Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.mft
File:                     eekHF2z7dQa9kWBW83X6OM5BzaM.mft (raw, json)
Hash identifier:          TVuv9CdM1Od9ZZMyEC1YbcBJUpGJvFU2RVL3m18LAXI=
Subject key identifier:   72:7D:FA:70:05:C5:6D:A8:73:0C:A0:0C:D0:94:93:79:B2:6E:C2:A2
Authority key identifier: 79:E9:07:17:6C:FB:75:06:BD:91:60:56:F3:75:FA:38:CE:41:CD:A3
Certificate issuer:       /CN=F36AB5C3AF/serialNumber=79E907176CFB7506BD916056F375FA38CE41CDA3
Certificate serial:       0285
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eekHF2z7dQa9kWBW83X6OM5BzaM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.mft
Manifest number:          0284
Signing time:             Thu 13 Mar 2025 02:34:24 +0000
Manifest this update:     Thu 13 Mar 2025 02:34:23 +0000
Manifest next update:     Sat 15 Mar 2025 02:34:23 +0000
Files and hashes:         1: eekHF2z7dQa9kWBW83X6OM5BzaM.crl (hash: NYAOmNshG5T6hFXD+WM0ngkkgJUJf33hRN+wGQ5wfiQ=)
                          2: 5323458C184611EEAA09D5184AD9E6FC.roa (hash: A8xuzCyGtjAq6hsUbNjHYuJn81F3LK8LOnUy2g8YDWc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eekHF2z7dQa9kWBW83X6OM5BzaM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 15 Mar 2025 00:05:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 645 (0x285)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AB5C3AF
        Validity
            Not Before: Mar 13 02:34:23 2025 GMT
            Not After : Mar 15 02:34:23 2025 GMT
        Subject: CN=67d24430-ebd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3e:11:4d:e0:51:80:78:b7:02:24:ee:da:2a:
                    e0:92:a2:45:6e:6e:9f:10:3f:91:95:d8:4f:bd:7d:
                    66:0c:b4:1e:a7:f5:ce:5b:f7:75:a0:34:3b:4b:85:
                    c3:5b:ba:f5:d9:9d:58:b3:98:93:78:fd:f2:33:47:
                    e5:b4:e3:21:01:ed:db:0d:67:c3:93:c2:d2:b3:3d:
                    ee:50:b8:29:19:c3:3f:ec:69:93:33:a2:17:9b:f3:
                    6f:49:5b:93:9e:4d:7e:37:68:3d:80:35:e7:ea:e7:
                    e7:17:0a:ac:c9:ed:28:f0:75:6d:9d:3f:ff:a5:8e:
                    76:ae:b5:e6:4a:11:38:e2:f5:49:50:b9:b3:3d:19:
                    f3:e1:e0:f2:b8:74:81:dc:fe:9f:17:89:66:49:13:
                    89:d9:f3:88:cb:99:e7:9c:ca:7e:74:cd:bc:e2:18:
                    bd:24:37:f6:b0:ee:43:59:8d:d5:fd:88:15:15:c5:
                    45:31:5a:dc:d8:51:2d:af:65:5a:1c:f6:80:af:22:
                    50:7f:b0:eb:a4:83:24:86:09:96:9c:ab:86:2f:ee:
                    73:41:d3:93:be:ff:11:a4:ad:53:02:16:66:5a:9c:
                    b3:55:a1:30:2a:9a:71:73:bb:66:1f:d7:a8:91:c4:
                    10:0f:06:dc:bb:ed:20:4f:8c:d9:2b:b4:ea:aa:f8:
                    36:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:7D:FA:70:05:C5:6D:A8:73:0C:A0:0C:D0:94:93:79:B2:6E:C2:A2
            X509v3 Authority Key Identifier:
                keyid:79:E9:07:17:6C:FB:75:06:BD:91:60:56:F3:75:FA:38:CE:41:CD:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eekHF2z7dQa9kWBW83X6OM5BzaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AB5C3/F1C8256E184511EE9E5699174AD9E6FC/eekHF2z7dQa9kWBW83X6OM5BzaM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:29:bb:28:e3:1b:d5:35:be:df:40:ad:ea:63:86:72:43:77:
         86:92:a3:57:82:54:d2:a8:be:c3:19:0e:b0:b3:65:ec:6c:79:
         72:eb:04:02:69:64:92:7b:60:48:e1:95:fc:11:ec:57:59:21:
         3d:25:65:6b:b6:ac:92:8f:4a:39:97:dd:50:49:7d:77:34:fc:
         ea:99:29:4c:96:dc:5f:4a:af:4c:38:53:83:2d:6e:cd:8c:4c:
         24:ab:c4:4b:6b:7c:f2:52:a2:8d:d9:27:f2:f6:72:13:9a:37:
         57:2f:75:2a:c0:fd:cf:b6:b0:a3:61:81:10:de:f4:b7:09:32:
         b4:d8:90:b5:14:ce:bf:c1:2a:1d:8b:09:dc:b0:3c:72:15:e6:
         a3:26:e3:da:e3:32:42:4a:f7:56:7b:ed:be:1d:c7:f6:10:08:
         c9:9e:17:a9:6d:9f:bb:e0:3a:d1:08:07:52:fa:b7:e7:f3:75:
         62:55:90:c4:e8:04:b5:d8:3e:07:b3:22:58:16:b1:c4:2c:6f:
         62:33:59:03:51:f3:90:99:7c:9b:fa:a2:ee:e5:ac:41:da:e7:
         7f:e6:90:ce:48:67:fc:04:ff:58:71:73:9f:dd:4c:7c:fc:cb:
         32:ba:c1:85:46:92:9b:d4:0c:3c:8d:13:49:da:fd:10:b5:dd:
         6a:ed:a6:ce
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAoUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUI1QzNBRjExMC8GA1UEBRMoNzlFOTA3MTc2Q0ZCNzUwNkJEOTE2MDU2RjM3NUZB
MzhDRTQxQ0RBMzAeFw0yNTAzMTMwMjM0MjNaFw0yNTAzMTUwMjM0MjNaMBgxFjAU
BgNVBAMTDTY3ZDI0NDMwLWViZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNPhFN4FGAeLcCJO7aKuCSokVubp8QP5GV2E+9fWYMtB6n9c5b93WgNDtL
hcNbuvXZnVizmJN4/fIzR+W04yEB7dsNZ8OTwtKzPe5QuCkZwz/saZMzoheb829J
W5OeTX43aD2ANefq5+cXCqzJ7SjwdW2dP/+ljnauteZKETji9UlQubM9GfPh4PK4
dIHc/p8XiWZJE4nZ84jLmeecyn50zbziGL0kN/aw7kNZjdX9iBUVxUUxWtzYUS2v
ZVoc9oCvIlB/sOukgySGCZacq4Yv7nNB05O+/xGkrVMCFmZanLNVoTAqmnFzu2Yf
16iRxBAPBty77SBPjNkrtOqq+DZBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUcn36
cAXFbahzDKAM0JSTebJuwqIwHwYDVR0jBBgwFoAUeekHF2z7dQa9kWBW83X6OM5B
zaMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFCNUMzL0YxQzgyNTZFMTg0NTExRUU5RTU2OTkxNzRBRDlFNkZDL2Vla0hG
Mno3ZFFhOWtXQlc4M1g2T001QnphTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2Vla0hGMno3ZFFhOWtXQlc4M1g2T001QnphTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QUI1QzMvRjFDODI1NkUxODQ1MTFFRTlFNTY5OTE3NEFE
OUU2RkMvZWVrSEYyejdkUWE5a1dCVzgzWDZPTTVCemFNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCjKbso4xvVNb7fQK3qY4ZyQ3eGkqNX
glTSqL7DGQ6ws2XsbHly6wQCaWSSe2BI4ZX8EexXWSE9JWVrtqySj0o5l91QSX13
NPzqmSlMltxfSq9MOFODLW7NjEwkq8RLa3zyUqKN2Sfy9nITmjdXL3UqwP3PtrCj
YYEQ3vS3CTK02JC1FM6/wSodiwncsDxyFeajJuPa4zJCSvdWe+2+Hcf2EAjJnhep
bZ+74DrRCAdS+rfn83ViVZDE6AS12D4HsyJYFrHELG9iM1kDUfOQmXyb+qLu5axB
2ud/5pDOSGf8BP9YcXOf3Ux8/MsyusGFRpKb1Aw8jRNJ2v0Qtd1q7abO
-----END CERTIFICATE-----
Generated at Thu Mar 13 23:52:58 2025 by rpki-client