Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
File:                     EpiStZvukL-kaOVEXErR0BaeEdk.mft (raw, json)
Hash identifier:          1GsnvUZuZIPD3iH8BJDTN6dh7nWANXSGMv+lstyxaHQ=
Subject key identifier:   FB:A6:F4:11:D0:CE:59:39:4F:A5:38:8D:96:F1:DA:63:19:0E:DC:E3
Authority key identifier: 12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9
Certificate issuer:       /CN=F3689E12AF/serialNumber=129892B59BEE90BFA468E5445C4AD1D0169E11D9
Certificate serial:       05E9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
Manifest number:          05E7
Signing time:             Sun 16 Feb 2025 01:37:20 +0000
Manifest this update:     Sun 16 Feb 2025 01:37:20 +0000
Manifest next update:     Tue 18 Feb 2025 01:37:20 +0000
Files and hashes:         1: EpiStZvukL-kaOVEXErR0BaeEdk.crl (hash: 3payLJU7MOw6fV7a3pYRF3iAo1ls/Vy7RSEsb9PUmQs=)
                          2: B5080AD06A3811EBA7B2E932F8AEA228.roa (hash: 06xwOkOrQfyvwrgwnCZjvF757U107kkYwkenMDnbf3M=)
                          3: 9A4E88A46A3811EBADA4CE32F8AEA228.roa (hash: JNx7J58GczpcPwlSR22R5up1pCKZvY5JopK+aTD668U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1513 (0x5e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3689E12AF
        Validity
            Not Before: Feb 16 01:37:20 2025 GMT
            Not After : Feb 18 01:37:20 2025 GMT
        Subject: CN=67b14150-1dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:22:2a:cd:14:7d:11:18:7a:c9:1f:d8:95:51:
                    af:54:10:b4:7d:e1:90:08:dd:6c:93:c0:9d:ff:f5:
                    65:87:9e:d9:a4:89:27:e1:f8:a8:59:d5:04:ab:e0:
                    ed:cc:28:f4:40:a4:72:66:46:f5:93:80:cf:b1:14:
                    ee:85:88:35:b0:a4:56:c8:8c:b2:40:30:c2:f9:ba:
                    71:d2:13:84:8f:68:f8:6e:24:0f:f6:04:01:6c:27:
                    5b:a5:5e:b9:1b:aa:b0:4a:da:f6:b8:85:20:f4:ef:
                    e4:18:14:56:5e:7a:b7:ca:76:0f:07:f1:81:85:36:
                    bb:8c:27:1a:08:44:f0:d6:e4:63:cf:d4:9f:ef:66:
                    f0:61:c0:e9:f3:91:0f:fd:75:71:d2:8a:3b:88:59:
                    6a:0c:b7:fa:a2:21:4e:34:9d:de:3c:c2:53:42:5e:
                    1e:21:d6:af:68:6d:8d:d4:b1:fb:66:28:7c:ca:1d:
                    76:47:27:de:f0:3a:f2:b0:02:78:b4:40:06:64:9c:
                    0c:fe:eb:c1:51:c6:59:f8:bf:0f:a5:89:4b:d2:9d:
                    07:e5:f6:7a:16:6f:4b:bb:a5:69:50:96:18:e8:df:
                    94:f1:55:d4:35:e7:02:ac:a2:4d:bb:8b:e2:6b:73:
                    d7:3b:cd:4a:82:dc:10:a0:84:11:e9:36:12:eb:07:
                    ab:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A6:F4:11:D0:CE:59:39:4F:A5:38:8D:96:F1:DA:63:19:0E:DC:E3
            X509v3 Authority Key Identifier:
                keyid:12:98:92:B5:9B:EE:90:BF:A4:68:E5:44:5C:4A:D1:D0:16:9E:11:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EpiStZvukL-kaOVEXErR0BaeEdk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689E12/6C60968A6A3811EBA7C88C32F8AEA228/EpiStZvukL-kaOVEXErR0BaeEdk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:62:0e:1f:e1:b1:4d:bb:20:33:97:48:13:99:ee:87:50:cc:
         24:6e:e2:e8:1f:45:b3:e7:74:da:f8:ea:f2:00:68:a6:a0:14:
         e5:c5:ab:62:07:04:a6:f2:93:75:30:d5:a4:2e:63:cc:19:9b:
         8a:11:cf:8b:ad:a3:3e:3f:8e:40:e4:6e:94:c5:c9:30:15:0a:
         45:24:63:2f:53:9e:83:a0:8e:11:79:e3:7c:db:7a:5d:fb:13:
         5b:1b:a6:df:13:4c:9a:44:d5:6e:cd:e7:39:fc:a9:55:c0:4a:
         d7:eb:58:3c:52:79:b9:7f:37:e1:cc:89:85:97:71:77:8e:ca:
         a2:e0:33:f7:5c:ad:69:c5:2b:eb:31:b0:c1:87:11:ae:a9:33:
         60:8d:72:a3:a0:48:c0:a2:e3:fc:8f:b7:03:0d:53:ac:62:bb:
         6f:7d:72:50:ce:22:53:94:66:12:fd:44:9e:c2:00:dd:e4:b2:
         77:66:06:2c:0a:c6:a4:0e:0d:ab:8c:b2:77:44:80:9b:d7:99:
         c4:fa:ac:1c:e1:dc:85:77:56:b2:24:30:65:1c:6b:b5:b6:5b:
         37:2e:d8:6f:b6:60:26:51:fb:02:90:bb:ab:eb:27:d2:17:76:
         cc:24:74:6c:f5:11:7d:f9:33:8e:c6:c7:eb:96:f7:cd:b7:27:
         46:49:d9:0b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBekwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODlFMTJBRjExMC8GA1UEBRMoMTI5ODkyQjU5QkVFOTBCRkE0NjhFNTQ0NUM0QUQx
RDAxNjlFMTFEOTAeFw0yNTAyMTYwMTM3MjBaFw0yNTAyMTgwMTM3MjBaMBgxFjAU
BgNVBAMTDTY3YjE0MTUwLTFkYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMIirNFH0RGHrJH9iVUa9UELR94ZAI3WyTwJ3/9WWHntmkiSfh+KhZ1QSr
4O3MKPRApHJmRvWTgM+xFO6FiDWwpFbIjLJAMML5unHSE4SPaPhuJA/2BAFsJ1ul
XrkbqrBK2va4hSD07+QYFFZeerfKdg8H8YGFNruMJxoIRPDW5GPP1J/vZvBhwOnz
kQ/9dXHSijuIWWoMt/qiIU40nd48wlNCXh4h1q9obY3UsftmKHzKHXZHJ97wOvKw
Ani0QAZknAz+68FRxln4vw+liUvSnQfl9noWb0u7pWlQlhjo35TxVdQ15wKsok27
i+Jrc9c7zUqC3BCghBHpNhLrB6vrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+6b0
EdDOWTlPpTiNlvHaYxkO3OMwHwYDVR0jBBgwFoAUEpiStZvukL+kaOVEXErR0Bae
EdkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg5RTEyLzZDNjA5NjhBNkEzODExRUJBN0M4OEMzMkY4QUVBMjI4L0VwaVN0
WnZ1a0wta2FPVkVYRXJSMEJhZUVkay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0VwaVN0WnZ1a0wta2FPVkVYRXJSMEJhZUVkay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODlFMTIvNkM2MDk2OEE2QTM4MTFFQkE3Qzg4QzMyRjhB
RUEyMjgvRXBpU3RadnVrTC1rYU9WRVhFclIwQmFlRWRrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCjYg4f4bFNuyAzl0gTme6HUMwkbuLo
H0Wz53Ta+OryAGimoBTlxatiBwSm8pN1MNWkLmPMGZuKEc+LraM+P45A5G6Uxckw
FQpFJGMvU56DoI4ReeN823pd+xNbG6bfE0yaRNVuzec5/KlVwErX61g8Unm5fzfh
zImFl3F3jsqi4DP3XK1pxSvrMbDBhxGuqTNgjXKjoEjAouP8j7cDDVOsYrtvfXJQ
ziJTlGYS/USewgDd5LJ3ZgYsCsakDg2rjLJ3RICb15nE+qwc4dyFd1ayJDBlHGu1
tls3LthvtmAmUfsCkLur6yfSF3bMJHRs9RF9+TOOxsfrlvfNtydGSdkL
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:52:12 2025 by rpki-client