Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
File:                     zjU-BgcibJUeYP1ogM7M-5jSvEg.mft (raw, json)
Hash identifier:          lA87CUV9/TTZZ7Q1dCucGKEEC4M0SeKUC/nm+TpPfQ8=
Subject key identifier:   98:2B:39:84:92:6B:70:59:06:F7:62:91:96:9E:BC:55:13:F4:82:87
Authority key identifier: CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48
Certificate issuer:       /CN=F362EFF3AF/serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
Certificate serial:       029E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
Manifest number:          029C
Signing time:             Sun 16 Feb 2025 02:31:35 +0000
Manifest this update:     Sun 16 Feb 2025 02:31:34 +0000
Manifest next update:     Tue 18 Feb 2025 02:31:34 +0000
Files and hashes:         1: zjU-BgcibJUeYP1ogM7M-5jSvEg.crl (hash: M0PPFz16DOsxY8sXv27yTLTpX4E3y2TCX5ZziXC+rP8=)
                          2: 6C2FB170FFA811EDB10BF6814AD9E6FC.roa (hash: lBXXLwdkJTr+JXNn+pD+2aYKlgsMQpQ0R3v3F5qO+ns=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 670 (0x29e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362EFF3AF
        Validity
            Not Before: Feb 16 02:31:34 2025 GMT
            Not After : Feb 18 02:31:34 2025 GMT
        Subject: CN=67b14e07-4dae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7e:0f:1b:b6:e4:eb:3f:24:f5:39:06:ad:61:
                    f9:3c:cf:3c:cc:8f:bd:28:7b:56:7d:de:75:eb:28:
                    ea:ab:57:d7:f4:74:64:35:54:5d:1a:bd:75:94:5c:
                    7a:75:17:56:82:f9:cf:ca:cc:30:e8:14:f2:c4:4f:
                    32:33:ce:48:92:67:18:89:ce:33:cc:b7:64:ad:0e:
                    5d:bd:6c:0e:d3:6b:a2:a0:48:ea:c8:bb:5f:ac:b1:
                    9f:dd:45:8a:b7:19:d6:7a:7b:c0:ea:63:fa:d0:f0:
                    63:2c:27:7e:9a:16:a0:96:7e:21:f2:1b:09:dc:d1:
                    3f:a4:4b:5b:82:ec:97:32:96:04:22:f9:e8:c8:53:
                    6a:c6:75:36:bf:84:f3:a1:eb:21:cb:12:a1:e3:2a:
                    43:0e:c4:ca:65:f4:a0:56:54:d0:fb:54:39:99:83:
                    af:6a:a4:8b:25:58:c0:a0:40:99:b0:b4:dc:3b:36:
                    47:e4:d5:ef:c3:10:fc:9e:da:43:0a:57:c2:e5:df:
                    bf:68:0f:e6:40:46:04:f5:90:7a:a2:ef:14:d7:84:
                    b1:49:74:8d:59:dc:bd:86:4d:79:17:a0:a3:9b:ed:
                    3a:e2:de:1f:fa:d7:83:fc:55:d0:69:4b:3f:9f:9e:
                    72:be:40:5b:53:20:33:9e:d5:ba:b2:24:1c:0a:c5:
                    5b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:2B:39:84:92:6B:70:59:06:F7:62:91:96:9E:BC:55:13:F4:82:87
            X509v3 Authority Key Identifier:
                keyid:CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:0d:af:d9:7f:96:36:a4:b1:c1:80:06:b9:fd:ec:1c:4c:b4:
         d7:23:86:08:a1:02:b1:3b:e2:6d:32:ba:9d:1d:db:da:29:67:
         16:dd:f0:29:7e:ed:1d:f3:c3:d4:26:28:86:68:95:6c:66:a7:
         34:a9:d5:46:8d:e8:76:07:1f:f6:6b:a5:69:e1:51:a7:87:61:
         4d:e4:99:77:ce:d9:85:c3:54:58:46:c9:1b:65:be:9c:96:17:
         d7:1d:bf:f2:2f:47:fd:fe:27:bc:09:5d:2e:34:d6:26:db:e5:
         b4:95:70:a1:7a:85:6e:78:46:59:b9:1d:df:15:20:3d:aa:e9:
         7b:eb:d8:32:7b:bd:85:94:15:3e:69:e9:ed:f5:56:85:b9:9e:
         9a:2c:67:a6:7d:80:40:03:e9:bd:81:9d:e8:25:e4:99:1d:06:
         5a:72:54:2f:e3:07:f0:c3:ba:89:56:e3:48:3c:f6:3a:cb:11:
         03:46:ff:a3:b8:a5:e3:52:91:dd:12:a4:e3:31:27:9e:95:b9:
         3c:fb:8d:ab:0f:53:68:e1:8f:6e:b1:f5:64:cc:cc:29:39:a6:
         18:36:c1:09:d7:60:ae:98:2c:19:07:67:ce:33:8a:be:07:e7:
         0e:bf:85:5c:91:46:ff:80:09:e0:21:5a:ae:e5:01:24:e6:50:
         77:eb:fd:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:23 2025 by rpki-client