Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
File:                     gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft (raw, json)
Hash identifier:          /Is4DtfloOU/x8Hk+aSOM8xG2sYD2isbK5b109QN0Cc=
Subject key identifier:   34:47:72:2D:7A:80:41:EF:CE:FE:A9:6E:C1:7E:6E:EE:95:92:B1:B3
Authority key identifier: 81:06:7B:A0:9A:C6:73:44:F0:2C:D4:E6:4B:6B:F5:E4:CD:73:B8:10
Certificate issuer:       /CN=F36BE2EDRI/serialNumber=81067BA09AC67344F02CD4E64B6BF5E4CD73B810
Certificate serial:       034A
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
Manifest number:          0348
Signing time:             Sat 05 Apr 2025 02:19:11 +0000
Manifest this update:     Sat 05 Apr 2025 02:19:11 +0000
Manifest next update:     Mon 07 Apr 2025 02:19:11 +0000
Files and hashes:         1: gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl (hash: U/ktGscjZQB4lUm779kjOhCZs0Z5WVAOFYOLbuWBxoI=)
                          2: B808257A97E111ED9E450A7DF1222468.roa (hash: cAtOc/GhRwVJqkbF1v2sZelm06tLlTbFvHsrx/k9FKo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
                          rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 07 Apr 2025 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 842 (0x34a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDRI
        Validity
            Not Before: Apr  5 02:19:11 2025 GMT
            Not After : Apr  7 02:19:11 2025 GMT
        Subject: CN=67f0931f-cd16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:63:50:d4:1f:1e:43:40:a5:3a:ca:7e:c0:
                    5c:ac:30:19:bf:a1:b0:6b:72:bc:4e:dc:6b:eb:96:
                    a8:55:0d:03:3b:3b:2f:a9:39:d1:a1:30:25:0a:fb:
                    10:e1:d5:ae:ea:59:8e:f8:74:ae:a7:d0:48:be:41:
                    1a:a2:77:36:28:4c:60:48:a8:01:92:34:1f:40:c2:
                    f0:89:5d:b8:35:aa:53:bc:a8:cb:65:fa:92:90:df:
                    45:d4:85:c9:7c:9e:65:73:9b:fa:f5:a6:65:10:28:
                    ac:f7:9b:c2:cd:00:0b:75:73:10:d9:53:51:69:69:
                    73:e5:10:89:7a:d6:8c:32:24:cd:88:89:92:4a:d1:
                    15:67:c3:0c:4f:05:14:ad:dc:62:c2:c0:24:2a:99:
                    c0:50:a0:d1:58:51:f4:eb:f6:07:ce:ec:0f:cb:c3:
                    9a:30:22:b1:68:fc:18:c0:58:66:4d:74:c9:ab:3f:
                    32:f7:a7:f8:06:e5:b0:12:81:43:db:04:72:a6:13:
                    f4:04:9a:db:4d:a7:ec:71:7a:62:a2:1d:f1:f0:02:
                    ac:fa:39:84:c6:69:a0:38:fe:95:d2:a2:c3:26:bf:
                    5e:cf:ed:c7:e1:87:b1:dc:ac:30:80:b4:18:7d:93:
                    95:0d:7d:43:b0:9b:b3:ae:fd:b9:4b:3c:c8:29:62:
                    8d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:47:72:2D:7A:80:41:EF:CE:FE:A9:6E:C1:7E:6E:EE:95:92:B1:B3
