Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
File:                     CzGZramPk056KV0rqhPAxHetjyU.mft (raw, json)
Hash identifier:          y0qwlUKNB6IKxtX9Ac7+/txSogIMzg+xzqe3lR49Q+E=
Subject key identifier:   C0:47:92:3B:E9:4C:61:7E:DF:B7:1E:82:C3:F6:91:D4:29:FC:7A:A0
Authority key identifier: 0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
Certificate issuer:       /CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Certificate serial:       03C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
Manifest number:          03C6
Signing time:             Wed 04 Jun 2025 03:18:48 +0000
Manifest this update:     Wed 04 Jun 2025 03:18:48 +0000
Manifest next update:     Fri 06 Jun 2025 03:18:47 +0000
Files and hashes:         1: CzGZramPk056KV0rqhPAxHetjyU.crl (hash: a1cr+59w5Ulq4V3BFOPAl0FUKDyVBnQvVBNcgmQ6yVw=)
                          2: 5A992ACC659811ED9CE9B7C8F1222468.roa (hash: NjQvSWJBVOMZRY/QCKY/uG+2g+UAexC0q1YfjK9ZI0s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 967 (0x3c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA64DAF, serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
        Validity
            Not Before: Jun  4 03:18:48 2025 GMT
            Not After : Jun  6 03:18:47 2025 GMT
        Subject: CN=683fbb18-4739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:41:e6:06:51:d6:94:b2:de:f5:22:29:bd:e8:
                    75:e0:08:05:15:63:c7:e4:8b:85:70:fd:16:2a:41:
                    79:06:49:5e:d4:84:e5:47:30:d2:d3:94:c9:a9:f5:
                    31:de:42:b4:08:54:05:df:f9:f9:84:7e:a2:83:de:
                    e8:69:ff:93:12:88:16:a8:15:a2:a4:c7:df:7c:03:
                    38:50:f9:df:fe:09:e5:05:47:be:3f:0a:e2:20:89:
                    80:1c:fc:ac:ac:9e:e4:e9:9b:c0:59:e9:ab:c0:f4:
                    b1:b0:44:9c:14:9c:b5:cb:e9:1a:c1:ac:e6:6d:fe:
                    f3:b5:e6:94:94:22:4d:e4:2d:4b:ba:57:02:06:a7:
                    82:04:11:c5:d8:7a:66:9f:e3:4a:ce:e0:ca:80:07:
                    5a:a9:d0:8e:7b:05:76:d7:cd:ab:50:dc:5a:72:db:
                    96:4b:40:2f:70:d9:eb:54:69:27:44:7a:2e:35:aa:
                    03:9c:08:3b:ed:2e:43:7b:ab:07:c1:a2:c7:ab:6d:
                    1f:9a:a1:08:49:37:18:51:34:11:80:71:84:78:50:
                    6b:a5:71:4a:50:d0:03:c9:90:a4:b6:fe:1b:aa:0e:
                    63:3d:67:b5:65:d4:06:3b:e0:30:dd:47:04:3a:ac:
                    9d:a9:5e:2a:2d:d4:32:dd:3b:4d:e1:63:83:5e:3c:
                    6b:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:47:92:3B:E9:4C:61:7E:DF:B7:1E:82:C3:F6:91:D4:29:FC:7A:A0
            X509v3 Authority Key Identifier:
                keyid:0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:45:6d:c4:33:df:e6:d0:1b:9a:58:ae:0a:ad:30:e7:a7:f2:
         66:51:f6:95:6f:e2:35:cf:6e:f9:3f:9e:82:9a:ab:b0:97:a0:
         62:08:99:71:d1:8b:79:82:01:57:6f:bf:e5:3c:1c:25:f5:19:
         eb:d6:19:52:fe:87:cb:87:7e:d2:fa:fc:bd:78:de:b9:9c:b2:
         9f:28:5f:35:c4:b0:42:6c:46:ed:0f:45:6d:71:01:94:d5:b7:
         28:06:13:28:e5:b7:da:1c:9c:af:e3:af:2c:67:d9:0f:16:13:
         43:bb:37:5c:9c:94:08:b1:b6:fb:4f:36:8b:99:8a:98:2c:69:
         fd:9f:be:ed:82:74:5f:fd:c3:e2:a1:a1:01:8a:65:04:2f:43:
         cf:71:bd:f4:85:26:f5:38:83:85:3c:a4:fb:ee:fd:be:e1:fc:
         9f:b3:e2:4a:42:b5:af:59:0c:aa:46:73:90:49:ba:c3:bd:39:
         93:96:c3:11:c1:28:b5:32:72:18:8f:ff:e6:8a:e3:9e:54:12:
         e0:df:4c:f4:fe:45:e9:d6:96:9a:8a:6a:1d:bf:f6:1f:19:61:
         c2:e6:29:fc:db:0b:00:03:fe:1c:7e:fb:fc:a3:d2:45:27:24:
         96:b7:1a:5f:64:2b:17:df:1e:f1:53:d3:74:07:1b:3a:fb:4e:
         eb:7d:c0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:12:57 2025 by rpki-client