Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
File:                     5zU0-ODMucOEExGNd_3qToCP6jE.mft (raw, json)
Hash identifier:          fx4KstVn1OsotWEZ/UaFl8IX9Ymk3ISTkU8vFRD/bE8=
Subject key identifier:   44:D4:44:0A:F6:74:54:98:10:7F:02:0A:06:15:5B:17:AD:7B:2D:B0
Authority key identifier: E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31
Certificate issuer:       /CN=F36F6034AR/serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
Certificate serial:       0752
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
Manifest number:          0751
Signing time:             Mon 28 Apr 2025 01:55:20 +0000
Manifest this update:     Mon 28 Apr 2025 01:55:19 +0000
Manifest next update:     Wed 30 Apr 2025 01:55:19 +0000
Files and hashes:         1: 5zU0-ODMucOEExGNd_3qToCP6jE.crl (hash: WHiMPIOND6HBv7SPnd0v3fN8go9tzWyZ7UUHX8vZsTY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                          rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1874 (0x752)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6034AR, serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
        Validity
            Not Before: Apr 28 01:55:19 2025 GMT
            Not After : Apr 30 01:55:19 2025 GMT
        Subject: CN=680ee008-3038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:41:ee:a7:cf:c5:46:d0:c6:4f:dc:96:c2:3d:
                    8e:c9:b6:9d:bd:d0:76:a3:bf:4e:9c:20:ed:55:50:
                    81:81:b5:54:fb:b7:d3:a5:32:45:29:a6:02:d8:7b:
                    f8:11:8d:f8:0f:15:0a:c9:ae:8b:c3:f3:03:8e:4a:
                    90:a6:6e:dd:57:86:0d:77:23:ba:bb:52:97:af:d7:
                    af:5f:73:bf:d8:68:53:11:79:7f:1d:47:8d:64:70:
                    7a:25:3d:97:04:ce:cd:28:64:04:9c:6c:7f:18:8e:
                    ba:5a:7f:a2:c4:13:30:6e:4a:d7:b3:c6:60:78:71:
                    4b:bb:16:b0:81:1b:88:7c:93:61:a8:a6:ef:96:40:
                    f7:11:23:f9:cf:80:22:6f:da:c4:09:d5:d2:97:e1:
                    76:38:a7:ca:cf:a8:15:65:b9:0c:b2:7b:b9:9e:d5:
                    cb:5f:2d:b0:04:a0:4f:a0:c6:09:71:8d:01:d2:2a:
                    5a:1d:97:93:e0:35:3a:2c:56:d1:5a:fc:68:6a:a0:
                    b4:7b:cd:a2:23:ff:64:5c:57:1f:7a:4f:ed:69:f2:
                    b2:e7:28:79:e3:68:d9:75:38:cd:50:04:f9:76:b9:
                    8d:0b:60:59:ae:86:d4:16:25:58:20:48:ab:b0:d2:
                    f0:0d:ff:8a:f7:0e:1c:10:4e:92:92:b2:27:c8:de:
                    54:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D4:44:0A:F6:74:54:98:10:7F:02:0A:06:15:5B:17:AD:7B:2D:B0
            X509v3 Authority Key Identifier:
                keyid:E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:23:31:e1:e7:63:7e:e5:58:c1:da:0e:57:5e:25:53:29:f7:
         84:2c:15:77:51:85:9b:83:3c:e5:91:5d:38:82:39:a5:c8:83:
         6f:76:d9:4d:4f:51:0a:8c:7a:b2:ee:1a:55:b8:ea:f2:54:be:
         b8:cb:31:b2:a5:27:c6:5a:07:85:9b:ed:99:8b:ef:f3:0b:8a:
         72:96:8a:de:a9:64:cc:5d:6a:ce:bb:83:8a:46:af:2b:ca:c5:
         7f:95:f2:24:e5:72:22:5d:9a:b8:50:b6:d8:6f:e5:e3:bf:ac:
         8c:ae:7f:b3:4d:24:f8:94:d7:18:c6:0b:ba:0b:65:22:34:81:
         8a:f6:e5:b8:b1:97:fc:ae:cb:48:3b:cc:c3:00:fd:f5:93:d6:
         58:a9:d6:e5:87:11:1a:b1:ba:6a:07:dd:cc:d7:b2:5f:6e:df:
         06:e7:35:20:33:84:c3:b5:48:d8:57:e7:ea:00:86:09:da:a1:
         54:7c:60:49:3e:1b:5f:19:41:76:7b:a1:24:30:8d:bd:7c:78:
         ca:a4:fb:b8:70:dd:d6:61:f2:8a:e9:71:bb:89:68:5a:05:ec:
         02:92:91:c7:b8:31:33:ef:eb:a3:23:c1:4b:bd:3a:2e:41:4c:
         ef:bc:84:29:80:21:7e:9c:02:40:20:77:45:1c:c3:e8:12:b4:
         df:31:97:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----