Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.mft
File:                     DcCyLHQvAlOAX0GvcE4dfeG4v5g.mft (raw, json)
Hash identifier:          UbCxKiQM1mfMpQdPmxSpS5sRqSPfUt3wIEDpkVgdXoQ=
Subject key identifier:   00:0E:A5:48:3C:6D:1C:FA:B6:67:BB:07:8D:9F:FF:15:F4:A3:08:9A
Authority key identifier: 0D:C0:B2:2C:74:2F:02:53:80:5F:41:AF:70:4E:1D:7D:E1:B8:BF:98
Certificate issuer:       /CN=F36177FDAF/serialNumber=0DC0B22C742F0253805F41AF704E1D7DE1B8BF98
Certificate serial:       04AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DcCyLHQvAlOAX0GvcE4dfeG4v5g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.mft
Manifest number:          04AA
Signing time:             Sat 26 Jul 2025 02:58:29 +0000
Manifest this update:     Sat 26 Jul 2025 02:58:28 +0000
Manifest next update:     Mon 28 Jul 2025 02:58:28 +0000
Files and hashes:         1: DcCyLHQvAlOAX0GvcE4dfeG4v5g.crl (hash: srgMCiEeGEejHfL/8DZDwcG5p+Yel2fBoQjpRflN0tc=)
                          2: 60ED4636F92F11ECB2841083F1222468.roa (hash: +OqQfy+sVKv4R+tkPpa18z23bTOCNf4eXR6WRiM8IYA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DcCyLHQvAlOAX0GvcE4dfeG4v5g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Jul 2025 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1195 (0x4ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36177FDAF, serialNumber=0DC0B22C742F0253805F41AF704E1D7DE1B8BF98
        Validity
            Not Before: Jul 26 02:58:28 2025 GMT
            Not After : Jul 28 02:58:28 2025 GMT
        Subject: CN=68844455-2b4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:22:2a:f6:e3:ed:65:69:87:0d:1d:ff:f1:02:
                    43:e5:c0:76:1e:1f:aa:b5:d5:2d:4d:01:3e:ef:d5:
                    02:6c:9d:fd:d7:b6:78:22:a9:58:33:91:f9:83:57:
                    3b:4d:c0:c7:e4:d2:28:ac:42:af:76:f7:a0:1e:2b:
                    fa:c8:5f:41:63:9a:4d:80:fb:c4:8f:f0:55:a2:7b:
                    28:96:6e:94:24:e8:ba:3d:22:c6:d9:e5:59:10:e3:
                    06:0a:57:0d:e5:41:ec:df:26:6a:b8:ec:b8:d2:a5:
                    5f:ce:79:4a:95:12:3f:a6:83:23:32:5e:92:2a:64:
                    32:f7:7e:59:c9:7f:c8:ea:58:3f:fc:4e:63:fd:31:
                    90:c5:29:84:a5:fd:ca:a4:42:b4:23:4b:89:84:f9:
                    99:59:4a:63:7b:4a:07:ea:84:02:3d:0e:74:2a:41:
                    09:17:09:b8:65:f3:43:5c:a9:c9:6e:f2:25:31:dc:
                    68:a9:22:ba:0c:bf:55:06:6e:6d:45:bb:d3:e1:2c:
                    b3:10:55:79:99:e8:97:75:a4:2e:b0:78:00:8a:ca:
                    55:20:0c:50:91:b8:f3:20:f6:1d:53:fa:a7:40:3b:
                    4b:1f:a5:f3:d1:71:62:49:d5:62:d9:ba:f9:e5:48:
                    9b:7f:36:b5:34:8d:90:04:12:82:65:ca:4a:20:52:
                    90:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:0E:A5:48:3C:6D:1C:FA:B6:67:BB:07:8D:9F:FF:15:F4:A3:08:9A
            X509v3 Authority Key Identifier:
