Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
File:                     7cVihK_vMTf8afnaeD_pzHg6baw.mft (raw, json)
Hash identifier:          1oTOFP6UdtHNGury6JQEF0SavpqYtSjyMrIjpDZjhNs=
Subject key identifier:   03:4D:19:35:09:B4:6A:25:2E:B0:6A:E1:53:F9:B4:06:D4:20:F0:DE
Authority key identifier: ED:C5:62:84:AF:EF:31:37:FC:69:F9:DA:78:3F:E9:CC:78:3A:6D:AC
Certificate issuer:       /CN=F36C1D14AF/serialNumber=EDC56284AFEF3137FC69F9DA783FE9CC783A6DAC
Certificate serial:       0730
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
Manifest number:          072E
Signing time:             Sun 16 Feb 2025 01:26:10 +0000
Manifest this update:     Sun 16 Feb 2025 01:26:10 +0000
Manifest next update:     Tue 18 Feb 2025 01:26:10 +0000
Files and hashes:         1: 7cVihK_vMTf8afnaeD_pzHg6baw.crl (hash: UtwCAj8Fiz8R/kg95JUbQ1Tsi3GfCNdE51dNAyTkjr4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1840 (0x730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C1D14AF
        Validity
            Not Before: Feb 16 01:26:10 2025 GMT
            Not After : Feb 18 01:26:10 2025 GMT
        Subject: CN=67b13eb2-de3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2a:41:a8:24:55:53:cc:c2:d1:12:35:81:ee:
                    14:d5:d2:6a:88:13:aa:5b:d0:48:bd:fd:5a:68:a9:
                    b1:7f:c0:fb:d5:11:87:e7:58:17:25:8d:62:92:75:
                    a9:48:92:ce:f3:38:8d:f2:a4:0b:9d:bc:4c:fa:c3:
                    bb:47:94:0c:8c:8a:d9:7e:45:dc:e6:7d:b0:56:b1:
                    ab:7e:32:c8:2f:97:4b:03:2e:82:b5:82:af:ae:65:
                    d8:19:2e:84:19:83:1b:f6:80:9d:fc:a2:9b:62:0c:
                    a6:fe:98:f2:d5:30:90:bc:e6:96:1f:42:ad:f6:af:
                    60:5a:db:56:9b:70:55:cd:5c:22:b3:26:ca:50:fb:
                    71:25:88:83:bd:d4:ba:98:07:3e:7e:2c:e5:24:11:
                    30:cd:40:ef:33:2a:d0:32:12:d1:35:7c:7a:d5:00:
                    11:33:ff:f1:36:5d:98:48:c9:a1:cc:ec:cb:f2:45:
                    83:f0:9a:ef:2d:a8:18:71:94:bc:f2:a9:96:cd:3c:
                    81:9a:ba:cc:78:1b:58:e9:10:7b:29:9e:a0:eb:ce:
                    9c:9c:7d:76:95:f6:b2:02:de:71:e5:c9:d2:c3:a7:
                    79:84:78:00:5a:7c:47:09:b8:11:e7:01:33:b6:59:
                    25:61:9c:ef:0b:43:61:bf:2b:b9:e5:46:02:91:a9:
                    18:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:4D:19:35:09:B4:6A:25:2E:B0:6A:E1:53:F9:B4:06:D4:20:F0:DE
            X509v3 Authority Key Identifier:
                keyid:ED:C5:62:84:AF:EF:31:37:FC:69:F9:DA:78:3F:E9:CC:78:3A:6D:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7cVihK_vMTf8afnaeD_pzHg6baw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C1D14/F8EF4E44700F11EA8ABD1B33F8AEA228/7cVihK_vMTf8afnaeD_pzHg6baw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:85:bd:ce:17:72:86:b2:83:bb:8f:0e:3b:d5:70:57:1f:b0:
         7c:e1:9a:f5:52:8c:2e:bf:fb:a1:ac:e3:a6:ac:c4:0b:53:d1:
         df:00:63:3f:d3:05:45:98:e3:9d:ca:cb:23:88:59:54:8e:d2:
         a4:7b:db:9c:46:b4:b3:62:f3:81:58:cf:29:3e:28:19:3a:42:
         3b:26:f4:32:f0:17:86:43:48:81:0f:2a:05:7f:ec:ff:5d:0b:
         8a:e1:bf:40:84:d7:79:01:be:55:33:31:4c:61:9e:d2:b3:39:
         6a:73:45:3e:93:ff:99:ec:e4:66:ad:ca:fc:89:6e:a7:db:22:
         28:e9:1f:25:14:91:2f:37:e7:05:91:fd:67:a4:a4:48:70:ef:
         3a:af:9c:71:8d:e3:0c:dc:54:28:cc:a0:a8:57:4e:a6:11:fb:
         7b:4d:bd:f9:b9:9c:ab:69:55:df:b1:74:8d:47:bd:b2:50:45:
         e1:ee:ae:44:0e:80:8c:4c:b6:3b:c3:ab:06:c1:c4:28:12:96:
         d5:5e:5d:bf:2c:81:03:f3:9b:a8:f7:d1:b1:a9:57:98:4a:9d:
         69:8c:d4:a2:db:c3:0a:cc:c7:0e:07:a6:8e:cd:dd:a2:65:02:
         66:6e:8d:c7:26:61:dd:f5:64:21:38:38:92:0f:31:64:0e:68:
         ab:25:f3:2d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBzAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzFEMTRBRjExMC8GA1UEBRMoRURDNTYyODRBRkVGMzEzN0ZDNjlGOURBNzgzRkU5
Q0M3ODNBNkRBQzAeFw0yNTAyMTYwMTI2MTBaFw0yNTAyMTgwMTI2MTBaMBgxFjAU
BgNVBAMTDTY3YjEzZWIyLWRlM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCYKkGoJFVTzMLREjWB7hTV0mqIE6pb0Ei9/VpoqbF/wPvVEYfnWBcljWKS
dalIks7zOI3ypAudvEz6w7tHlAyMitl+RdzmfbBWsat+Msgvl0sDLoK1gq+uZdgZ
LoQZgxv2gJ38optiDKb+mPLVMJC85pYfQq32r2Ba21abcFXNXCKzJspQ+3EliIO9
1LqYBz5+LOUkETDNQO8zKtAyEtE1fHrVABEz//E2XZhIyaHM7MvyRYPwmu8tqBhx
lLzyqZbNPIGausx4G1jpEHspnqDrzpycfXaV9rIC3nHlydLDp3mEeABafEcJuBHn
ATO2WSVhnO8LQ2G/K7nlRgKRqRhRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUA00Z
NQm0aiUusGrhU/m0BtQg8N4wHwYDVR0jBBgwFoAU7cVihK/vMTf8afnaeD/pzHg6
bawwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMxRDE0L0Y4RUY0RTQ0NzAwRjExRUE4QUJEMUIzM0Y4QUVBMjI4LzdjVmlo
S192TVRmOGFmbmFlRF9wekhnNmJhdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzdjVmloS192TVRmOGFmbmFlRF9wekhnNmJhdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzFEMTQvRjhFRjRFNDQ3MDBGMTFFQThBQkQxQjMzRjhB
RUEyMjgvN2NWaWhLX3ZNVGY4YWZuYWVEX3B6SGc2YmF3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+hb3OF3KGsoO7jw471XBXH7B84Zr1
Uowuv/uhrOOmrMQLU9HfAGM/0wVFmOOdyssjiFlUjtKke9ucRrSzYvOBWM8pPigZ
OkI7JvQy8BeGQ0iBDyoFf+z/XQuK4b9AhNd5Ab5VMzFMYZ7Sszlqc0U+k/+Z7ORm
rcr8iW6n2yIo6R8lFJEvN+cFkf1npKRIcO86r5xxjeMM3FQozKCoV06mEft7Tb35
uZyraVXfsXSNR72yUEXh7q5EDoCMTLY7w6sGwcQoEpbVXl2/LIED85uo99GxqVeY
Sp1pjNSi28MKzMcOB6aOzd2iZQJmbo3HJmHd9WQhODiSDzFkDmirJfMt
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:43:28 2025 by rpki-client