Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3693767/B2C6E23257F511F0B65479ECDAE4EC9C/g_IB39JtAymSbgjMDdW77FB5ifQ.mft
File:                     g_IB39JtAymSbgjMDdW77FB5ifQ.mft (raw, json)
Hash identifier:          xTAXxwyG+WsHEJo2DwWK9r4lRYmHGSJLCYRIDI0H/io=
Subject key identifier:   4B:D9:8D:2C:4C:98:94:64:C9:73:93:7C:04:5A:00:83:05:A4:0A:CA
Authority key identifier: 83:F2:01:DF:D2:6D:03:29:92:6E:08:CC:0D:D5:BB:EC:50:79:89:F4
Certificate issuer:       /CN=F3693767AF/serialNumber=83F201DFD26D0329926E08CC0DD5BBEC507989F4
Certificate serial:       1B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g_IB39JtAymSbgjMDdW77FB5ifQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693767/B2C6E23257F511F0B65479ECDAE4EC9C/g_IB39JtAymSbgjMDdW77FB5ifQ.mft
Manifest number:          1A
Signing time:             Sun 27 Jul 2025 05:28:34 +0000
Manifest this update:     Sun 27 Jul 2025 05:28:33 +0000
Manifest next update:     Tue 29 Jul 2025 05:28:33 +0000
Files and hashes:         1: g_IB39JtAymSbgjMDdW77FB5ifQ.crl (hash: ghG/D2ah/jJtgDqQJEvMR3BEdyJVE41Z7dMKs1a+VVY=)
                          2: 5D0DDA5258D211F08368F88ADAE4EC9C.roa (hash: Q4kL3vyfzDzklyJDBs7p5NKPaFRaL6XxMRCXq1IWaKw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693767/B2C6E23257F511F0B65479ECDAE4EC9C/g_IB39JtAymSbgjMDdW77FB5ifQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693767/B2C6E23257F511F0B65479ECDAE4EC9C/g_IB39JtAymSbgjMDdW77FB5ifQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g_IB39JtAymSbgjMDdW77FB5ifQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693767AF, serialNumber=83F201DFD26D0329926E08CC0DD5BBEC507989F4
        Validity
            Not Before: Jul 27 05:28:33 2025 GMT
            Not After : Jul 29 05:28:33 2025 GMT
        Subject: CN=6885b902-4464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bd:5c:b9:7c:ac:2f:22:54:80:7f:aa:e5:30:
                    e0:77:99:ea:2c:b3:89:95:74:ab:0b:74:1c:99:90:
                    4d:2c:28:e6:d2:8d:32:05:63:f7:fc:75:fc:be:00:
                    82:8e:73:6b:88:2a:83:0f:aa:ee:16:0e:b1:4f:dc:
                    66:33:3c:16:5f:04:8d:51:8e:13:20:af:30:9e:f6:
                    66:e6:5e:00:ed:24:dd:fa:76:bc:a0:8f:89:c7:fe:
                    37:d4:8c:1a:0d:63:b7:29:4a:5f:c3:9f:65:50:02:
                    f7:f9:dd:83:59:e7:f0:d8:ce:c6:a2:35:b5:80:8f:
                    4f:83:20:9b:2f:95:8a:9a:b5:ce:b1:ba:a1:dd:c6:
                    5a:38:31:85:32:1b:82:1f:87:e6:fe:f9:79:27:37:
                    6a:5d:b8:02:8c:8b:ca:3b:4c:18:8c:81:cf:ff:1a:
                    6b:ab:5b:58:4f:94:81:a2:f0:2c:59:f9:61:61:ff:
                    2e:c4:6a:e8:95:6f:99:d0:8f:83:32:90:e6:c3:b8:
                    66:19:ad:9d:62:42:50:81:8e:65:31:1c:ac:61:bd:
                    9f:25:99:33:18:ba:92:25:19:f9:78:1f:cd:32:02:
                    db:9e:40:d5:e3:3a:c6:49:ef:f7:d4:ce:2d:5b:ed:
                    41:25:9b:e0:85:6e:d9:9d:ca:ee:13:8c:39:6a:2d:
                    37:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D9:8D:2C:4C:98:94:64:C9:73:93:7C:04:5A:00:83:05:A4:0A:CA