                keyid:0D:C0:B2:2C:74:2F:02:53:80:5F:41:AF:70:4E:1D:7D:E1:B8:BF:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DcCyLHQvAlOAX0GvcE4dfeG4v5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36177FD/7EE2ED1ADCD011ECAAFFC58FF1222468/DcCyLHQvAlOAX0GvcE4dfeG4v5g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b7:f7:b9:b7:6a:a9:e5:9f:7d:a5:ec:1d:e3:a5:19:91:e0:
         2d:8e:c7:6c:18:16:3a:e7:c4:67:38:d2:99:02:f5:6e:d2:3f:
         d8:73:f4:e9:f0:0c:67:2c:cf:9a:36:6b:8f:9d:97:4b:df:37:
         80:a5:c5:d4:9b:ce:25:55:02:02:e3:d4:9d:c6:e0:ba:c2:c0:
         3a:69:a6:f2:89:32:70:b8:54:11:d7:3c:d2:28:c6:bf:2e:ae:
         50:f0:f5:7e:76:83:d4:fc:8a:db:39:da:bf:5b:2f:40:e2:e6:
         09:aa:81:89:87:e4:ea:56:3c:a4:64:70:72:3b:f4:38:9b:07:
         a5:bd:74:2b:b6:3c:21:08:1e:76:7c:01:18:31:52:d3:07:5a:
         ed:41:54:fe:23:e0:7b:70:cb:eb:64:45:be:3a:de:0a:2e:6a:
         a1:26:f8:0b:db:ba:4c:c0:6a:2f:6d:e4:32:33:3e:0a:fc:9a:
         54:96:ac:8c:17:30:89:4c:a9:2a:b3:a7:6c:a4:14:68:2d:6b:
         e0:bf:28:65:a0:03:cc:5f:79:71:a7:15:33:35:0e:29:e7:49:
         09:74:80:52:1c:48:37:bd:e6:fa:30:53:56:ba:01:3c:13:24:
         f4:79:51:71:aa:f3:86:7b:ad:0c:2b:40:51:af:c1:a0:88:d7:
         3d:bb:71:d3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBKswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTc3RkRBRjExMC8GA1UEBRMoMERDMEIyMkM3NDJGMDI1MzgwNUY0MUFGNzA0RTFE
N0RFMUI4QkY5ODAeFw0yNTA3MjYwMjU4MjhaFw0yNTA3MjgwMjU4MjhaMBgxFjAU
BgNVBAMTDTY4ODQ0NDU1LTJiNGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOIir24+1laYcNHf/xAkPlwHYeH6q11S1NAT7v1QJsnf3XtngiqVgzkfmD
VztNwMfk0iisQq9296AeK/rIX0Fjmk2A+8SP8FWieyiWbpQk6Lo9IsbZ5VkQ4wYK
Vw3lQezfJmq47LjSpV/OeUqVEj+mgyMyXpIqZDL3flnJf8jqWD/8TmP9MZDFKYSl
/cqkQrQjS4mE+ZlZSmN7SgfqhAI9DnQqQQkXCbhl80Ncqclu8iUx3GipIroMv1UG
bm1Fu9PhLLMQVXmZ6Jd1pC6weACKylUgDFCRuPMg9h1T+qdAO0sfpfPRcWJJ1WLZ
uvnlSJt/NrU0jZAEEoJlykogUpBHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUAA6l
SDxtHPq2Z7sHjZ//FfSjCJowHwYDVR0jBBgwFoAUDcCyLHQvAlOAX0GvcE4dfeG4
v5gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE3N0ZELzdFRTJFRDFBRENEMDExRUNBQUZGQzU4RkYxMjIyNDY4L0RjQ3lM
SFF2QWxPQVgwR3ZjRTRkZmVHNHY1Zy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0RjQ3lMSFF2QWxPQVgwR3ZjRTRkZmVHNHY1Zy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTc3RkQvN0VFMkVEMUFEQ0QwMTFFQ0FBRkZDNThGRjEy
MjI0NjgvRGNDeUxIUXZBbE9BWDBHdmNFNGRmZUc0djVnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9t/e5t2qp5Z99pewd46UZkeAtjsds
GBY658RnONKZAvVu0j/Yc/Tp8AxnLM+aNmuPnZdL3zeApcXUm84lVQIC49SdxuC6
wsA6aabyiTJwuFQR1zzSKMa/Lq5Q8PV+doPU/IrbOdq/Wy9A4uYJqoGJh+TqVjyk
ZHByO/Q4mwelvXQrtjwhCB52fAEYMVLTB1rtQVT+I+B7cMvrZEW+Ot4KLmqhJvgL
27pMwGovbeQyMz4K/JpUlqyMFzCJTKkqs6dspBRoLWvgvyhloAPMX3lxpxUzNQ4p
50kJdIBSHEg3veb6MFNWugE8EyT0eVFxqvOGe60MK0BRr8GgiNc9u3HT
-----END CERTIFICATE-----
Generated at Sat Jul 26 06:05:12 2025 by rpki-client