Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
File:                     gSd0TaTuADsp3hEDT3LeuN_sKP0.mft (raw, json)
Hash identifier:          DpxiwfnyD08Skj2Va2wKzRLDZt+DaDUzcD2lWjccsKM=
Subject key identifier:   17:A6:17:19:B2:F8:DA:D2:D7:C7:D0:AF:66:87:63:2F:CC:AF:72:E8
Authority key identifier: 81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD
Certificate issuer:       /CN=F36A31C5AF/serialNumber=8127744DA4EE003B29DE11034F72DEB8DFEC28FD
Certificate serial:       87
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
Manifest number:          86
Signing time:             Thu 03 Apr 2025 03:20:08 +0000
Manifest this update:     Thu 03 Apr 2025 03:20:08 +0000
Manifest next update:     Sat 05 Apr 2025 03:20:08 +0000
Files and hashes:         1: gSd0TaTuADsp3hEDT3LeuN_sKP0.crl (hash: WV4bqDRTgrj3RDTMawf3LoJ554BejTKITAnO8zrmQHE=)
                          2: 7AE36338AD8011EF9210379E762E951A.roa (hash: XKLpYRyjT4GR/+JJ89LUWYlPWbTP8lT2SU+RbEft1XA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A31C5AF
        Validity
            Not Before: Apr  3 03:20:08 2025 GMT
            Not After : Apr  5 03:20:08 2025 GMT
        Subject: CN=67edfe68-4f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:02:f5:ec:5f:43:ac:50:6b:4e:66:2e:15:
                    87:4d:95:6a:62:74:00:e1:25:aa:e1:23:d6:50:e9:
                    35:b0:00:86:73:c6:5a:7c:41:8f:b0:8a:aa:08:6a:
                    f9:f0:e1:a4:e8:51:fc:5e:cf:6b:c5:59:22:f5:d9:
                    95:18:71:fe:bf:aa:3a:d7:b3:e5:45:4a:d3:d0:0b:
                    43:76:f3:c3:60:10:e9:e3:9a:85:1d:30:13:e0:33:
                    45:db:91:da:62:ca:05:22:3b:e1:31:c2:26:60:f9:
                    1b:5f:ec:f4:02:e5:48:f7:ea:14:53:95:fe:27:78:
                    ae:00:29:ca:6e:74:07:24:f7:3d:d8:94:2f:95:04:
                    2a:70:20:76:64:72:ac:2e:11:21:2f:09:b7:13:5e:
                    58:1d:f8:83:f6:42:47:e4:71:7f:6b:eb:b5:49:61:
                    d7:d5:dd:7e:0e:40:8c:3d:f0:22:12:eb:60:b3:b7:
                    cc:13:f7:7b:8b:9e:3b:7f:fc:44:33:42:1c:fd:59:
                    ac:79:8d:e7:cc:80:99:e5:43:8f:38:7d:95:15:78:
                    69:ce:d0:b6:6c:6e:d6:98:19:96:3e:34:e3:3f:e4:
                    cc:58:be:8c:a4:dc:4d:70:e7:74:d0:0c:5f:59:e5:
                    23:d2:94:49:85:a2:7c:ca:53:4c:13:a0:10:92:09:
                    a2:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A6:17:19:B2:F8:DA:D2:D7:C7:D0:AF:66:87:63:2F:CC:AF:72:E8
            X509v3 Authority Key Identifier:
                keyid:81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d9:9a:80:d2:e5:27:c0:b6:2a:77:b9:0d:1a:8e:d0:f3:47:
         bf:d9:d0:e0:ff:d0:1b:d8:66:4b:b8:c2:3b:f7:59:3d:c1:f1:
         a0:09:d3:70:ea:3d:58:e5:45:92:38:09:6e:5f:2b:90:c5:d1:
         c1:bb:d5:6f:60:79:2d:2b:66:83:d7:55:37:70:24:1e:d2:5d:
         58:a8:94:3d:5c:98:f4:88:5e:74:d2:6a:40:92:1d:7a:9a:90:
         df:01:8a:a8:b4:19:7d:31:cb:24:b5:2b:fe:fb:c2:7b:6b:86:
         c3:91:6e:9a:c5:1a:e7:3f:f2:41:62:af:6b:33:31:04:7e:0a:
         3c:de:ab:ba:9c:b3:9c:f9:13:48:c8:64:90:8f:8a:14:71:9a:
         c8:88:a3:36:76:4b:65:98:74:cd:eb:e9:27:76:b4:2e:8b:f2:
         d6:07:a2:8c:a5:61:16:00:c0:6a:c8:93:5b:11:b4:cd:68:f8:
         b1:69:7d:a1:0e:82:7b:99:26:68:47:46:71:6d:12:9d:f6:96:
         18:57:cc:37:3d:0c:53:a6:6e:3f:d2:a4:7b:48:f7:2a:40:76:
         0c:40:2a:33:5f:35:fc:0a:37:3b:7b:53:44:76:0e:5e:b2:3b:
         19:45:c7:31:2c:97:1f:f7:ba:95:68:1f:ba:a9:22:3a:eb:76:
         61:53:d9:15
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAIcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTMxQzVBRjExMC8GA1UEBRMoODEyNzc0NERBNEVFMDAzQjI5REUxMTAzNEY3MkRF
QjhERkVDMjhGRDAeFw0yNTA0MDMwMzIwMDhaFw0yNTA0MDUwMzIwMDhaMBgxFjAU
BgNVBAMTDTY3ZWRmZTY4LTRmMTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7lAL17F9DrFBrTmYuFYdNlWpidADhJarhI9ZQ6TWwAIZzxlp8QY+wiqoI
avnw4aToUfxez2vFWSL12ZUYcf6/qjrXs+VFStPQC0N288NgEOnjmoUdMBPgM0Xb
kdpiygUiO+ExwiZg+Rtf7PQC5Uj36hRTlf4neK4AKcpudAck9z3YlC+VBCpwIHZk
cqwuESEvCbcTXlgd+IP2QkfkcX9r67VJYdfV3X4OQIw98CIS62Czt8wT93uLnjt/
/EQzQhz9Wax5jefMgJnlQ484fZUVeGnO0LZsbtaYGZY+NOM/5MxYvoyk3E1w53TQ
DF9Z5SPSlEmFonzKU0wToBCSCaIBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUF6YX
GbL42tLXx9CvZodjL8yvcugwHwYDVR0jBBgwFoAUgSd0TaTuADsp3hEDT3LeuN/s
KP0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzMUM1LzZGOTA2MThBQUQ3RjExRUZBNTQ5ODY5Nzc2MkU5NTFBL2dTZDBU
YVR1QURzcDNoRURUM0xldU5fc0tQMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dTZDBUYVR1QURzcDNoRURUM0xldU5fc0tQMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTMxQzUvNkY5MDYxOEFBRDdGMTFFRkE1NDk4Njk3NzYy
RTk1MUEvZ1NkMFRhVHVBRHNwM2hFRFQzTGV1Tl9zS1AwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAT2ZqA0uUnwLYqd7kNGo7Q80e/2dDg
/9Ab2GZLuMI791k9wfGgCdNw6j1Y5UWSOAluXyuQxdHBu9VvYHktK2aD11U3cCQe
0l1YqJQ9XJj0iF500mpAkh16mpDfAYqotBl9McsktSv++8J7a4bDkW6axRrnP/JB
Yq9rMzEEfgo83qu6nLOc+RNIyGSQj4oUcZrIiKM2dktlmHTN6+kndrQui/LWB6KM
pWEWAMBqyJNbEbTNaPixaX2hDoJ7mSZoR0ZxbRKd9pYYV8w3PQxTpm4/0qR7SPcq
QHYMQCozXzX8Cjc7e1NEdg5esjsZRccxLJcf97qVaB+6qSI663ZhU9kV
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:18:55 2025 by rpki-client