Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
File:                     KxftsiWoqa1OodSC-tfzt4JwvaQ.mft (raw, json)
Hash identifier:          Hq7sDSJafRW2Vgr0nasUCSKvz2mgisDm3+WP55i6Qjw=
Subject key identifier:   9A:F0:D2:47:41:8F:44:C4:7C:15:F3:05:76:2E:32:C5:09:C1:29:46
Authority key identifier: 2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4
Certificate issuer:       /CN=F36746EBAF/serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
Certificate serial:       0553
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
Manifest number:          0552
Signing time:             Thu 31 Jul 2025 02:48:43 +0000
Manifest this update:     Thu 31 Jul 2025 02:48:42 +0000
Manifest next update:     Sat 02 Aug 2025 02:48:42 +0000
Files and hashes:         1: KxftsiWoqa1OodSC-tfzt4JwvaQ.crl (hash: yPcGrOrCLbX3lNJTOfrawkbdfd7eO27vXOAthBoRSvE=)
                          2: 0755AE8C5E4911EC910446DF5A40D577.roa (hash: AItjzWPSlit+SXvmdCFmobWIhqJxwMx7F/NvBd+HRhQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1363 (0x553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36746EBAF, serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
        Validity
            Not Before: Jul 31 02:48:42 2025 GMT
            Not After : Aug  2 02:48:42 2025 GMT
        Subject: CN=688ad98b-c222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fa:5d:af:15:08:e8:c4:b6:9f:c5:ff:98:cb:
                    f7:ec:3e:c3:c2:99:34:a6:e6:22:ba:48:61:af:cc:
                    3a:ed:69:a9:7e:2d:ff:4e:c6:a8:26:bb:26:75:9e:
                    e8:20:2a:67:e1:52:d5:c1:14:08:a7:9c:34:6c:6c:
                    e8:12:d1:c0:b0:d2:9b:a6:98:56:fc:1a:97:98:a2:
                    42:16:df:4a:1e:70:34:d6:dd:19:4f:11:8a:24:4b:
                    54:4f:b8:c9:56:31:58:8d:95:f5:52:ba:a2:28:60:
                    6a:aa:32:dc:8e:a8:9f:88:73:3e:d2:65:ee:2f:bc:
                    e6:c9:89:4b:86:fe:39:04:85:06:a2:ca:21:1a:3f:
                    59:f8:a0:db:f6:0d:5c:57:76:a2:08:80:0e:4f:c8:
                    de:26:4d:f3:6b:fe:61:d4:11:09:c3:17:7a:d9:04:
                    ae:cf:f1:fe:98:9a:a3:e5:f7:14:13:18:0a:f3:29:
                    22:f1:56:46:70:65:0e:ef:22:62:82:a1:35:8f:31:
                    c1:a7:e4:62:d7:09:61:71:7a:5d:60:c3:e8:4a:44:
                    64:08:4d:f7:92:70:3b:61:7a:84:f9:a1:6d:bd:86:
                    a2:9e:e5:e3:88:d0:50:73:3a:20:fe:ee:47:3b:b9:
                    f7:a9:48:0b:7a:3a:bf:ab:e8:37:cc:bf:37:ea:ae:
                    b0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F0:D2:47:41:8F:44:C4:7C:15:F3:05:76:2E:32:C5:09:C1:29:46
            X509v3 Authority Key Identifier:
                keyid:2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b7:94:5d:c3:a8:2b:c2:01:b9:5b:4e:57:3b:be:39:0f:21:
         41:3b:99:eb:aa:84:ee:ed:9e:49:a4:ea:2d:20:ea:8e:73:0a:
         54:27:b9:07:fa:db:13:63:6c:5d:27:d9:98:56:f5:d4:26:a6:
         f0:dc:18:40:b9:1b:8f:b6:be:07:2f:b2:09:99:6b:e1:15:b8:
         5b:b6:5d:53:fa:db:de:bf:34:59:89:04:8b:ad:8a:16:36:7e:
         14:51:7b:a7:10:fa:9c:39:3b:ed:a4:66:b8:33:60:37:a9:1f:
         71:23:f8:31:58:7d:b6:38:ea:63:c2:cf:f1:70:1d:22:f9:cd:
         ce:6e:0f:40:7b:ff:f9:00:87:7d:01:fe:bd:4b:16:b4:aa:a5:
         df:95:63:0d:65:41:3f:85:af:bb:60:6a:d6:89:fc:ef:1f:89:
         d0:eb:03:4c:f7:31:89:97:82:d0:57:a2:5f:79:47:1e:bc:a3:
         84:e7:36:ce:bf:8a:4f:33:21:28:93:3c:98:8d:ab:5d:d8:1d:
         62:77:fe:bf:2c:79:4d:97:47:38:64:a3:23:d2:5f:88:03:d4:
         31:70:34:ed:66:02:5d:b2:19:39:70:62:bf:47:16:35:c7:e4:
         9a:1b:b7:8d:58:ee:23:e9:be:61:0c:46:ec:91:55:f3:f9:88:
         2c:62:32:3f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBVMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzQ2RUJBRjExMC8GA1UEBRMoMkIxN0VEQjIyNUE4QTlBRDRFQTFENDgyRkFEN0Yz
Qjc4MjcwQkRBNDAeFw0yNTA3MzEwMjQ4NDJaFw0yNTA4MDIwMjQ4NDJaMBgxFjAU
BgNVBAMTDTY4OGFkOThiLWMyMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJ+l2vFQjoxLafxf+Yy/fsPsPCmTSm5iK6SGGvzDrtaal+Lf9OxqgmuyZ1
nuggKmfhUtXBFAinnDRsbOgS0cCw0pummFb8GpeYokIW30oecDTW3RlPEYokS1RP
uMlWMViNlfVSuqIoYGqqMtyOqJ+Icz7SZe4vvObJiUuG/jkEhQaiyiEaP1n4oNv2
DVxXdqIIgA5PyN4mTfNr/mHUEQnDF3rZBK7P8f6YmqPl9xQTGArzKSLxVkZwZQ7v
ImKCoTWPMcGn5GLXCWFxel1gw+hKRGQITfeScDtheoT5oW29hqKe5eOI0FBzOiD+
7kc7ufepSAt6Or+r6DfMvzfqrrCtAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUmvDS
R0GPRMR8FfMFdi4yxQnBKUYwHwYDVR0jBBgwFoAUKxftsiWoqa1OodSC+tfzt4Jw
vaQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc0NkVCLzBDNTY0QzVFNUU0NzExRUNCOUExQUVEOTVBNDBENTc3L0t4ZnRz
aVdvcWExT29kU0MtdGZ6dDRKd3ZhUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0t4ZnRzaVdvcWExT29kU0MtdGZ6dDRKd3ZhUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzQ2RUIvMEM1NjRDNUU1RTQ3MTFFQ0I5QTFBRUQ5NUE0
MEQ1NzcvS3hmdHNpV29xYTFPb2RTQy10Znp0NEp3dmFRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCst5Rdw6grwgG5W05XO745DyFBO5nr
qoTu7Z5JpOotIOqOcwpUJ7kH+tsTY2xdJ9mYVvXUJqbw3BhAuRuPtr4HL7IJmWvh
Fbhbtl1T+tvevzRZiQSLrYoWNn4UUXunEPqcOTvtpGa4M2A3qR9xI/gxWH22OOpj
ws/xcB0i+c3Obg9Ae//5AId9Af69Sxa0qqXflWMNZUE/ha+7YGrWifzvH4nQ6wNM
9zGJl4LQV6JfeUcevKOE5zbOv4pPMyEokzyYjatd2B1id/6/LHlNl0c4ZKMj0l+I
A9QxcDTtZgJdshk5cGK/RxY1x+SaG7eNWO4j6b5hDEbskVXz+YgsYjI/
-----END CERTIFICATE-----
Generated at Thu Jul 31 11:13:30 2025 by rpki-client