Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
File:                     gBdkcAW5GRQgyZGxrgeYtayhTQw.mft (raw, json)
Hash identifier:          dCq4RO4kA3pzDH0nf+yfj5nrvl6ShW+lXDH5YIgofoI=
Subject key identifier:   AF:23:DB:60:06:FF:C4:CE:B7:AE:D8:B7:95:3C:FE:02:E8:57:E0:B6
Authority key identifier: 80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
Certificate issuer:       /CN=F3632CFEAF/serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Certificate serial:       0656
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
Manifest number:          064A
Signing time:             Fri 06 Jun 2025 02:09:54 +0000
Manifest this update:     Fri 06 Jun 2025 02:09:53 +0000
Manifest next update:     Sun 08 Jun 2025 02:09:53 +0000
Files and hashes:         1: gBdkcAW5GRQgyZGxrgeYtayhTQw.crl (hash: vDflL7GHq08wdPqbOpqi7PsDDQestjUx6eKMjrI92lY=)
                          2: 49BADED6E0AF11EBA4AE8C60F8AEA228.roa (hash: bfzLeABKt8iJaNdlc12joZPlW2B3ok9kJhlWiLncwS0=)
                          3: 40E2C4A2E0D411EBB731DB11F8AEA228.roa (hash: iNVwS1o0KwvedAC6eQYfYJ+BAcXsoI+clsk0jnqfrIA=)
                          4: 10C8FFEEE29F11EBAA580947F8AEA228.roa (hash: 387HhPDysnyOhc8pmgAp8wGABIBNWQ6h4D9Qi4Iokv0=)
                          5: 7A4D6530E0D411EB863D3F12F8AEA228.roa (hash: P26YxJOy6uRICshHfktO8hTsp7ut8yCkshcNludKd0A=)
                          6: 254A1146DE4A11EB99E5AD21F8AEA228.roa (hash: +hq36BifBeCSUhyFbBupJ4tam0DEvG9eurBQqxlzAcI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1622 (0x656)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632CFEAF, serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
        Validity
            Not Before: Jun  6 02:09:53 2025 GMT
            Not After : Jun  8 02:09:53 2025 GMT
        Subject: CN=68424df2-584c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b5:59:b9:3b:bc:16:68:ae:81:42:c3:5c:d5:
                    4b:9d:3b:60:a7:aa:12:e9:73:7d:b9:80:b1:74:be:
                    32:7b:9c:b9:10:b9:99:33:6b:ee:08:9a:f8:71:68:
                    a8:2e:52:85:5a:a2:84:1c:ac:49:23:c7:f6:a7:f2:
                    5c:ce:bd:3e:bb:59:e7:13:fd:cb:e1:cb:20:b4:1d:
                    1d:9d:54:fc:22:ec:7d:2f:f4:56:d9:89:95:f7:44:
                    9d:ec:cb:95:0a:98:a2:a0:f5:55:98:cb:60:b6:aa:
                    2a:90:eb:2d:46:42:cd:cb:0c:8c:7f:40:ed:42:b1:
                    4d:a3:71:bd:3b:9b:e2:f8:02:4b:a9:de:d5:b3:19:
                    05:e6:9b:0c:24:bc:d5:8f:90:7d:b1:87:5e:d2:29:
                    7d:52:b8:2e:66:e7:0b:57:39:fe:1a:c6:72:7e:b1:
                    80:4e:d4:7c:ad:ba:af:6d:67:34:bb:9e:67:0d:93:
                    ac:7b:48:11:1b:be:5a:2d:d1:e8:f8:06:a3:74:a5:
                    4b:19:97:7a:f1:4a:0e:a8:82:e6:e9:8f:c0:f6:43:
                    65:35:a5:15:95:b0:5d:f0:b4:fe:ae:06:d4:12:21:
                    6e:3f:86:18:c0:7e:aa:37:cc:1d:bf:c6:23:33:00:
                    1b:f2:7b:77:d9:32:32:15:91:32:35:de:f2:a1:90:
                    29:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:23:DB:60:06:FF:C4:CE:B7:AE:D8:B7:95:3C:FE:02:E8:57:E0:B6
            X509v3 Authority Key Identifier:
                keyid:80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:f9:fc:69:20:e5:9c:84:bb:a4:e6:91:0c:07:3d:c4:a1:89:
         a9:6d:3f:ab:b0:b6:6b:ad:cb:22:ae:95:6c:33:aa:c5:7a:16:
         b5:b7:be:69:62:c4:49:61:62:1f:24:ce:c7:69:ac:02:61:4a:
         1e:6f:1d:3b:92:61:df:5c:da:32:59:40:e6:c3:6c:55:82:f4:
         4d:54:7c:9d:de:63:36:01:f0:24:65:04:93:9f:a3:a7:75:0d:
         22:d0:1d:4f:84:f5:92:d3:a4:ec:dd:41:fb:99:f8:59:20:6d:
         64:29:75:08:1c:d9:8e:d0:87:0d:b4:0c:37:60:77:06:38:61:
         6e:92:36:5c:84:25:5a:06:7b:7f:58:31:27:77:aa:72:93:2a:
         f6:ed:84:70:0c:7e:56:fc:6f:f3:c0:e0:52:bc:9e:b6:ee:18:
         4b:4a:7d:10:74:d8:16:e6:15:22:f2:de:e4:7a:5a:7e:16:a2:
         30:e6:50:19:86:cd:70:68:6f:b6:15:44:33:6a:30:8e:bc:46:
         42:b6:c4:d4:2a:9a:92:d6:34:ba:56:b9:81:b9:c5:24:42:59:
         fe:81:2d:a7:e4:8a:eb:ad:bc:d5:12:df:41:60:4b:f5:8b:db:
         50:24:c2:a8:54:fe:f6:a5:72:13:37:2b:25:6c:19:c2:83:88:
         9f:16:35:c8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBlYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzJDRkVBRjExMC8GA1UEBRMoODAxNzY0NzAwNUI5MTkxNDIwQzk5MUIxQUUwNzk4
QjVBQ0ExNEQwQzAeFw0yNTA2MDYwMjA5NTNaFw0yNTA2MDgwMjA5NTNaMBgxFjAU
BgNVBAMTDTY4NDI0ZGYyLTU4NGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCbtVm5O7wWaK6BQsNc1UudO2CnqhLpc325gLF0vjJ7nLkQuZkza+4Imvhx
aKguUoVaooQcrEkjx/an8lzOvT67WecT/cvhyyC0HR2dVPwi7H0v9FbZiZX3RJ3s
y5UKmKKg9VWYy2C2qiqQ6y1GQs3LDIx/QO1CsU2jcb07m+L4Akup3tWzGQXmmwwk
vNWPkH2xh17SKX1SuC5m5wtXOf4axnJ+sYBO1Hytuq9tZzS7nmcNk6x7SBEbvlot
0ej4BqN0pUsZl3rxSg6ogubpj8D2Q2U1pRWVsF3wtP6uBtQSIW4/hhjAfqo3zB2/
xiMzABvye3fZMjIVkTI13vKhkCn1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUryPb
YAb/xM63rti3lTz+AuhX4LYwHwYDVR0jBBgwFoAUgBdkcAW5GRQgyZGxrgeYtayh
TQwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMyQ0ZFLzUwMEIyOTkwODI4NTExRUI4MEM3RUY3OUY4QUVBMjI4L2dCZGtj
QVc1R1JRZ3laR3hyZ2VZdGF5aFRRdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dCZGtjQVc1R1JRZ3laR3hyZ2VZdGF5aFRRdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzJDRkUvNTAwQjI5OTA4Mjg1MTFFQjgwQzdFRjc5RjhB
RUEyMjgvZ0Jka2NBVzVHUlFneVpHeHJnZVl0YXloVFF3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCX+fxpIOWchLuk5pEMBz3EoYmpbT+r
sLZrrcsirpVsM6rFeha1t75pYsRJYWIfJM7HaawCYUoebx07kmHfXNoyWUDmw2xV
gvRNVHyd3mM2AfAkZQSTn6OndQ0i0B1PhPWS06Ts3UH7mfhZIG1kKXUIHNmO0IcN
tAw3YHcGOGFukjZchCVaBnt/WDEnd6pykyr27YRwDH5W/G/zwOBSvJ627hhLSn0Q
dNgW5hUi8t7kelp+FqIw5lAZhs1waG+2FUQzajCOvEZCtsTUKpqS1jS6VrmBucUk
Qln+gS2n5IrrrbzVEt9BYEv1i9tQJMKoVP72pXITNyslbBnCg4ifFjXI
-----END CERTIFICATE-----
Generated at Fri Jun 6 18:34:59 2025 by rpki-client