Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
File:                     ZbPoGBw9qNHWQehKRcjvgjndfqc.mft (raw, json)
Hash identifier:          /JZqO9kWrrN+MSfHqipYZOlp50ImCSJsIxHANXilGVY=
Subject key identifier:   62:71:0C:81:04:70:14:65:09:21:39:1C:53:C8:89:8C:A7:70:74:93
Authority key identifier: 65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7
Certificate issuer:       /CN=F367B8D1RI/serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
Certificate serial:       0295
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
Manifest number:          0295
Signing time:             Tue 15 Apr 2025 03:50:19 +0000
Manifest this update:     Tue 15 Apr 2025 03:50:18 +0000
Manifest next update:     Thu 17 Apr 2025 03:50:18 +0000
Files and hashes:         1: ZbPoGBw9qNHWQehKRcjvgjndfqc.crl (hash: iK+QQa56R2Dzqt0D+0HajB8YvwHcLHO/vstKqGCaf+A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
                          rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 17 Apr 2025 00:46:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661 (0x295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1RI, serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
        Validity
            Not Before: Apr 15 03:50:18 2025 GMT
            Not After : Apr 17 03:50:18 2025 GMT
        Subject: CN=67fdd77b-a39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fb:d3:28:fa:1c:60:8a:88:04:5d:82:85:49:
                    cc:26:b7:0a:63:fc:75:dd:a4:d7:c0:66:6b:9b:d7:
                    de:89:a9:a1:52:b6:15:6a:9d:f0:70:bf:20:6f:4e:
                    26:a0:84:b8:59:81:b6:ba:ce:98:1e:d2:67:56:eb:
                    f6:0d:fd:47:ad:f2:f6:73:47:11:88:61:57:86:6e:
                    21:7a:1d:72:84:91:98:a2:63:c7:4f:d4:e5:a2:02:
                    8b:b8:87:0a:79:dc:c6:ad:89:00:38:be:e5:ab:41:
                    c4:99:7c:66:e8:5c:ed:33:97:f3:03:1f:22:61:2e:
                    7d:7c:d0:e0:5d:07:e7:86:49:61:01:30:f9:76:c4:
                    2f:98:55:4b:58:ed:e5:a6:3e:e3:be:72:6e:4e:65:
                    61:5a:ae:bd:27:93:17:51:7f:34:6c:eb:55:45:74:
                    14:db:b7:7f:80:77:91:45:a5:90:13:48:c5:7f:9c:
                    bb:5c:3b:dd:18:f8:8e:a2:32:c2:0b:10:35:ed:4a:
                    4b:89:e8:13:20:51:89:0e:b4:04:62:c5:83:80:85:
                    7f:90:ec:72:ba:f8:09:df:5e:dc:85:b1:35:e2:e4:
                    85:8d:16:6a:69:38:e9:6d:8d:b2:94:d2:44:cc:ed:
                    e7:1e:91:9c:35:87:ff:35:06:a8:0b:68:58:9a:24:
                    56:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:71:0C:81:04:70:14:65:09:21:39:1C:53:C8:89:8C:A7:70:74:93
            X509v3 Authority Key Identifier:
