Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
File:                     xPPi6r3p45Aa27wxyfJTXN47HG8.mft (raw, json)
Hash identifier:          1rgZjYTXY6JgC81/A4DFsovHqIxXHudX56CQJhYWTBQ=
Subject key identifier:   4E:DF:18:2A:E6:17:55:CE:30:A1:58:6D:D8:D1:29:A5:BC:D6:E9:4E
Authority key identifier: C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F
Certificate issuer:       /CN=F36B49FAAR/serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
Certificate serial:       0D06
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
Manifest number:          0D06
Signing time:             Mon 28 Apr 2025 01:03:06 +0000
Manifest this update:     Mon 28 Apr 2025 01:03:05 +0000
Manifest next update:     Wed 30 Apr 2025 01:03:05 +0000
Files and hashes:         1: xPPi6r3p45Aa27wxyfJTXN47HG8.crl (hash: SdQetp6w0+116xmZ3ts1AZ71GHg0AUa7QsPYiz2sWWo=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                          rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3334 (0xd06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAR, serialNumber=C4F3E2EABDE9E3901ADBBC31C9F2535CDE3B1C6F
        Validity
            Not Before: Apr 28 01:03:05 2025 GMT
            Not After : Apr 30 01:03:05 2025 GMT
        Subject: CN=680ed3ca-c296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:79:fb:b0:5c:35:91:93:0b:6a:96:57:58:40:
                    b4:d8:68:37:8d:67:61:b4:60:7b:3f:40:ca:26:8a:
                    97:39:76:31:83:4f:37:10:b1:65:e7:50:a9:75:33:
                    7e:27:35:bd:4c:93:0a:31:e4:05:d4:5b:1f:d8:e8:
                    61:83:b7:c8:77:6d:cd:c7:09:22:32:93:d5:81:47:
                    18:24:4f:43:e7:4c:0b:e3:a1:59:26:87:92:5b:cc:
                    fb:85:da:4f:e8:df:90:de:c6:d6:3a:c5:22:c1:9c:
                    57:18:f9:d6:76:a8:ed:68:69:ab:93:06:3d:05:6d:
                    67:2e:13:c9:ba:18:6d:4d:04:fb:19:a4:7f:a0:f5:
                    13:3d:14:a5:2e:7d:ac:36:4a:75:76:83:3f:26:2f:
                    86:2b:0d:a1:4e:4c:d1:1c:98:1b:18:23:1c:29:15:
                    d5:1e:84:73:3f:31:a8:13:64:53:06:17:d5:d1:83:
                    24:df:ce:6b:d8:61:dc:52:91:0f:d7:51:29:1e:74:
                    01:50:a4:a4:47:ec:d9:f3:83:56:20:ad:be:37:07:
                    4a:ac:9c:07:bb:02:e2:c6:82:37:57:99:c2:1d:9b:
                    56:1f:c7:ab:d6:a3:81:82:a4:f7:72:37:12:fb:1b:
                    ba:70:52:70:b6:e5:85:d9:d6:60:88:54:14:a8:c0:
                    0b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:DF:18:2A:E6:17:55:CE:30:A1:58:6D:D8:D1:29:A5:BC:D6:E9:4E
            X509v3 Authority Key Identifier:
                keyid:C4:F3:E2:EA:BD:E9:E3:90:1A:DB:BC:31:C9:F2:53:5C:DE:3B:1C:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xPPi6r3p45Aa27wxyfJTXN47HG8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/B54484521C1C11E69F7C750CF8AEA228/xPPi6r3p45Aa27wxyfJTXN47HG8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a4:1e:f5:a3:7e:03:06:d4:2a:2c:46:90:4d:5c:46:30:b6:
         4a:ab:6e:bd:e4:75:c8:87:b0:ec:aa:12:42:f3:cd:aa:a4:d3:
         18:55:03:49:5d:d5:ce:07:06:5a:2c:e6:ff:76:12:82:96:d8:
         2c:a3:5f:67:61:2b:90:0b:6a:d8:91:82:cb:f7:fd:4c:5b:4b:
         32:5b:6f:7b:d0:c8:b7:8a:73:c7:9d:7a:6d:74:06:2c:dc:20:
         41:ac:a8:23:06:d6:58:57:6d:fc:f5:2f:f3:c4:b9:11:8f:f0:
         c0:97:b2:7d:36:30:f1:2f:a7:0d:2d:40:f7:1a:96:bd:df:c2:
         68:a9:65:1f:7c:bc:74:f1:83:b0:53:ba:44:1e:c6:04:c4:47:
         8e:d1:e2:de:e6:fa:a8:b1:b1:62:dd:43:72:ed:d0:ba:d4:94:
         51:95:41:23:16:ce:26:f0:6c:94:88:30:76:e1:99:5b:fa:e7:
         19:15:e1:e1:0c:22:69:ee:da:43:5e:69:e3:24:c4:c0:c0:46:
         a9:43:f3:a3:5a:47:26:f4:5a:91:35:ed:19:b3:fa:a9:fe:fd:
         12:91:d3:59:e8:bf:bb:35:c2:7a:6f:8c:19:69:2a:45:ba:29:
         d7:36:e0:04:91:d0:7d:61:2a:8c:22:7f:89:73:5c:f1:77:c5:
         73:6a:25:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----