Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
File:                     9rZiLcWmAFKfv9HBwPfJi_yJClA.mft (raw, json)
Hash identifier:          2AX1jeLHc4Rh2CuKzZtKNU1tJuRo4ridMKegaZFpV5U=
Subject key identifier:   EA:B2:D5:1B:B4:58:2D:02:F4:1C:1F:27:C0:00:DD:A9:4B:4F:6E:A1
Authority key identifier: F6:B6:62:2D:C5:A6:00:52:9F:BF:D1:C1:C0:F7:C9:8B:FC:89:0A:50
Certificate issuer:       /CN=F366BE85AF/serialNumber=F6B6622DC5A600529FBFD1C1C0F7C98BFC890A50
Certificate serial:       68
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
Manifest number:          66
Signing time:             Mon 21 Apr 2025 05:08:35 +0000
Manifest this update:     Mon 21 Apr 2025 05:08:34 +0000
Manifest next update:     Wed 23 Apr 2025 05:08:34 +0000
Files and hashes:         1: 9rZiLcWmAFKfv9HBwPfJi_yJClA.crl (hash: uITD1CKyfOvtI25eAfb5nJoAsn7+V+qgBMxoVyd5r5g=)
                          2: 0138B876D29211EF9CA02783762E951A.roa (hash: 9Qo2BZpMY9XAgQ8sDtXz6FwY6T65u4EtYgo8ZKdICJA=)
                          3: 48197A8CD29211EF9C4B9D83762E951A.roa (hash: mZ9kRI2tetEX+zkrcuQdcEIANnKP7GMoF4oNcGCNj88=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Apr 2025 00:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366BE85AF, serialNumber=F6B6622DC5A600529FBFD1C1C0F7C98BFC890A50
        Validity
            Not Before: Apr 21 05:08:34 2025 GMT
            Not After : Apr 23 05:08:34 2025 GMT
        Subject: CN=6805d2d3-7bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:0f:e6:eb:21:85:9e:17:18:89:73:cd:60:
                    f4:8e:0f:47:b9:44:15:0a:f3:ac:a5:34:54:11:8c:
                    d2:8c:8c:f9:e9:53:dd:a1:52:2e:a6:56:bf:6c:cf:
                    a3:ea:60:c6:6a:c0:ae:40:64:1a:b3:4c:60:e1:c3:
                    da:75:02:f1:6f:0a:51:e6:82:ad:c9:c4:01:de:18:
                    1c:8d:d7:36:f9:eb:fe:c9:e8:0e:0c:25:eb:db:85:
                    c7:37:e8:26:5a:43:6b:2b:65:2a:26:b6:07:a0:3d:
                    26:3d:51:d2:e8:74:d0:37:7d:7c:71:7e:d3:56:03:
                    f3:19:25:fa:55:99:ab:20:5c:38:e1:fb:4d:69:da:
                    59:ae:91:0d:3f:1f:85:3d:08:ac:75:66:54:99:df:
                    fe:08:4d:86:8e:29:9c:22:33:a2:79:f2:17:cc:8d:
                    76:3d:d8:db:b3:98:84:f5:21:3a:1d:4a:45:d1:cb:
                    df:06:3c:6a:42:d3:ae:e3:d2:24:2d:3a:37:72:10:
                    37:99:66:4a:10:6c:5a:b2:0c:9c:61:d4:53:50:e0:
                    54:db:7d:30:5a:7a:2e:a8:28:38:8e:2b:c0:f2:65:
                    fb:08:7a:84:45:67:78:8e:45:5c:d9:ef:ed:36:62:
                    2e:7c:73:c6:9f:c0:28:a1:bd:62:c3:a0:29:a0:dc:
                    7e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B2:D5:1B:B4:58:2D:02:F4:1C:1F:27:C0:00:DD:A9:4B:4F:6E:A1
            X509v3 Authority Key Identifier:
                keyid:F6:B6:62:2D:C5:A6:00:52:9F:BF:D1:C1:C0:F7:C9:8B:FC:89:0A:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9rZiLcWmAFKfv9HBwPfJi_yJClA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/63E98D6CD29011EF92E8BE78762E951A/9rZiLcWmAFKfv9HBwPfJi_yJClA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:53:f8:75:23:e4:28:7e:65:20:0d:f8:18:8a:b4:39:eb:97:
         11:e4:e0:aa:35:09:77:7a:9f:6e:d3:78:4f:91:e7:92:24:76:
         b2:15:e2:2e:4a:4c:43:be:3b:71:d6:2f:cc:f2:ee:fe:7d:ce:
         17:ee:e2:c8:c6:aa:26:09:76:04:68:af:97:75:84:ed:a3:b9:
         31:00:97:2f:e6:4a:7f:fd:d6:e1:e9:61:5c:cc:35:42:71:7b:
         41:10:79:3a:d5:57:87:32:db:45:d7:2e:a9:51:9e:22:16:ed:
         8a:3e:1e:69:5a:33:13:dd:52:19:06:d9:6e:df:4f:f1:5e:39:
         db:ee:c9:a5:9d:2d:5b:42:23:99:d3:84:46:89:ce:3d:0a:6f:
         e7:e6:f5:4f:c0:19:c3:dd:2a:24:ab:cf:9f:a5:5b:d0:b9:34:
         f2:4d:5f:e9:45:d9:e2:56:93:dc:0c:35:d3:59:56:6d:9c:7d:
         71:48:1d:a9:9d:05:28:4a:70:98:82:c4:45:d3:0c:c9:ef:7b:
         99:aa:b2:5a:3b:54:0b:7d:59:83:8f:93:19:b7:4e:89:98:bf:
         3f:fa:01:0f:2f:47:2d:f7:1b:a7:f8:01:44:8e:17:60:98:50:
         f7:89:a9:46:2d:bc:3c:24:27:44:dc:25:c4:32:9f:b4:76:6e:
         33:f5:c1:b0
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBaDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY2
QkU4NUFGMTEwLwYDVQQFEyhGNkI2NjIyREM1QTYwMDUyOUZCRkQxQzFDMEY3Qzk4
QkZDODkwQTUwMB4XDTI1MDQyMTA1MDgzNFoXDTI1MDQyMzA1MDgzNFowGDEWMBQG
A1UEAxMNNjgwNWQyZDMtN2JjZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKIOD+brIYWeFxiJc81g9I4PR7lEFQrzrKU0VBGM0oyM+elT3aFSLqZWv2zP
o+pgxmrArkBkGrNMYOHD2nUC8W8KUeaCrcnEAd4YHI3XNvnr/snoDgwl69uFxzfo
JlpDaytlKia2B6A9Jj1R0uh00Dd9fHF+01YD8xkl+lWZqyBcOOH7TWnaWa6RDT8f
hT0IrHVmVJnf/ghNho4pnCIzonnyF8yNdj3Y27OYhPUhOh1KRdHL3wY8akLTruPS
JC06N3IQN5lmShBsWrIMnGHUU1DgVNt9MFp6LqgoOI4rwPJl+wh6hEVneI5FXNnv
7TZiLnxzxp/AKKG9YsOgKaDcfrECAwEAAaOCArgwggK0MB0GA1UdDgQWBBTqstUb
tFgtAvQcHyfAAN2pS09uoTAfBgNVHSMEGDAWgBT2tmItxaYAUp+/0cHA98mL/IkK
UDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NkJFODUvNjNFOThENkNEMjkwMTFFRjkyRThCRTc4NzYyRTk1MUEvOXJaaUxj
V21BRktmdjlIQndQZkppX3lKQ2xBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvOXJaaUxjV21BRktmdjlIQndQZkppX3lKQ2xBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY2QkU4NS82M0U5OEQ2Q0QyOTAxMUVGOTJFOEJFNzg3NjJF
OTUxQS85clppTGNXbUFGS2Z2OUhCd1BmSmlfeUpDbEEubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAHlT+HUj5Ch+ZSAN+BiKtDnrlxHk4Ko1
CXd6n27TeE+R55IkdrIV4i5KTEO+O3HWL8zy7v59zhfu4sjGqiYJdgRor5d1hO2j
uTEAly/mSn/91uHpYVzMNUJxe0EQeTrVV4cy20XXLqlRniIW7Yo+HmlaMxPdUhkG
2W7fT/FeOdvuyaWdLVtCI5nThEaJzj0Kb+fm9U/AGcPdKiSrz5+lW9C5NPJNX+lF
2eJWk9wMNdNZVm2cfXFIHamdBShKcJiCxEXTDMnve5mqslo7VAt9WYOPkxm3TomY
vz/6AQ8vRy33G6f4AUSOF2CYUPeJqUYtvDwkJ0TcJcQyn7R2bjP1wbA=
-----END CERTIFICATE-----
Generated at Mon Apr 21 15:45:33 2025 by rpki-client