Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
File:                     6Z6B_I_kh8L4TcmvrcH827QCmvk.mft (raw, json)
Hash identifier:          tBKvQkUow9Ski4kr2Gw3P4e4RdykHwP9mH6R3grAimY=
Subject key identifier:   B3:67:F6:D3:96:D1:42:D0:70:18:2C:4F:B8:B5:66:8E:03:F6:C7:C1
Authority key identifier: E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9
Certificate issuer:       /CN=F36C7A8FAF/serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
Certificate serial:       02B6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
Manifest number:          02AF
Signing time:             Thu 03 Apr 2025 02:30:51 +0000
Manifest this update:     Thu 03 Apr 2025 02:30:51 +0000
Manifest next update:     Sat 05 Apr 2025 02:30:51 +0000
Files and hashes:         1: 6Z6B_I_kh8L4TcmvrcH827QCmvk.crl (hash: M/rrNQAv3mZVWm2TBF4N1+U4WvF7A8fd1jLPZQxfnyQ=)
                          2: DFF4540A0AAA11EE89915D5A4AD9E6FC.roa (hash: cP9R2Qrl9S1ixebQNGm1g6k1ly30xv1Wd7bXVEu0duY=)
                          3: A20A504A0AAA11EE812F6E594AD9E6FC.roa (hash: G7RsbPwM9vl05EvPa/pSvH1sxjZhrGpa0npEjP9lu34=)
                          4: 03B9356C0AAC11EE9989895D4AD9E6FC.roa (hash: GvzLodpAjODjSMFS5AA5iBQ1yRBDjLhq9pR5HhpCZGw=)
                          5: 20911B1A0AAB11EE98E6EE5A4AD9E6FC.roa (hash: 3LYqrUAm+YgDBSHjb0aEV7V78Rp6eI1SjXprGGtvbe8=)
                          6: 57F065AC0AAB11EE93858A5B4AD9E6FC.roa (hash: 3dH4FpXYKrw/ZxlMDdoPn1emT4uwkIhadIqln0a8STQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Apr 2025 00:06:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C7A8FAF
        Validity
            Not Before: Apr  3 02:30:51 2025 GMT
            Not After : Apr  5 02:30:51 2025 GMT
        Subject: CN=67edf2db-9494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:14:8d:11:c4:2d:60:f9:28:93:48:d3:e8:e4:
                    de:b4:5c:e0:c7:de:48:76:56:93:49:f4:a6:3c:0b:
                    8a:3e:7a:db:5b:fe:39:76:ab:ea:47:6b:0f:13:05:
                    c9:86:5a:fa:90:4c:54:5d:e9:b5:d0:9c:2a:b1:45:
                    11:4f:53:61:a9:51:4d:bb:10:2b:01:d1:9d:e4:92:
                    8f:ce:0a:f0:75:94:22:c0:1b:d3:a1:3e:fc:eb:c8:
                    d6:4a:2e:ed:d1:4a:41:8c:e7:3c:fd:e5:51:93:70:
                    60:bd:f2:b2:d6:14:a6:9e:29:0d:75:fa:d3:de:fd:
                    fd:ff:dd:dd:11:9c:30:52:95:70:0a:7f:fe:e0:2c:
                    e1:39:c9:26:3b:fc:1c:88:da:b4:2a:12:25:db:a9:
                    f4:a4:2d:a0:90:f5:04:8d:33:55:f1:b3:92:34:e3:
                    4f:8f:64:56:d0:11:e5:b8:2d:67:3f:9a:e2:68:9a:
                    63:ab:14:a3:50:06:39:39:08:3d:d0:f2:2d:47:b3:
                    f3:fc:4a:f4:9c:71:cf:cc:36:02:f1:83:08:7e:5b:
                    c3:48:ae:a0:bd:eb:5f:e0:2a:35:63:2f:b7:22:8b:
                    c2:17:bd:b4:0f:05:2d:ae:e3:29:d4:53:a7:e2:2c:
                    bd:fe:74:fd:fe:d2:ba:1a:f9:1d:b8:99:c9:20:6d:
                    c9:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:67:F6:D3:96:D1:42:D0:70:18:2C:4F:B8:B5:66:8E:03:F6:C7:C1
            X509v3 Authority Key Identifier:
                keyid:E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:84:85:53:9a:0a:d3:3c:78:8c:0f:e1:f2:29:f3:bd:6a:a9:
         97:83:6d:bb:9c:f4:ea:a0:4b:a6:92:52:47:9a:2b:d7:e6:e1:
         ba:5b:bd:d3:af:3e:8e:95:30:fe:f5:84:e4:1a:91:ee:dd:d3:
         0f:2a:7d:dc:4b:8e:78:4d:b5:e3:ef:21:9e:7a:49:12:82:fe:
         47:27:03:78:b5:46:23:72:bf:f0:e9:fe:67:ad:fa:9e:33:6e:
         99:37:01:be:d8:aa:1b:b3:65:92:09:45:e3:be:82:ad:c1:51:
         28:a5:cf:9b:b4:f3:33:5b:df:fe:0d:36:38:db:f4:7f:c0:d8:
         e3:9e:55:eb:4b:50:2f:85:f3:44:48:20:c8:da:4c:c2:9f:99:
         88:5c:10:4d:a7:e0:d7:d5:40:77:81:c2:61:48:d6:04:35:37:
         cb:a6:40:04:5c:d5:fb:f2:86:e5:52:d4:63:37:cd:ed:68:88:
         05:cc:b9:9f:43:de:45:74:ce:96:fc:88:fe:4a:2f:3a:5e:7c:
         34:e7:55:f9:0f:58:bd:10:9a:c4:4e:a1:ed:1c:73:d6:66:40:
         ae:33:84:3e:2a:56:9b:b9:85:57:9b:07:90:e8:70:b9:37:c5:
         af:c2:39:38:7a:bf:96:74:91:00:75:10:84:28:16:e4:4b:e9:
         67:5e:18:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:07:51 2025 by rpki-client