                keyid:65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:35:8a:83:64:43:b2:48:72:48:07:89:d5:d8:a5:74:e7:59:
         cf:fd:c8:bc:56:59:c2:b0:fc:b8:20:67:71:42:7a:53:bc:f3:
         f9:d3:fb:03:c9:46:4c:b5:06:e6:71:90:56:4d:49:02:43:a7:
         d0:0b:30:52:e8:3b:fe:9b:5f:2d:3f:e4:1c:a0:16:6f:0c:d5:
         5b:1d:40:6f:e3:ad:de:d2:f5:99:ec:dd:70:19:8c:35:9d:86:
         3c:3f:9c:db:9b:11:64:77:86:28:79:ed:8d:0b:30:a0:73:49:
         4b:b2:4b:00:54:fc:68:4c:38:63:15:29:be:0e:38:07:7b:4c:
         91:82:21:8b:0c:5e:c5:e7:95:99:d7:a3:90:4f:a2:44:ef:5a:
         db:80:31:c8:af:d8:20:94:29:6f:d5:94:9e:c9:18:e3:91:b7:
         93:f1:e6:ed:aa:a1:1b:8d:f1:a8:1f:9c:98:46:80:2b:68:70:
         64:a6:8d:92:da:bc:87:c3:45:34:52:86:f6:0f:db:10:e2:5a:
         8b:57:da:ea:2a:39:80:26:61:66:31:0a:c6:61:1d:2b:5c:de:
         08:50:9a:2b:5d:37:01:96:61:9d:f2:74:f3:bc:43:cd:6d:f5:
         c8:fc:40:91:89:70:33:db:9d:f4:02:c9:6d:01:c5:c5:cd:4b:
         a6:92:46:44
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICApUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0I4RDFSSTExMC8GA1UEBRMoNjVCM0U4MTgxQzNEQThEMUQ2NDFFODRBNDVDOEVG
ODIzOUREN0VBNzAeFw0yNTA0MTUwMzUwMThaFw0yNTA0MTcwMzUwMThaMBgxFjAU
BgNVBAMTDTY3ZmRkNzdiLWEzOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDD+9Mo+hxgiogEXYKFScwmtwpj/HXdpNfAZmub196JqaFSthVqnfBwvyBv
TiaghLhZgba6zpge0mdW6/YN/Uet8vZzRxGIYVeGbiF6HXKEkZiiY8dP1OWiAou4
hwp53MatiQA4vuWrQcSZfGboXO0zl/MDHyJhLn180OBdB+eGSWEBMPl2xC+YVUtY
7eWmPuO+cm5OZWFarr0nkxdRfzRs61VFdBTbt3+Ad5FFpZATSMV/nLtcO90Y+I6i
MsILEDXtSkuJ6BMgUYkOtARixYOAhX+Q7HK6+AnfXtyFsTXi5IWNFmppOOltjbKU
0kTM7ecekZw1h/81BqgLaFiaJFb7AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUYnEM
gQRwFGUJITkcU8iJjKdwdJMwHwYDVR0jBBgwFoAUZbPoGBw9qNHWQehKRcjvgjnd
fqcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCOEQxLzJGNjlFOEMyMjFGMDExRUU4NjQ2OTcwRjRBRDlFNkZDL1piUG9H
Qnc5cU5IV1FlaEtSY2p2Z2puZGZxYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L1piUG9HQnc5cU5IV1FlaEtSY2p2Z2puZGZxYy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2N0I4RDEvMkY2OUU4QzIyMUYwMTFFRTg2NDY5NzBGNEFEOUU2
RkMvWmJQb0dCdzlxTkhXUWVoS1JjanZnam5kZnFjLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBLNYqDZEOySHJIB4nV2KV051nP/ci8VlnC
sPy4IGdxQnpTvPP50/sDyUZMtQbmcZBWTUkCQ6fQCzBS6Dv+m18tP+QcoBZvDNVb
HUBv463e0vWZ7N1wGYw1nYY8P5zbmxFkd4Yoee2NCzCgc0lLsksAVPxoTDhjFSm+
DjgHe0yRgiGLDF7F55WZ16OQT6JE71rbgDHIr9gglClv1ZSeyRjjkbeT8ebtqqEb
jfGoH5yYRoAraHBkpo2S2ryHw0U0Uob2D9sQ4lqLV9rqKjmAJmFmMQrGYR0rXN4I
UJorXTcBlmGd8nTzvEPNbfXI/ECRiXAz2530AsltAcXFzUumkkZE
-----END CERTIFICATE-----
Generated at Wed Apr 16 01:12:43 2025 by rpki-client