keyid:E5:63:34:46:45:F7:DF:4B:1C:0C:DF:5E:7F:68:9C:2E:0B:DF:90:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/D1F53DAE146311EC96145233D8A014CE/5WM0RkX330scDN9ef2icLgvfkMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5WM0RkX330scDN9ef2icLgvfkMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/D1F53DAE146311EC96145233D8A014CE/5WM0RkX330scDN9ef2icLgvfkMU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:cb:5d:5d:81:11:b4:4a:fb:fc:bb:7b:59:c8:f4:ae:75:ea:
         40:f3:f9:f0:4c:8f:22:a5:40:ee:03:d7:e9:8c:1d:e9:e8:6d:
         42:70:cb:d8:68:e8:f1:b2:db:7f:04:c3:5a:2f:0f:b7:a0:de:
         44:e3:e2:ae:f3:38:c1:f0:cd:aa:c6:1e:74:da:b0:fa:15:08:
         fb:91:b3:25:82:fd:d2:d4:b3:a8:99:e2:fe:0f:a5:01:98:01:
         36:51:6d:1d:cb:b9:5d:c7:e2:eb:02:bc:8e:d6:0e:66:11:ab:
         a4:e9:9c:61:db:ec:9c:0c:b2:46:27:91:33:dc:59:bb:a8:dd:
         b9:a4:2c:41:04:d5:9b:85:76:24:88:74:7b:59:9f:57:90:9e:
         ee:b4:90:d6:fb:90:a8:2a:1a:3c:2b:32:74:4c:36:93:d4:6b:
         ed:16:3d:bb:ec:a1:70:d9:d9:28:d1:85:0b:c7:6a:3c:3f:6b:
         e1:c6:e0:74:f7:52:0b:8b:ba:e2:c8:a6:52:2f:02:c2:0f:fb:
         43:39:51:1d:3d:6a:1e:25:8b:f7:5a:db:6c:e1:ba:59:57:f5:
         92:d0:41:60:0f:52:07:bb:0f:c9:99:8f:b6:9c:66:2f:7f:d4:
         ff:ef:e2:92:d0:36:28:b3:d7:ae:58:9b:cd:f0:42:60:dc:be:
         0f:08:1b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:44 2025 by rpki-client on console.sobornost.net