            X509v3 Authority Key Identifier:
                keyid:83:F2:01:DF:D2:6D:03:29:92:6E:08:CC:0D:D5:BB:EC:50:79:89:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693767/B2C6E23257F511F0B65479ECDAE4EC9C/g_IB39JtAymSbgjMDdW77FB5ifQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g_IB39JtAymSbgjMDdW77FB5ifQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693767/B2C6E23257F511F0B65479ECDAE4EC9C/g_IB39JtAymSbgjMDdW77FB5ifQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:0a:9d:c9:c8:1b:fe:72:0d:a7:8b:da:98:05:41:54:03:05:
         d7:ef:36:04:ae:10:7d:00:c8:e4:e3:86:c1:b9:38:ca:af:ca:
         d8:22:0c:f4:09:26:81:00:16:f1:a3:74:c6:08:1c:39:b1:b1:
         6e:fb:d4:e7:01:dd:19:9d:d7:0f:7f:e4:17:aa:74:36:40:ac:
         bc:ed:7b:ab:d6:36:a3:30:d2:d0:29:c6:b8:73:95:75:20:eb:
         63:63:5e:c2:23:1a:71:11:1a:69:d1:c9:75:86:4d:e7:a5:bd:
         58:18:51:19:6b:57:1d:de:b9:ee:6d:d0:a8:74:be:cd:62:0d:
         4a:a3:bc:7b:1c:79:40:20:8b:c6:fe:89:31:35:6d:f6:c1:d3:
         fa:bb:f2:bb:02:b4:da:41:69:3b:34:e1:84:11:df:60:07:91:
         b0:d1:ec:36:f8:3f:1e:20:0c:35:a3:79:58:ff:9c:31:82:70:
         42:1b:32:65:e0:06:10:6d:f2:d3:53:60:a9:9d:47:5f:06:da:
         67:22:25:27:37:f1:c8:56:4f:88:98:cb:3b:08:10:98:f2:47:
         c7:6c:9f:6c:05:1c:9a:e4:b1:71:c2:a8:32:ca:1b:d3:64:a9:
         27:ee:8c:c2:6b:41:a3:cd:a0:af:b7:73:fe:14:76:7a:0e:75:
         79:93:a1:d2
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBGzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
Mzc2N0FGMTEwLwYDVQQFEyg4M0YyMDFERkQyNkQwMzI5OTI2RTA4Q0MwREQ1QkJF
QzUwNzk4OUY0MB4XDTI1MDcyNzA1MjgzM1oXDTI1MDcyOTA1MjgzM1owGDEWMBQG
A1UEAxMNNjg4NWI5MDItNDQ2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM+9XLl8rC8iVIB/quUw4HeZ6iyziZV0qwt0HJmQTSwo5tKNMgVj9/x1/L4A
go5za4gqgw+q7hYOsU/cZjM8Fl8EjVGOEyCvMJ72ZuZeAO0k3fp2vKCPicf+N9SM
Gg1jtylKX8OfZVAC9/ndg1nn8NjOxqI1tYCPT4Mgmy+Vipq1zrG6od3GWjgxhTIb
gh+H5v75eSc3al24AoyLyjtMGIyBz/8aa6tbWE+UgaLwLFn5YWH/LsRq6JVvmdCP
gzKQ5sO4ZhmtnWJCUIGOZTEcrGG9nyWZMxi6kiUZ+XgfzTIC255A1eM6xknv99TO
LVvtQSWb4IVu2Z3K7hOMOWotN00CAwEAAaOCArgwggK0MB0GA1UdDgQWBBRL2Y0s
TJiUZMlzk3wEWgCDBaQKyjAfBgNVHSMEGDAWgBSD8gHf0m0DKZJuCMwN1bvsUHmJ
9DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OTM3NjcvQjJDNkUyMzI1N0Y1MTFGMEI2NTQ3OUVDREFFNEVDOUMvZ19JQjM5
SnRBeW1TYmdqTURkVzc3RkI1aWZRLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZ19JQjM5SnRBeW1TYmdqTURkVzc3RkI1aWZRLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY5Mzc2Ny9CMkM2RTIzMjU3RjUxMUYwQjY1NDc5RUNEQUU0
RUM5Qy9nX0lCMzlKdEF5bVNiZ2pNRGRXNzdGQjVpZlEubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAJUKncnIG/5yDaeL2pgFQVQDBdfvNgSu
EH0AyOTjhsG5OMqvytgiDPQJJoEAFvGjdMYIHDmxsW771OcB3Rmd1w9/5BeqdDZA
rLzte6vWNqMw0tApxrhzlXUg62NjXsIjGnERGmnRyXWGTeelvVgYURlrVx3eue5t
0Kh0vs1iDUqjvHsceUAgi8b+iTE1bfbB0/q78rsCtNpBaTs04YQR32AHkbDR7Db4
Px4gDDWjeVj/nDGCcEIbMmXgBhBt8tNTYKmdR18G2mciJSc38chWT4iYyzsIEJjy
R8dsn2wFHJrksXHCqDLKG9NkqSfujMJrQaPNoK+3c/4UdnoOdXmTodI=
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:17:36 2025 by rpki-client