Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
File:                     zES432VSaGhWOxfptlH5NdVgDNA.mft (raw, json)
Hash identifier:          699V8ud/NO7cgsYhjRmFwfy8whImnP4QL3YAtuLFTF0=
Subject key identifier:   2C:D2:40:38:6F:4C:8C:A4:4C:40:D7:4A:E3:06:38:2F:BA:B4:B6:8E
Authority key identifier: CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0
Certificate issuer:       /CN=F363FCC8AF/serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
Certificate serial:       06E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
Manifest number:          06E4
Signing time:             Thu 03 Apr 2025 01:29:37 +0000
Manifest this update:     Thu 03 Apr 2025 01:29:37 +0000
Manifest next update:     Sat 05 Apr 2025 01:29:37 +0000
Files and hashes:         1: zES432VSaGhWOxfptlH5NdVgDNA.crl (hash: acYTh7JFuW7dhpyHSzqm+eMYtLjs+19sDGRy+wpIgCk=)
                          2: E27073C0F1C111EB9AE36071D8A014CE.roa (hash: y0Q3Frj55z+tecyGPqJPk0LP5+vSEULCrL6Cm5KqQeE=)
                          3: 6CB087F0CD7E11EA9E3A5845F8AEA228.roa (hash: rBsld+QOBW/CrzRT0eM+UJTuXYzPefxB5jKhtvGTg/I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1767 (0x6e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FCC8AF
        Validity
            Not Before: Apr  3 01:29:37 2025 GMT
            Not After : Apr  5 01:29:37 2025 GMT
        Subject: CN=67ede481-d809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:17:6f:e0:0a:c2:d4:1d:e0:04:8e:45:a2:
                    a7:71:d5:31:dd:e9:27:dd:a5:a0:af:68:ad:93:df:
                    19:95:e8:5a:4b:30:77:eb:30:1a:3c:bd:bf:17:be:
                    1f:7b:fd:f9:e0:1e:58:f6:a1:05:97:3e:d4:ee:92:
                    65:97:d7:90:2b:a9:1e:7c:6a:ac:25:7a:2b:c3:c2:
                    2e:c2:86:15:dc:ed:e8:5d:e3:00:ea:36:7b:67:77:
                    31:ec:a3:bf:c6:48:b5:b2:92:57:cb:f1:c9:f6:fe:
                    f7:19:e5:ac:65:08:32:82:6f:21:9b:5d:95:b9:c0:
                    c4:db:d0:6d:a6:92:fe:5d:64:c1:45:bc:6c:4d:4c:
                    ab:db:e2:29:96:f8:5a:5b:31:f7:f2:e6:1e:8a:7f:
                    c2:62:48:4d:42:32:f7:dc:6f:b1:3f:b4:7a:0e:49:
                    1c:2f:f1:96:18:fc:3a:ac:ff:6b:0b:75:4a:b3:58:
                    87:9a:cd:3c:94:7a:fd:db:4c:26:47:e0:d2:9d:d0:
                    f3:01:96:1c:5e:16:52:84:90:7a:87:f6:60:49:e7:
                    fd:90:9a:a9:e8:d8:48:cc:46:c3:fa:83:2e:bf:4a:
                    a9:16:48:a7:d4:65:c9:16:dd:e3:23:20:91:fa:2e:
                    a3:e4:68:de:d2:1e:d7:6f:e0:48:b6:21:e6:8a:0c:
                    0f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D2:40:38:6F:4C:8C:A4:4C:40:D7:4A:E3:06:38:2F:BA:B4:B6:8E
            X509v3 Authority Key Identifier:
                keyid:CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:96:b4:4f:dc:f6:22:24:0b:2a:0d:fa:46:0b:7c:aa:31:6d:
         d3:89:e4:19:e1:85:d1:28:87:8c:06:81:7e:26:de:5f:f1:6f:
         03:46:1a:cd:3b:21:84:a7:2b:27:3e:0c:5f:fb:c0:17:29:a4:
         c3:52:ee:bf:4d:cc:54:42:eb:d5:12:87:4d:a7:72:2d:e6:4e:
         48:7a:53:37:58:61:85:e3:d4:05:19:3c:d7:c6:d3:f7:55:99:
         55:d1:e0:5f:88:26:7f:3b:45:83:78:81:19:1b:b1:80:74:eb:
         bd:b9:77:2b:59:1f:e2:3a:96:7b:9b:22:92:01:c3:3b:bd:ea:
         fd:8a:53:10:c7:52:4a:95:b4:25:02:37:18:1b:bc:20:b0:2b:
         b4:35:72:98:88:cc:59:64:9c:cb:7f:a0:cd:e9:6b:fc:d4:31:
         d6:50:c3:17:7e:00:15:eb:8a:a4:08:57:82:e0:a5:23:32:4f:
         b7:f2:a0:99:b0:5a:4b:7f:c7:2b:fa:c3:29:51:d5:5d:57:18:
         e6:3a:d0:d0:d8:52:18:58:1d:f7:6e:f8:61:60:30:c9:45:0c:
         7c:a2:0c:3e:a4:ef:05:dd:2e:c4:04:f5:cc:e1:ae:1a:7e:5f:
         db:34:9a:ea:43:99:b9:1a:c4:6d:07:74:d5:5d:2e:02:0b:6b:
         88:79:ee:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:22:06 2025 by rpki-client