Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
File:                     af-Z7GUV26O7-Wo36yGeJJT-wYU.mft (raw, json)
Hash identifier:          jKFSyckx5S5+TiYp1T/sqHvgOrOTxxjZzXzXMIEi9Us=
Subject key identifier:   6C:17:3F:86:13:E3:52:F2:5C:54:76:2E:9B:32:7F:22:B8:6D:9F:05
Authority key identifier: 69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85
Certificate issuer:       /CN=F3647DDFAF/serialNumber=69FF99EC6515DBA3BBF96A37EB219E2494FEC185
Certificate serial:       073D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
Manifest number:          073B
Signing time:             Thu 03 Apr 2025 01:26:03 +0000
Manifest this update:     Thu 03 Apr 2025 01:26:03 +0000
Manifest next update:     Sat 05 Apr 2025 01:26:03 +0000
Files and hashes:         1: af-Z7GUV26O7-Wo36yGeJJT-wYU.crl (hash: KusiH81L1yXNCHQc2qUKiYp/q3ZXVAOX4RA0D0lkuWY=)
                          2: D3FB7C1E86F511EA872C9285F8AEA228.roa (hash: TI9Oy29MRy8vT+vPx3tD5wZgwJvEGhK9WAGNOqgD+2Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1853 (0x73d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3647DDFAF
        Validity
            Not Before: Apr  3 01:26:03 2025 GMT
            Not After : Apr  5 01:26:03 2025 GMT
        Subject: CN=67ede3ab-401b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8e:93:99:d8:50:0d:7d:7d:cd:7f:c0:4a:01:
                    a5:94:e3:b5:66:c8:e1:a5:fe:82:2d:6d:8a:0d:fa:
                    13:42:37:9d:48:f6:5d:b3:d0:6a:ea:1b:e8:cb:7e:
                    cb:d3:1b:f5:ed:3a:dd:bf:03:0b:fe:91:66:a3:a4:
                    96:35:7f:d6:8c:96:e9:cd:bd:78:75:b6:38:07:cc:
                    54:99:fa:80:47:7f:08:fb:45:fe:79:76:f5:5f:02:
                    52:4d:3a:6b:21:14:60:ea:37:ed:cd:58:18:db:5d:
                    5f:e9:3c:c2:d8:a2:26:b0:4d:a9:64:5c:f6:be:d3:
                    7d:db:8c:2b:82:d0:20:e0:2f:84:11:90:00:40:19:
                    11:7b:2f:24:11:30:b4:d9:39:64:eb:9c:7d:20:23:
                    84:be:12:11:c5:fd:7f:48:ce:0e:27:da:03:1b:33:
                    9c:e3:49:f0:6b:33:4d:12:d0:3f:e8:2b:f2:f1:2c:
                    e3:ae:ab:df:26:51:1d:bf:9c:e7:45:91:14:36:6c:
                    5e:77:7d:b7:b5:3d:c5:3e:66:e4:1d:58:6f:ce:e8:
                    69:fc:eb:cb:06:30:a9:91:d2:08:91:40:1e:71:e0:
                    12:89:9b:b6:68:c6:49:58:63:fb:67:9d:13:41:bb:
                    c6:aa:ed:7d:29:db:9a:a2:d3:b3:93:39:1d:f6:37:
                    94:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:17:3F:86:13:E3:52:F2:5C:54:76:2E:9B:32:7F:22:B8:6D:9F:05
            X509v3 Authority Key Identifier:
                keyid:69:FF:99:EC:65:15:DB:A3:BB:F9:6A:37:EB:21:9E:24:94:FE:C1:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/af-Z7GUV26O7-Wo36yGeJJT-wYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647DDF/D0E04692863F11EA8AA7334AF8AEA228/af-Z7GUV26O7-Wo36yGeJJT-wYU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:1c:c2:69:a0:79:95:e9:f5:65:f4:6d:15:0b:32:70:5d:3c:
         db:d5:9a:a4:c1:ed:2f:2b:35:21:1c:1f:ba:ab:49:b4:95:3a:
         55:22:db:42:ab:36:48:26:d6:53:48:71:50:30:2e:e5:a6:51:
         0f:e0:c6:bd:4b:00:29:a8:df:48:d9:75:59:c4:02:b3:59:97:
         a9:ab:d5:db:b8:b8:11:e2:44:47:cc:57:fc:67:6a:d6:cf:3f:
         a4:3f:c8:b5:8c:7c:d5:68:5a:5e:09:02:13:ec:a3:c3:37:fd:
         70:5a:94:ba:25:48:52:3d:00:c1:0f:32:27:ba:c7:3d:44:8e:
         67:46:69:fc:de:f2:4f:34:e3:8d:c8:9b:29:09:03:94:de:a2:
         a6:e1:d6:35:23:8b:8e:68:81:4a:5b:89:da:93:55:04:ff:a5:
         74:c3:55:b5:10:3e:80:e1:ba:8c:0a:04:93:53:42:3a:3f:f2:
         67:93:e1:e5:5d:53:d5:80:59:71:b0:c3:cb:28:23:1b:8e:3b:
         5c:ce:93:e0:ea:11:66:cb:9b:d1:72:57:d7:33:76:32:2c:61:
         a1:29:da:c4:5c:e9:9e:bf:22:3a:d0:9e:9f:fa:3f:7d:20:fd:
         84:0a:6a:23:24:ff:be:ee:7f:1e:50:d6:32:1a:a9:01:8f:a4:
         bd:2c:2d:dc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBz0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDdEREZBRjExMC8GA1UEBRMoNjlGRjk5RUM2NTE1REJBM0JCRjk2QTM3RUIyMTlF
MjQ5NEZFQzE4NTAeFw0yNTA0MDMwMTI2MDNaFw0yNTA0MDUwMTI2MDNaMBgxFjAU
BgNVBAMTDTY3ZWRlM2FiLTQwMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDnjpOZ2FANfX3Nf8BKAaWU47VmyOGl/oItbYoN+hNCN51I9l2z0GrqG+jL
fsvTG/XtOt2/Awv+kWajpJY1f9aMlunNvXh1tjgHzFSZ+oBHfwj7Rf55dvVfAlJN
OmshFGDqN+3NWBjbXV/pPMLYoiawTalkXPa+033bjCuC0CDgL4QRkABAGRF7LyQR
MLTZOWTrnH0gI4S+EhHF/X9Izg4n2gMbM5zjSfBrM00S0D/oK/LxLOOuq98mUR2/
nOdFkRQ2bF53fbe1PcU+ZuQdWG/O6Gn868sGMKmR0giRQB5x4BKJm7ZoxklYY/tn
nRNBu8aq7X0p25qi07OTOR32N5T/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUbBc/
hhPjUvJcVHYumzJ/IrhtnwUwHwYDVR0jBBgwFoAUaf+Z7GUV26O7+Wo36yGeJJT+
wYUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ3RERGL0QwRTA0NjkyODYzRjExRUE4QUE3MzM0QUY4QUVBMjI4L2FmLVo3
R1VWMjZPNy1XbzM2eUdlSkpULXdZVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2FmLVo3R1VWMjZPNy1XbzM2eUdlSkpULXdZVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDdEREYvRDBFMDQ2OTI4NjNGMTFFQThBQTczMzRBRjhB
RUEyMjgvYWYtWjdHVVYyNk83LVdvMzZ5R2VKSlQtd1lVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBhHMJpoHmV6fVl9G0VCzJwXTzb1Zqk
we0vKzUhHB+6q0m0lTpVIttCqzZIJtZTSHFQMC7lplEP4Ma9SwApqN9I2XVZxAKz
WZepq9XbuLgR4kRHzFf8Z2rWzz+kP8i1jHzVaFpeCQIT7KPDN/1wWpS6JUhSPQDB
DzInusc9RI5nRmn83vJPNOONyJspCQOU3qKm4dY1I4uOaIFKW4nak1UE/6V0w1W1
ED6A4bqMCgSTU0I6P/Jnk+HlXVPVgFlxsMPLKCMbjjtczpPg6hFmy5vRclfXM3Yy
LGGhKdrEXOmevyI60J6f+j99IP2ECmojJP++7n8eUNYyGqkBj6S9LC3c
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:46:19 2025 by rpki-client