Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft
File:                     GsSe57FYhufc3nkyHoJCyZMkg8k.mft (raw, json)
Hash identifier:          ns4d0NNpSfA3K1rJef4Cm5X8CZxtxGLhmHhlf0G39XA=
Subject key identifier:   C4:C7:6C:09:FD:E5:2F:72:38:60:87:26:43:DD:F1:60:26:EA:86:45
Authority key identifier: 1A:C4:9E:E7:B1:58:86:E7:DC:DE:79:32:1E:82:42:C9:93:24:83:C9
Certificate issuer:       /CN=F36A7FC6AF/serialNumber=1AC49EE7B15886E7DCDE79321E8242C9932483C9
Certificate serial:       034B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GsSe57FYhufc3nkyHoJCyZMkg8k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft
Manifest number:          0349
Signing time:             Thu 31 Jul 2025 03:47:12 +0000
Manifest this update:     Thu 31 Jul 2025 03:47:11 +0000
Manifest next update:     Sat 02 Aug 2025 03:47:11 +0000
Files and hashes:         1: GsSe57FYhufc3nkyHoJCyZMkg8k.crl (hash: 4DyTSal2cg7fe9GQ2wOvOK4tAWmNxKvSdpLbMz3i85c=)
                          2: AA9ABA5642D411F0B38EE4DEDAE4EC9C.roa (hash: pdHoehgzkEsYPixEIbNAhE6JMM6V0LCrLDRC9qMstoA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GsSe57FYhufc3nkyHoJCyZMkg8k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 843 (0x34b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A7FC6AF, serialNumber=1AC49EE7B15886E7DCDE79321E8242C9932483C9
        Validity
            Not Before: Jul 31 03:47:11 2025 GMT
            Not After : Aug  2 03:47:11 2025 GMT
        Subject: CN=688ae740-aaff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e9:d6:7f:76:51:c6:83:c8:25:d7:ee:00:00:
                    be:63:f2:82:e3:8c:ba:be:0f:90:3a:e1:b0:5a:18:
                    75:65:cf:ee:56:cf:38:d2:54:c9:7f:e7:73:ff:ca:
                    b9:d2:e6:9c:08:00:0f:54:1a:57:07:ee:d1:15:4b:
                    62:49:55:95:a8:97:d1:d1:05:e5:c7:47:a9:9f:a0:
                    04:b8:82:40:85:73:be:04:67:18:a9:18:25:7e:66:
                    22:24:a5:ac:27:77:54:a5:05:55:9a:d0:95:3f:e1:
                    f1:26:63:3b:ea:27:8d:2e:5d:96:8f:cf:03:9d:cc:
                    e0:4f:b3:dc:14:ef:f2:b2:62:5a:5e:00:2d:78:97:
                    75:a8:a0:84:50:51:31:2c:f5:c0:5c:8f:01:11:cb:
                    f2:20:87:82:63:c4:b5:ee:be:ac:b6:d3:ad:6a:f6:
                    d3:b3:72:90:45:c0:0d:ad:f3:09:2e:e3:bb:73:79:
                    3d:f6:d9:fb:9a:71:ac:3a:b0:45:4f:ab:a8:a4:c0:
                    fb:bf:63:75:46:d1:4b:ee:a8:f0:3b:c6:a9:c9:83:
                    3f:7d:50:d3:db:16:3c:20:4f:31:d2:ef:db:f0:63:
                    b5:31:b6:6d:8c:e7:19:f5:64:a9:1a:e5:ed:71:79:
                    c6:bd:a8:59:64:bc:f5:0d:11:84:a0:e9:b9:60:c6:
                    9f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C7:6C:09:FD:E5:2F:72:38:60:87:26:43:DD:F1:60:26:EA:86:45
            X509v3 Authority Key Identifier:
