Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
File:                     pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft (raw, json)
Hash identifier:          b7t1iPBcvRZT0yW2k672RkmS1R4T9yoJZQJWkP95WUY=
Subject key identifier:   28:BB:A0:D1:48:C7:87:70:0A:84:F5:25:54:B4:16:44:0D:6C:EA:6B
Authority key identifier: A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62
Certificate issuer:       /CN=F36C6CA3AF/serialNumber=A722D848BEE51A4D172B9CAFAFA49192B91D8C62
Certificate serial:       A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
Manifest number:          A6
Signing time:             Sun 16 Feb 2025 03:16:05 +0000
Manifest this update:     Sun 16 Feb 2025 03:16:04 +0000
Manifest next update:     Tue 18 Feb 2025 03:16:04 +0000
Files and hashes:         1: pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl (hash: AfhmGPG0h2b2vCvOKubHZ3VMNjJG51opUY5qvoDQNx0=)
                          2: 3D6B042477A311EF8B65448C762E951A.roa (hash: TQ2pYgQMjddwwjuMRvhC7oG/YTmFbZhFUDTK4ehlRyY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 169 (0xa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6CA3AF
        Validity
            Not Before: Feb 16 03:16:04 2025 GMT
            Not After : Feb 18 03:16:04 2025 GMT
        Subject: CN=67b15875-88d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:de:f0:66:3d:6a:4a:26:7f:ff:e3:b4:17:b6:
                    fc:30:ac:4a:33:b1:b2:01:e3:4d:6e:e1:12:69:a2:
                    b7:21:b0:44:8b:22:29:57:27:cd:b2:16:bd:3d:05:
                    3b:13:f7:dd:f3:75:1f:de:36:78:8e:f0:ba:22:0a:
                    96:8c:14:71:0f:03:20:23:5e:2a:a8:75:0b:33:aa:
                    d4:a8:a1:1a:d6:e3:05:a5:00:bd:35:c5:10:6c:df:
                    82:9f:fb:d2:82:e8:10:dc:56:de:69:fb:89:88:91:
                    bc:64:50:08:c0:ca:0f:26:49:18:f6:83:95:9d:27:
                    75:96:54:48:ee:c6:4a:7d:73:ec:2d:60:dc:00:47:
                    d4:6b:cb:68:19:82:c4:72:6a:44:08:85:14:53:bb:
                    ce:7f:95:ec:ad:bd:72:03:0c:3e:fb:4e:98:c3:15:
                    59:99:93:1a:8e:3a:44:ef:77:d6:24:bd:f5:e8:29:
                    e7:c9:41:21:d6:62:93:6f:52:6e:ef:64:01:af:1f:
                    37:f7:66:e8:94:5e:08:6a:7e:3d:9c:81:2e:25:27:
                    3e:5d:4d:c7:e5:db:1c:e3:4c:b0:b6:9b:2f:d8:99:
                    6f:c1:35:bb:95:43:5a:5c:1c:af:bb:fa:7e:b4:2d:
                    b0:b2:4c:8c:b5:34:9c:67:58:7c:50:07:88:19:07:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:BB:A0:D1:48:C7:87:70:0A:84:F5:25:54:B4:16:44:0D:6C:EA:6B
            X509v3 Authority Key Identifier:
                keyid:A7:22:D8:48:BE:E5:1A:4D:17:2B:9C:AF:AF:A4:91:92:B9:1D:8C:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pyLYSL7lGk0XK5yvr6SRkrkdjGI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6CA3/473DAE7E758D11EFAA2FD17B762E951A/pyLYSL7lGk0XK5yvr6SRkrkdjGI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:c8:0b:cd:4a:56:b1:a9:36:18:99:05:fa:3c:7c:e0:ca:74:
         5f:4e:fe:44:2a:48:4f:f4:5e:ac:1a:c2:e6:8e:20:be:94:1c:
         66:3f:96:77:9c:12:01:44:07:77:8a:4a:e7:29:76:f8:9d:4f:
         09:e0:60:e0:0c:10:10:ef:ba:bc:df:d5:69:ca:e3:56:2d:44:
         bd:4d:83:2d:7e:ab:72:f0:14:23:ff:d6:dd:80:a4:59:9a:0a:
         cc:f0:ad:c6:cc:81:bf:f7:d0:8f:28:c8:e2:cd:0d:a4:72:82:
         30:99:62:15:fc:0f:e1:6e:39:9c:9d:a1:09:04:9c:9c:86:18:
         b2:1b:9e:4e:8e:93:d9:d9:03:80:8c:69:9a:88:1e:d3:47:2b:
         a4:20:a2:5f:dc:5d:24:34:64:1e:1a:c0:0c:8f:01:53:69:10:
         75:99:96:64:c7:86:51:1b:60:80:02:71:b3:a1:28:be:42:1b:
         96:40:cf:52:36:41:5f:91:29:6c:24:e9:68:d5:84:58:7e:11:
         87:98:ee:5e:89:8a:ee:e2:2a:12:a5:2e:29:de:9b:f9:91:5b:
         1e:fb:30:08:b4:cc:31:bc:f9:ae:1c:59:62:e2:86:c0:0d:1e:
         db:c9:22:fa:ac:b6:51:3e:a5:03:e3:fd:27:09:ed:bd:5c:28:
         55:6a:49:f9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzZDQTNBRjExMC8GA1UEBRMoQTcyMkQ4NDhCRUU1MUE0RDE3MkI5Q0FGQUZBNDkx
OTJCOTFEOEM2MjAeFw0yNTAyMTYwMzE2MDRaFw0yNTAyMTgwMzE2MDRaMBgxFjAU
BgNVBAMTDTY3YjE1ODc1LTg4ZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQ3vBmPWpKJn//47QXtvwwrEozsbIB401u4RJporchsESLIilXJ82yFr09
BTsT993zdR/eNniO8LoiCpaMFHEPAyAjXiqodQszqtSooRrW4wWlAL01xRBs34Kf
+9KC6BDcVt5p+4mIkbxkUAjAyg8mSRj2g5WdJ3WWVEjuxkp9c+wtYNwAR9Rry2gZ
gsRyakQIhRRTu85/leytvXIDDD77TpjDFVmZkxqOOkTvd9YkvfXoKefJQSHWYpNv
Um7vZAGvHzf3ZuiUXghqfj2cgS4lJz5dTcfl2xzjTLC2my/YmW/BNbuVQ1pcHK+7
+n60LbCyTIy1NJxnWHxQB4gZB6BbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKLug
0UjHh3AKhPUlVLQWRA1s6mswHwYDVR0jBBgwFoAUpyLYSL7lGk0XK5yvr6SRkrkd
jGIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM2Q0EzLzQ3M0RBRTdFNzU4RDExRUZBQTJGRDE3Qjc2MkU5NTFBL3B5TFlT
TDdsR2swWEs1eXZyNlNSa3JrZGpHSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3B5TFlTTDdsR2swWEs1eXZyNlNSa3JrZGpHSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzZDQTMvNDczREFFN0U3NThEMTFFRkFBMkZEMTdCNzYy
RTk1MUEvcHlMWVNMN2xHazBYSzV5dnI2U1JrcmtkakdJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMyAvNSlaxqTYYmQX6PHzgynRfTv5E
KkhP9F6sGsLmjiC+lBxmP5Z3nBIBRAd3ikrnKXb4nU8J4GDgDBAQ77q839VpyuNW
LUS9TYMtfqty8BQj/9bdgKRZmgrM8K3GzIG/99CPKMjizQ2kcoIwmWIV/A/hbjmc
naEJBJychhiyG55OjpPZ2QOAjGmaiB7TRyukIKJf3F0kNGQeGsAMjwFTaRB1mZZk
x4ZRG2CAAnGzoSi+QhuWQM9SNkFfkSlsJOlo1YRYfhGHmO5eiYru4ioSpS4p3pv5
kVse+zAItMwxvPmuHFli4obADR7bySL6rLZRPqUD4/0nCe29XChVakn5
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:41 2025 by rpki-client