Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
File:                     a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft (raw, json)
Hash identifier:          4JTsQjvn7jJk1HNTepkdUlpeUfQToPqafC7xGJNxwdg=
Subject key identifier:   E3:EF:A1:39:56:F6:E0:E1:AB:C9:FE:D0:75:EB:49:49:AB:70:0D:13
Authority key identifier: 6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48
Certificate issuer:       /CN=F3697F9BAF/serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
Certificate serial:       070F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
Manifest number:          0709
Signing time:             Fri 06 Jun 2025 02:00:18 +0000
Manifest this update:     Fri 06 Jun 2025 02:00:17 +0000
Manifest next update:     Sun 08 Jun 2025 02:00:17 +0000
Files and hashes:         1: a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl (hash: C87KbWY0BOZAK17k86zBIUvEbU2oAjUxK1kZCKpewtY=)
                          2: E24D05EEE25311EA92AD155EF8AEA228.roa (hash: NhNBSTEDSsS8nv1gPk35pYlSA/j54gCUeglNVOfp5Jk=)
                          3: 8B23E96CE25411EAABDED95EF8AEA228.roa (hash: G1N7VCX3quzWOxjZ6v2ZRD1s53UOL4I3nt3IbyrQuyg=)
                          4: 10D082ECE25411EAB7E7505EF8AEA228.roa (hash: HCeS+ur8bLRwVYC7j4CEZcmf2zW7Wq0HlwhQZaJebjk=)
                          5: 8DA134B6E25311EA83A9A55DF8AEA228.roa (hash: FZLhMJ//MfWJptrE3zcXjMsUeDRso3qHvO1+H5qU2Z0=)
                          6: B193AAD8E25411EAACEFFA5EF8AEA228.roa (hash: 6msQDGgz9SoLw2neOnUxuPHAYOAC1PdRzeLr4+FvrcI=)
                          7: 57CB6630E25411EA8C85A55EF8AEA228.roa (hash: zokPSNjx8r4IpsyxRDDLa5MvDTlpaKfogK8lEwUhKrg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1807 (0x70f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697F9BAF, serialNumber=6BE93D42375F5875A2F8CAD28098854162D25048
        Validity
            Not Before: Jun  6 02:00:17 2025 GMT
            Not After : Jun  8 02:00:17 2025 GMT
        Subject: CN=68424bb2-73ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:87:a7:2c:bb:f7:1a:89:ea:46:e3:9b:1f:cb:
                    5a:80:07:73:8d:ab:6e:61:5c:46:65:82:18:e5:0b:
                    a5:5c:f7:6d:80:f7:2f:2f:b8:d4:87:1d:ec:f2:96:
                    ea:6c:31:f5:7f:0b:ee:88:4a:18:bd:53:8c:99:1a:
                    6f:e1:d9:4b:40:e8:9c:da:c9:d5:2c:f5:98:77:46:
                    c0:6a:b2:c2:6c:57:ab:9e:c5:26:28:47:74:1f:07:
                    79:c7:46:2c:33:aa:77:c0:1f:28:a3:35:a1:77:ab:
                    c7:e9:ea:7a:c7:39:06:88:f0:24:32:28:54:06:68:
                    42:d2:ef:c3:9d:cc:2e:8f:4a:94:fe:58:d3:1a:bb:
                    b7:cd:c1:44:39:21:42:58:57:56:f2:a9:16:ea:49:
                    50:4e:42:e0:80:55:40:7f:6b:ec:80:64:df:91:3a:
                    8c:09:d2:7a:5b:f1:41:a2:59:e4:10:bc:7d:c0:00:
                    2f:90:ba:ef:ee:3f:ed:8c:34:dc:96:ab:b3:41:25:
                    b6:39:de:bb:05:9c:ec:d2:fd:c9:67:0b:bc:04:d0:
                    5e:9d:3a:ab:38:5a:da:a7:c1:20:71:87:02:dd:80:
                    8d:8d:15:77:9a:a6:9c:d2:da:4c:40:97:6b:0d:4a:
                    a9:a0:1f:76:89:e3:9c:a1:c3:81:ff:f2:a5:17:86:
                    76:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EF:A1:39:56:F6:E0:E1:AB:C9:FE:D0:75:EB:49:49:AB:70:0D:13
            X509v3 Authority Key Identifier:
                keyid:6B:E9:3D:42:37:5F:58:75:A2:F8:CA:D2:80:98:85:41:62:D2:50:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a-k9QjdfWHWi-MrSgJiFQWLSUEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697F9B/C6DEF4DCE24611EA8D16EF50F8AEA228/a-k9QjdfWHWi-MrSgJiFQWLSUEg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:cb:fd:a7:bd:20:e1:55:fe:ec:63:24:d0:17:12:dd:14:78:
         de:80:1e:34:7e:04:f1:b1:91:54:6c:73:22:9b:e1:f0:cc:02:
         be:75:4e:e3:e0:e6:ad:3a:4a:a1:c5:63:ec:be:29:3f:6d:6a:
         a6:cb:98:0d:e7:2e:db:e8:89:03:e3:a7:0e:e2:c1:1b:11:79:
         0b:d7:ad:78:e3:dd:31:6c:c3:89:54:6d:eb:86:6e:d2:7f:32:
         66:15:20:b5:5d:5e:10:fd:35:60:1e:49:8a:23:7e:4f:26:92:
         08:82:b6:45:42:5b:c6:f5:71:28:0e:91:34:d3:b0:66:40:22:
         71:da:1e:e1:52:21:26:4e:a8:a3:8c:07:94:6e:ee:85:42:32:
         b5:23:89:72:7c:b7:73:50:ff:08:3a:64:e7:38:c2:12:31:86:
         a1:69:99:20:0e:04:c3:d6:84:46:d2:75:0c:08:2f:ca:88:5b:
         5d:76:83:c3:1b:4e:35:1c:c7:eb:3c:3c:d7:a2:f2:dc:51:1b:
         f6:72:41:84:61:eb:4b:71:2c:08:77:17:2d:3c:71:a1:25:45:
         63:77:c4:9d:f3:f3:0d:be:9f:3b:3b:cb:84:2d:e7:3e:6e:da:
         24:c6:c7:c3:20:7c:c8:03:cf:31:c7:27:09:05:ee:0c:3d:06:
         1a:16:ef:1c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBw8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTdGOUJBRjExMC8GA1UEBRMoNkJFOTNENDIzNzVGNTg3NUEyRjhDQUQyODA5ODg1
NDE2MkQyNTA0ODAeFw0yNTA2MDYwMjAwMTdaFw0yNTA2MDgwMjAwMTdaMBgxFjAU
BgNVBAMTDTY4NDI0YmIyLTczY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrh6csu/caiepG45sfy1qAB3ONq25hXEZlghjlC6Vc922A9y8vuNSHHezy
lupsMfV/C+6IShi9U4yZGm/h2UtA6JzaydUs9Zh3RsBqssJsV6uexSYoR3QfB3nH
RiwzqnfAHyijNaF3q8fp6nrHOQaI8CQyKFQGaELS78OdzC6PSpT+WNMau7fNwUQ5
IUJYV1byqRbqSVBOQuCAVUB/a+yAZN+ROowJ0npb8UGiWeQQvH3AAC+Quu/uP+2M
NNyWq7NBJbY53rsFnOzS/clnC7wE0F6dOqs4WtqnwSBxhwLdgI2NFXeappzS2kxA
l2sNSqmgH3aJ45yhw4H/8qUXhnYfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4++h
OVb24OGryf7QdetJSatwDRMwHwYDVR0jBBgwFoAUa+k9QjdfWHWi+MrSgJiFQWLS
UEgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk3RjlCL0M2REVGNERDRTI0NjExRUE4RDE2RUY1MEY4QUVBMjI4L2EtazlR
amRmV0hXaS1NclNnSmlGUVdMU1VFZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2EtazlRamRmV0hXaS1NclNnSmlGUVdMU1VFZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTdGOUIvQzZERUY0RENFMjQ2MTFFQThEMTZFRjUwRjhB
RUEyMjgvYS1rOVFqZGZXSFdpLU1yU2dKaUZRV0xTVUVnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQATy/2nvSDhVf7sYyTQFxLdFHjegB40
fgTxsZFUbHMim+HwzAK+dU7j4OatOkqhxWPsvik/bWqmy5gN5y7b6IkD46cO4sEb
EXkL1614490xbMOJVG3rhm7SfzJmFSC1XV4Q/TVgHkmKI35PJpIIgrZFQlvG9XEo
DpE007BmQCJx2h7hUiEmTqijjAeUbu6FQjK1I4lyfLdzUP8IOmTnOMISMYahaZkg
DgTD1oRG0nUMCC/KiFtddoPDG041HMfrPDzXovLcURv2ckGEYetLcSwIdxctPHGh
JUVjd8Sd8/MNvp87O8uELec+btokxsfDIHzIA88xxycJBe4MPQYaFu8c
-----END CERTIFICATE-----
Generated at Fri Jun 6 11:22:51 2025 by rpki-client