Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
File:                     CzGZramPk056KV0rqhPAxHetjyU.mft (raw, json)
Hash identifier:          jKRIbdP5/1uJZZXzfOdcskAXBbBMX5jOFFaz1T9HGLQ=
Subject key identifier:   DE:71:75:28:32:94:96:4C:A7:3C:6A:A3:81:90:0F:C4:1F:C9:4D:F9
Authority key identifier: 0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
Certificate issuer:       /CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Certificate serial:       0431
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
Manifest number:          0430
Signing time:             Wed 17 Sep 2025 03:06:41 +0000
Manifest this update:     Wed 17 Sep 2025 03:06:40 +0000
Manifest next update:     Fri 19 Sep 2025 03:06:40 +0000
Files and hashes:         1: CzGZramPk056KV0rqhPAxHetjyU.crl (hash: 87o5FpArG4wRoQfMnbJMWMYI/xwxElhsJQhUD/8Lnf4=)
                          2: 5A992ACC659811ED9CE9B7C8F1222468.roa (hash: NjQvSWJBVOMZRY/QCKY/uG+2g+UAexC0q1YfjK9ZI0s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 03:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1073 (0x431)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA64DAF, serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
        Validity
            Not Before: Sep 17 03:06:40 2025 GMT
            Not After : Sep 19 03:06:40 2025 GMT
        Subject: CN=68ca25c1-0bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c4:7e:1c:53:1f:24:93:cd:1e:5f:ed:06:7d:
                    ae:6d:97:39:c7:7a:75:b9:65:21:ea:ea:4a:45:cd:
                    90:cf:f6:1d:46:b7:21:b1:c2:d4:ca:df:c9:13:32:
                    1f:19:4e:75:31:7c:0f:b0:f9:36:b4:d9:bb:7b:a4:
                    8e:31:ac:89:e9:f9:5a:4a:7b:28:b1:3d:af:6f:54:
                    79:c2:29:ae:f2:9d:35:92:55:17:cf:2c:54:bc:5e:
                    71:fd:df:bd:a0:09:38:11:49:e6:cc:8d:2a:98:a8:
                    3b:18:65:68:bc:4a:38:d4:88:48:b5:26:cb:be:6e:
                    21:cd:67:f5:c7:f8:e0:97:2d:a2:28:9e:f0:84:54:
                    4f:ef:9f:3b:0a:9c:fa:0a:05:10:cc:2e:1a:44:eb:
                    80:d5:1f:68:92:a9:be:0c:32:7c:60:2c:1e:58:ae:
                    c6:19:59:e0:9d:dc:54:ee:43:78:08:be:1e:72:b3:
                    c9:73:60:a5:73:37:b7:bc:d5:6c:b0:53:34:3b:9a:
                    ac:a6:3f:fe:36:bb:99:51:30:65:14:71:b8:da:12:
                    d7:ba:2f:c2:8d:58:a4:8b:05:e0:b7:42:06:11:ea:
                    2f:c1:28:89:39:2d:6d:b8:65:8f:1f:e8:fa:3c:fa:
                    b2:d8:1e:a4:54:51:62:32:e4:d7:1b:0b:65:55:d9:
                    fb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:71:75:28:32:94:96:4C:A7:3C:6A:A3:81:90:0F:C4:1F:C9:4D:F9
            X509v3 Authority Key Identifier:
                keyid:0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:56:61:9b:10:6b:d8:08:0a:f4:d3:aa:59:23:e9:11:0f:c7:
         e4:f9:c6:00:9c:39:1d:ad:40:29:a1:34:c4:d2:f5:7a:0c:99:
         03:22:b9:8a:aa:bd:7d:5d:05:a7:61:59:d8:6a:c4:79:de:fb:
         7c:80:2b:62:4c:a4:6e:4b:97:30:9b:58:0e:1d:97:ff:a7:b9:
         db:06:bb:45:7d:28:89:dd:c3:80:13:d1:11:e9:45:84:e7:a9:
         4b:4c:0a:84:71:37:2c:d5:4f:75:7b:1c:2c:83:75:fb:53:e2:
         2e:d5:7c:38:8c:68:3a:7d:fa:b5:fc:d3:f9:e5:00:c3:8f:8a:
         e8:b4:15:bb:3e:38:4f:9a:11:20:3e:68:90:ff:54:58:5b:25:
         ed:9f:71:7c:96:8f:ea:0f:fe:dd:c3:b6:71:42:ef:80:92:bf:
         f4:da:2d:a6:37:69:af:8e:bc:1a:34:ee:4c:83:22:47:19:cc:
         bd:d8:33:28:64:2d:07:0a:86:6a:e8:ff:18:df:eb:bc:d6:1e:
         fe:3d:7f:cc:db:1f:64:26:0c:a4:57:66:b7:7f:7a:38:f3:7c:
         f7:84:11:86:8d:b2:c9:06:b6:2f:a5:16:aa:fe:d3:b9:42:88:
         eb:13:d4:16:4b:35:6a:67:40:5a:d5:e9:90:74:bf:56:4a:d2:
         cf:f9:80:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:06:14 2025 by rpki-client