Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
File:                     mSzTGdelFaVjcylM4EkVP4w-AEs.mft (raw, json)
Hash identifier:          shZ+R7oNJ8PmN3jXn0rsYDvMc7pGmA02Dx7DNi6eMYw=
Subject key identifier:   03:39:AD:9F:D7:44:4B:EC:17:BD:89:13:1C:F3:5D:03:14:B5:39:DE
Authority key identifier: 99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B
Certificate issuer:       /CN=F36DD92BAF/serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
Certificate serial:       019E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
Manifest number:          019D
Signing time:             Wed 11 Jun 2025 04:33:00 +0000
Manifest this update:     Wed 11 Jun 2025 04:32:59 +0000
Manifest next update:     Fri 13 Jun 2025 04:32:59 +0000
Files and hashes:         1: mSzTGdelFaVjcylM4EkVP4w-AEs.crl (hash: DZrVll5sADKOAeB+t2UqfQvS7JCeid+GLTWSuuj7HBE=)
                          2: 6AE274920BBE11EF8A25040F017001B1.roa (hash: 5C1WjqwwGDR6D8+o0DVD1DCzkInrt9k6RbeLrYLWCSM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 13 Jun 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD92BAF, serialNumber=992CD319D7A515A56373294CE049153F8C3E004B
        Validity
            Not Before: Jun 11 04:32:59 2025 GMT
            Not After : Jun 13 04:32:59 2025 GMT
        Subject: CN=684906fc-bfc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:8c:0b:23:66:e9:43:ce:cc:21:24:03:bc:
                    96:fb:8f:a2:cf:f3:ee:c7:9c:4d:26:c1:8f:12:72:
                    33:47:6a:b0:df:43:f7:2b:ae:08:5e:6f:b9:7f:ec:
                    a5:6c:84:89:24:fa:21:0b:38:0f:30:dc:b7:77:4f:
                    c7:c6:6b:f0:3f:b3:6f:06:f5:74:05:b1:20:c9:e4:
                    88:1c:a6:41:69:4d:8b:46:47:e6:e6:b6:71:02:56:
                    d0:7b:f7:e7:21:eb:ef:6a:4a:72:c4:7d:10:dd:03:
                    ce:87:34:d7:ac:e7:d4:ae:8a:f9:37:59:21:93:84:
                    10:04:ef:0f:69:22:10:34:c1:fc:a7:0b:34:88:17:
                    7a:b0:3a:36:94:b5:81:85:21:9b:54:32:70:d2:18:
                    9d:15:5c:ab:9d:d3:ec:50:2b:e3:58:f2:c3:02:16:
                    46:35:e9:d6:4c:48:0d:b7:83:23:54:c4:57:54:4f:
                    ac:e2:a3:c8:a9:c6:45:a7:4d:53:10:e5:3b:d9:28:
                    ee:a4:ba:8a:cb:cc:4e:d8:ca:9e:59:30:5d:de:20:
                    5b:ff:36:a4:d8:b0:2e:07:e5:56:f9:dd:b1:66:29:
                    12:40:41:07:4f:8c:56:b6:df:9e:82:45:0c:fe:60:
                    94:c8:d2:34:1b:10:69:1a:79:1a:90:38:c1:68:b4:
                    e5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:39:AD:9F:D7:44:4B:EC:17:BD:89:13:1C:F3:5D:03:14:B5:39:DE
            X509v3 Authority Key Identifier:
                keyid:99:2C:D3:19:D7:A5:15:A5:63:73:29:4C:E0:49:15:3F:8C:3E:00:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mSzTGdelFaVjcylM4EkVP4w-AEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD92B/F4F4F3EA0BBD11EF8655910D017001B1/mSzTGdelFaVjcylM4EkVP4w-AEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c9:02:1b:f9:71:3c:97:6c:3b:d2:0c:87:b2:71:54:d6:53:
         91:d9:61:c6:e5:19:1c:35:0f:ec:13:91:72:4e:b5:06:14:58:
         d9:eb:94:3f:38:bd:8e:a7:73:84:f6:64:7f:3f:ea:08:68:fe:
         3d:13:11:5c:cf:56:c0:7e:16:ae:4d:7a:de:b6:e2:