Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.mft
File:                     CFZSep0iAmz-gRG6M4cl_B6GyqA.mft (raw, json)
Hash identifier:          AQEO7iCWv40TCiLLRWgLfzfHE24Bux098uI9cowPX1o=
Subject key identifier:   14:6C:83:0C:79:AF:EE:0A:38:0F:FF:67:D8:CF:44:68:F2:DB:96:F0
Authority key identifier: 08:56:52:7A:9D:22:02:6C:FE:81:11:BA:33:87:25:FC:1E:86:CA:A0
Certificate issuer:       /CN=F36993D4AF/serialNumber=0856527A9D22026CFE8111BA338725FC1E86CAA0
Certificate serial:       5D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CFZSep0iAmz-gRG6M4cl_B6GyqA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.mft
Manifest number:          5A
Signing time:             Thu 31 Jul 2025 05:27:54 +0000
Manifest this update:     Thu 31 Jul 2025 05:27:53 +0000
Manifest next update:     Sat 02 Aug 2025 05:27:53 +0000
Files and hashes:         1: CFZSep0iAmz-gRG6M4cl_B6GyqA.crl (hash: ICZsUuu/4I+R6iftaqwm0xDDDl928ndlgn/3jjh7ngk=)
                          2: 13E4DE8C30AC11F0AE6D139CDAE4EC9C.roa (hash: WbFTeA4PMTVD0fXbeP2ec+8+4PF17WQg0dVXFVp7fgM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CFZSep0iAmz-gRG6M4cl_B6GyqA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36993D4AF, serialNumber=0856527A9D22026CFE8111BA338725FC1E86CAA0
        Validity
            Not Before: Jul 31 05:27:53 2025 GMT
            Not After : Aug  2 05:27:53 2025 GMT
        Subject: CN=688afeda-0233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c2:36:e5:7e:65:8b:59:49:6a:28:79:ee:c3:
                    cd:4f:2d:c1:05:94:24:ab:ea:3c:87:34:ee:be:de:
                    51:08:43:06:4c:60:92:28:25:59:10:26:45:9d:3c:
                    a9:12:6e:40:74:ed:14:6c:98:34:3c:e6:09:57:26:
                    dc:82:64:0d:da:9d:6c:c8:a9:70:0c:6b:c3:a1:65:
                    a5:87:7e:1d:56:49:ae:b6:d6:cb:7c:49:26:41:3a:
                    e9:9e:f3:4c:0c:03:bb:03:ea:b5:59:7a:5c:36:b5:
                    0f:02:26:b2:0b:75:59:2e:d1:22:c1:12:6e:9e:56:
                    89:4e:3f:ea:ec:fd:b8:aa:d6:4d:09:af:55:26:e3:
                    ec:2b:21:8e:80:8f:85:f3:7c:02:cf:ef:18:df:fe:
                    df:04:48:6b:35:49:48:71:91:69:71:df:16:58:a9:
                    a8:7e:98:d0:33:b0:88:25:ec:a3:5b:a9:7d:03:1c:
                    ad:4a:61:47:88:0d:84:e9:2c:f7:cf:3c:b7:3d:38:
                    04:b3:cb:ad:8e:e8:25:f6:0f:ba:46:24:fd:9b:66:
                    1a:0d:8a:cc:9d:88:36:52:d9:8b:52:7c:81:56:1c:
                    dd:88:76:41:de:d1:93:86:a2:be:33:c0:8a:5e:58:
                    88:9e:27:94:6d:d3:f6:3c:29:0e:30:c3:4f:60:b1:
                    7e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:6C:83:0C:79:AF:EE:0A:38:0F:FF:67:D8:CF:44:68:F2:DB:96:F0
            X509v3 Authority Key Identifier:
                keyid:08:56:52:7A:9D:22:02:6C:FE:81:11:BA:33:87:25:FC:1E:86:CA:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CFZSep0iAmz-gRG6M4cl_B6GyqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36993D4/4A734B822FCB11F09C9B0DBCDAE4EC9C/CFZSep0iAmz-gRG6M4cl_B6GyqA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:14:47:32:9f:8b:73:5d:b1:a4:71:7b:42:15:a5:6d:1e:31:
         5c:fc:ba:6e:2d:ff:38:4a:ab:61:09:74:60:70:03:e3:f5:af:
         8d:50:67:81:c3:9e:dc:08:24:0a:81:42:eb:a0:d2:b4:34:ce:
         2e:d4:35:4a:46:3c:a4:07:79:de:96:c4:33:1d:44:11:18:e4:
         4d:7b:34:16:79:bd:e1:42:63:b4:d2:e3:ce:1f:94:30:d5:42:
         d1:23:7e:e3:82:92:21:70:bb:b6:04:b8:e3:c4:bc:7f:ad:99:
         de:08:2e:a7:9a:57:13:44:b2:9f:04:ce:62:32:ef:42:2f:9c:
         b0:63:fd:a8:de:00:09:ea:b3:b3:1f:dd:65:07:ba:66:43:d3:
         57:19:56:d1:1b:f1:13:6d:d8:14:b3:da:a8:e8:5e:3c:cc:8f:
         01:ce:92:62:6e:fa:2f:9b:27:75:f2:db:97:39:2d:a9:f6:13:
         b1:59:85:97:ff:e7:a0:37:fb:36:dd:fe:d1:bb:d3:b0:f2:20:
         49:76:5c:4e:6a:8c:c7:f5:50:d9:e5:1f:02:ef:8b:39:ef:a8:
         b0:06:e2:54:40:04:0a:c8:bb:36:17:42:dd:cf:56:f8:f7:2c:
         25:58:0e:b4:a1:17:82:29:cb:bc:a4:9b:77:f5:07:85:17:fc:
         db:75:ad:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:14:49 2025 by rpki-client