            X509v3 Authority Key Identifier:
                keyid:81:06:7B:A0:9A:C6:73:44:F0:2C:D4:E6:4B:6B:F5:E4:CD:73:B8:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:99:d7:09:1f:54:42:ba:08:ac:5a:8f:a0:e2:c7:76:31:99:
         36:07:62:61:69:5b:a0:f4:78:98:47:73:e0:b8:f5:df:fa:4a:
         b9:f2:85:e0:80:bd:e8:fb:08:c8:02:65:68:b9:2f:63:8f:c5:
         db:37:ea:ac:9c:82:44:9d:ce:fa:21:bf:4f:22:cc:d1:0b:c0:
         f7:34:65:b6:d2:a2:33:b6:de:e2:71:23:bd:23:50:dd:33:3a:
         ba:53:4f:ba:9b:1d:fe:b4:a7:06:80:4a:63:89:b4:d2:c6:00:
         48:26:d1:72:ee:15:89:55:f2:4f:2b:5a:e8:b1:4f:2d:33:ae:
         ca:33:17:2c:9a:7d:85:03:e5:c3:b5:ad:f8:47:54:40:75:80:
         06:70:fa:4d:ff:52:f5:bc:94:84:d3:fd:20:26:07:d9:3f:48:
         23:9c:f4:be:e1:37:2e:c0:66:41:f7:6f:3c:93:25:59:c4:9d:
         4a:5f:b8:b0:38:d6:92:6c:21:04:7a:87:c2:0a:bf:29:e6:35:
         f9:63:8b:3f:cf:94:60:e7:41:83:87:74:12:1d:43:00:47:f1:
         49:90:ce:e0:c6:4d:d8:be:23:9e:71:74:fc:00:a1:9f:e9:47:
         34:45:10:f4:06:66:2a:54:41:42:1e:93:43:c7:b8:4b:00:0a:
         e0:7d:4c:ff
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA0owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkUyRURSSTExMC8GA1UEBRMoODEwNjdCQTA5QUM2NzM0NEYwMkNENEU2NEI2QkY1
RTRDRDczQjgxMDAeFw0yNTA0MDUwMjE5MTFaFw0yNTA0MDcwMjE5MTFaMBgxFjAU
BgNVBAMTDTY3ZjA5MzFmLWNkMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMvmNQ1B8eQ0ClOsp+wFysMBm/obBrcrxO3GvrlqhVDQM7Oy+pOdGhMCUK
+xDh1a7qWY74dK6n0Ei+QRqidzYoTGBIqAGSNB9AwvCJXbg1qlO8qMtl+pKQ30XU
hcl8nmVzm/r1pmUQKKz3m8LNAAt1cxDZU1FpaXPlEIl61owyJM2IiZJK0RVnwwxP
BRSt3GLCwCQqmcBQoNFYUfTr9gfO7A/Lw5owIrFo/BjAWGZNdMmrPzL3p/gG5bAS
gUPbBHKmE/QEmttNp+xxemKiHfHwAqz6OYTGaaA4/pXSosMmv17P7cfhh7HcrDCA
tBh9k5UNfUOwm7Ou/blLPMgpYo2tAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUNEdy
LXqAQe/O/qluwX5u7pWSsbMwHwYDVR0jBBgwFoAUgQZ7oJrGc0TwLNTmS2v15M1z
uBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJFMkVELzA2MzI0Q0Q4OTdERjExRURBNzE5RjlGMkYxMjIyNDY4L2dRWjdv
SnJHYzBUd0xOVG1TMnYxNU0xenVCQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L2dRWjdvSnJHYzBUd0xOVG1TMnYxNU0xenVCQS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QkUyRUQvMDYzMjRDRDg5N0RGMTFFREE3MTlGOUYyRjEyMjI0
NjgvZ1FaN29KckdjMFR3TE5UbVMydjE1TTF6dUJBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA+mdcJH1RCugisWo+g4sd2MZk2B2JhaVug
9HiYR3PguPXf+kq58oXggL3o+wjIAmVouS9jj8XbN+qsnIJEnc76Ib9PIszRC8D3
NGW20qIztt7icSO9I1DdMzq6U0+6mx3+tKcGgEpjibTSxgBIJtFy7hWJVfJPK1ro
sU8tM67KMxcsmn2FA+XDta34R1RAdYAGcPpN/1L1vJSE0/0gJgfZP0gjnPS+4Tcu
wGZB9288kyVZxJ1KX7iwONaSbCEEeofCCr8p5jX5Y4s/z5Rg50GDh3QSHUMAR/FJ
kM7gxk3YviOecXT8AKGf6Uc0RRD0BmYqVEFCHpNDx7hLAArgfUz/
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:39:44 2025 by rpki-client