Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
File:                     zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft (raw, json)
Hash identifier:          opdBorCMB8fhuoWdu16RTZG2pCWE4AXN2/Z+IHq05Gg=
Subject key identifier:   60:BF:6E:A9:5D:0A:C7:12:52:48:CD:DB:D1:6D:78:08:B9:18:90:28
Authority key identifier: CC:2C:DE:04:D3:D4:36:1E:84:44:E2:AE:5E:42:F0:ED:F6:22:DC:E4
Certificate issuer:       /CN=F36C3DC5AF/serialNumber=CC2CDE04D3D4361E8444E2AE5E42F0EDF622DCE4
Certificate serial:       069B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
Manifest number:          069A
Signing time:             Wed 04 Jun 2025 02:03:43 +0000
Manifest this update:     Wed 04 Jun 2025 02:03:42 +0000
Manifest next update:     Fri 06 Jun 2025 02:03:42 +0000
Files and hashes:         1: zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl (hash: TfO9oC3dkepKjx7CE/kMwYWcEnnukgxNNpI/n4DCcDM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1691 (0x69b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3DC5AF, serialNumber=CC2CDE04D3D4361E8444E2AE5E42F0EDF622DCE4
        Validity
            Not Before: Jun  4 02:03:42 2025 GMT
            Not After : Jun  6 02:03:42 2025 GMT
        Subject: CN=683fa97f-1189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1a:22:9c:8b:ce:fd:e6:1d:5f:d5:29:5b:94:
                    92:6b:c9:84:df:f0:00:61:83:f4:27:8a:87:e4:35:
                    12:7e:4c:15:4c:c4:b9:f2:22:d1:f6:a8:e8:a9:73:
                    05:31:5a:61:86:64:b7:be:81:e7:a7:42:1b:23:5f:
                    49:cb:e1:2a:fc:7c:43:14:8d:40:74:7a:34:c0:87:
                    fb:27:37:26:56:b6:45:a7:ed:f1:db:19:41:40:79:
                    80:16:86:c5:51:2e:a4:cb:1e:11:a0:59:15:b6:64:
                    6b:25:8b:4c:fe:b5:2d:ea:da:5c:68:02:e3:8d:1b:
                    85:f6:fb:81:9d:80:1e:0c:36:10:8b:8c:df:c8:1c:
                    1d:67:e0:16:b2:7e:c8:db:55:23:fe:19:66:dc:5e:
                    a0:eb:f0:37:5f:c6:fe:f9:06:51:7b:31:1b:cf:92:
                    70:ca:26:36:f3:8e:1d:94:b6:38:ff:80:14:4d:1a:
                    49:5c:e2:1f:5d:42:71:56:3f:85:91:f4:a2:79:1d:
                    b8:2b:69:ce:f9:16:5d:84:56:17:94:c9:c5:49:00:
                    a7:9c:5e:29:48:b2:2a:3a:c2:15:11:4f:bb:ae:f2:
                    59:18:26:fa:c5:be:fc:b6:ef:90:52:a3:4c:03:2e:
                    e9:2d:9c:66:3b:bd:ce:ba:25:c8:24:c8:66:39:f8:
                    e4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:BF:6E:A9:5D:0A:C7:12:52:48:CD:DB:D1:6D:78:08:B9:18:90:28
            X509v3 Authority Key Identifier:
                keyid:CC:2C:DE:04:D3:D4:36:1E:84:44:E2:AE:5E:42:F0:ED:F6:22:DC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:fc:25:29:8f:5c:8e:80:05:e5:63:35:66:52:2e:16:52:f9:
         bf:9d:0e:6c:63:72:bc:fc:62:b2:14:e7:f9:5d:fa:ca:70:cd:
         5e:2a:b3:f3:d1:6d:d3:5a:d3:b8:ce:bd:7d:3f:ef:9e:69:71:
         c3:79:eb:75:37:3b:9e:a3:e6:13:bb:e9:1e:7a:d5:8e:84:e9:
         10:fd:33:3a:e7:b4:b3:cd:d5:b2:c5:be:09:a6:27:cd:00:d6:
         e1:6a:4e:01:ef:20:86:b8:50:6f:93:b5:58:a5:0c:27:78:06:
         cf:f3:4a:96:82:9f:38:11:7a:04:f7:02:9e:0b:39:83:49:03:
         76:28:c8:41:69:ca:6a:0e:7f:63:23:a2:f4:fa:b7:95:03:cd:
         b1:45:65:58:f7:d8:5f:5e:17:ad:1c:2e:f9:91:8d:f8:fa:3d:
         06:fc:e0:5c:95:0e:3c:e2:ac:29:7c:28:d8:45:c3:b8:61:34:
         61:83:80:8f:7a:da:0e:85:68:ad:7d:b7:08:d2:e6:14:6d:ed:
         55:37:c4:51:05:6c:7b:35:91:10:bf:40:fe:f7:09:8e:f8:ee:
         99:18:d0:63:bc:e9:99:60:7e:f6:15:10:53:7e:07:f3:01:6c:
         e1:4a:2a:b8:8c:18:42:77:c2:37:ce:ae:ab:6a:a1:16:0e:8e:
         db:75:ce:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:28:06 2025 by rpki-client