Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
File:                     gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft (raw, json)
Hash identifier:          7rcLLz6W9WzEIL4cjMVv9N16O6FfedMZ6/NmIPrAyAo=
Subject key identifier:   41:B5:3B:6F:FA:89:E0:6C:75:F7:1A:20:D2:FC:6E:7A:55:54:2E:1B
Authority key identifier: 81:06:7B:A0:9A:C6:73:44:F0:2C:D4:E6:4B:6B:F5:E4:CD:73:B8:10
Certificate issuer:       /CN=F36BE2EDRI/serialNumber=81067BA09AC67344F02CD4E64B6BF5E4CD73B810
Certificate serial:       038A
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
Manifest number:          0388
Signing time:             Sat 07 Jun 2025 03:27:41 +0000
Manifest this update:     Sat 07 Jun 2025 03:27:40 +0000
Manifest next update:     Mon 09 Jun 2025 03:27:40 +0000
Files and hashes:         1: gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl (hash: z69dQqn2+GB9K8Q95kBONzXlzJDcNYnvse7Jvarv3Cc=)
                          2: B808257A97E111ED9E450A7DF1222468.roa (hash: cAtOc/GhRwVJqkbF1v2sZelm06tLlTbFvHsrx/k9FKo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
                          rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 00:45:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906 (0x38a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDRI, serialNumber=81067BA09AC67344F02CD4E64B6BF5E4CD73B810
        Validity
            Not Before: Jun  7 03:27:40 2025 GMT
            Not After : Jun  9 03:27:40 2025 GMT
        Subject: CN=6843b1ad-1e28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a6:a7:cd:be:f8:63:ed:2b:7d:81:4f:62:9a:
                    e0:30:c0:e0:a8:d0:3d:35:af:34:c8:ba:89:2c:a3:
                    cb:8c:3e:f9:79:7b:7f:95:95:5c:e1:aa:3b:59:09:
                    68:ea:e4:fd:77:82:a7:72:37:9a:3d:6c:fd:28:01:
                    a6:e3:ba:0f:fd:1e:16:42:c5:a3:b6:b7:56:f1:53:
                    b1:74:0f:65:9a:50:99:72:09:43:27:b5:de:31:26:
                    a4:af:65:18:09:54:89:95:f6:f1:d5:d7:f0:97:90:
                    a5:c0:e2:45:da:64:1e:a1:28:b7:4e:c1:58:47:5a:
                    5e:3b:98:73:53:55:4c:f5:3c:12:a8:00:6e:48:33:
                    9a:0e:25:4c:d7:30:84:65:82:49:25:6a:b8:ae:d8:
                    ea:ef:2d:3f:ee:86:dd:da:99:50:40:af:17:e4:b1:
                    ff:20:d1:13:a9:af:dd:5d:92:fb:40:18:fa:a5:f3:
                    38:ef:32:a9:a7:01:1e:23:3a:4b:9e:36:a4:8a:a4:
                    e2:aa:05:a1:4f:82:f9:4c:85:32:b4:f0:45:7a:02:
                    a0:a5:a5:94:6b:0c:ef:90:9c:9f:cb:13:d9:d9:16:
                    a4:c2:b8:14:e1:67:a5:9a:ca:c9:fb:a8:a0:e8:0d:
                    33:b0:81:fb:c0:ab:bd:a1:3b:35:53:65:f6:b1:09:
                    f4:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:B5:3B:6F:FA:89:E0:6C:75:F7:1A:20:D2:FC:6E:7A:55:54:2E:1B
            X509v3 Authority Key Identifier:
                keyid:81:06:7B:A0:9A:C6:73:44:F0:2C:D4:E6:4B:6B:F5:E4:CD:73:B8:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:da:6b:5a:05:d5:bd:67:f7:c6:d3:ad:a4:5d:4e:80:2e:46:
         ad:31:6e:28:43:ae:b7:aa:9e:64:f0:87:27:86:25:f1:b2:1a:
         0f:05:2e:d3:bd:52:3f:7d:e0:71:60:19:f4:35:f8:56:8a:d6:
         88:00:ea:ae:bd:69:1f:a5:78:85:57:de:84:4f:34:a3:ca:36:
         41:fe:8b:63:55:99:6b:53:88:9c:d4:3f:f3:32:64:4f:fa:cc:
         7c:90:6c:cf:06:86:7e:63:da:8a:63:0c:41:73:f7:10:b4:a4:
         cc:20:ac:a5:16:e4:a9:8d:10:21:b4:31:1d:1d:e3:ad:6f:c0:
         dd:af:0a:f9:36:46:fb:00:10:dc:21:3e:62:19:d9:19:f9:d5:
         a3:78:2a:fe:f0:49:31:b5:c8:a8:13:9f:d0:2d:62:19:42:34:
         f5:23:ea:a4:3c:fe:46:c3:f6:18:49:9f:4f:6b:4d:2c:c5:0b:
         4b:88:28:5d:da:a6:4e:ef:96:42:8d:2b:7f:cb:d3:ff:ef:3c:
         f8:16:fb:25:39:fd:41:a3:b5:c7:7f:26:a7:b9:ee:23:aa:5a:
         ac:a4:42:8d:dc:ff:25:1a:38:b3:77:86:f1:93:df:e3:50:24:
         e1:34:9a:e1:68:1a:35:fb:a0:18:09:07:fb:51:40:31:b3:4b:
         80:7c:ad:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:20:37 2025 by rpki-client