                keyid:1A:C4:9E:E7:B1:58:86:E7:DC:DE:79:32:1E:82:42:C9:93:24:83:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GsSe57FYhufc3nkyHoJCyZMkg8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A7FC6/831676A6EE3911ED836CCC6A4AD9E6FC/GsSe57FYhufc3nkyHoJCyZMkg8k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:ad:92:e5:3f:82:a2:7d:c4:91:ce:b0:3f:58:82:03:c4:35:
         e0:4a:d7:a5:70:60:05:bd:d0:aa:3f:66:95:ca:07:2d:d9:13:
         90:e2:30:e0:3d:15:07:e8:c3:54:31:2b:b1:81:af:05:89:3a:
         33:2a:f5:99:0b:8b:4f:0f:83:b6:f7:27:dc:1d:13:e1:f1:96:
         c7:ac:af:ca:28:a8:2c:cd:56:63:3b:5d:69:d1:14:fa:62:f3:
         0d:45:a4:a1:ea:c9:af:80:5b:29:11:34:67:76:ad:ec:3e:8b:
         34:18:38:3e:cf:70:4e:d7:bd:b7:f0:6a:e3:cf:af:84:8e:d7:
         45:fb:ec:02:91:24:a5:a3:bb:95:7a:d2:8f:5a:b8:dd:ae:3d:
         ff:21:f4:f1:c4:3f:08:82:ec:2e:cb:e5:67:fe:ab:2f:25:a3:
         69:30:9e:d5:9e:cf:54:ea:53:c8:05:b5:47:81:8c:5e:69:d4:
         ad:9f:ba:d4:bb:97:0a:33:1e:66:00:85:d1:05:c3:84:b5:1d:
         97:bc:d8:4a:12:dc:9c:20:a2:38:b2:51:86:ff:92:7b:ef:45:
         c1:85:d0:ee:1b:c7:53:ed:b3:a8:f4:be:a4:33:57:5c:7d:fe:
         43:47:5c:67:3d:ae:6a:b7:7e:a4:6f:92:c1:4c:13:a2:6a:40:
         e7:63:f2:b9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA0swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTdGQzZBRjExMC8GA1UEBRMoMUFDNDlFRTdCMTU4ODZFN0RDREU3OTMyMUU4MjQy
Qzk5MzI0ODNDOTAeFw0yNTA3MzEwMzQ3MTFaFw0yNTA4MDIwMzQ3MTFaMBgxFjAU
BgNVBAMTDTY4OGFlNzQwLWFhZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCl6dZ/dlHGg8gl1+4AAL5j8oLjjLq+D5A64bBaGHVlz+5WzzjSVMl/53P/
yrnS5pwIAA9UGlcH7tEVS2JJVZWol9HRBeXHR6mfoAS4gkCFc74EZxipGCV+ZiIk
pawnd1SlBVWa0JU/4fEmYzvqJ40uXZaPzwOdzOBPs9wU7/KyYlpeAC14l3WooIRQ
UTEs9cBcjwERy/Igh4JjxLXuvqy2061q9tOzcpBFwA2t8wku47tzeT322fuacaw6
sEVPq6ikwPu/Y3VG0UvuqPA7xqnJgz99UNPbFjwgTzHS79vwY7Uxtm2M5xn1ZKka
5e1xeca9qFlkvPUNEYSg6blgxp/xAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUxMds
Cf3lL3I4YIcmQ93xYCbqhkUwHwYDVR0jBBgwFoAUGsSe57FYhufc3nkyHoJCyZMk
g8kwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE3RkM2LzgzMTY3NkE2RUUzOTExRUQ4MzZDQ0M2QTRBRDlFNkZDL0dzU2U1
N0ZZaHVmYzNua3lIb0pDeVpNa2c4ay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dzU2U1N0ZZaHVmYzNua3lIb0pDeVpNa2c4ay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTdGQzYvODMxNjc2QTZFRTM5MTFFRDgzNkNDQzZBNEFE
OUU2RkMvR3NTZTU3RllodWZjM25reUhvSkN5Wk1rZzhrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLrZLlP4KifcSRzrA/WIIDxDXgStel
cGAFvdCqP2aVygct2ROQ4jDgPRUH6MNUMSuxga8FiTozKvWZC4tPD4O29yfcHRPh
8ZbHrK/KKKgszVZjO11p0RT6YvMNRaSh6smvgFspETRndq3sPos0GDg+z3BO1723
8Grjz6+EjtdF++wCkSSlo7uVetKPWrjdrj3/IfTxxD8Iguwuy+Vn/qsvJaNpMJ7V
ns9U6lPIBbVHgYxeadStn7rUu5cKMx5mAIXRBcOEtR2XvNhKEtycIKI4slGG/5J7
70XBhdDuG8dT7bOo9L6kM1dcff5DR1xnPa5qt36kb5LBTBOiakDnY/K5
-----END CERTIFICATE-----
Generated at Thu Jul 31 11:17:52 2025 by rpki-client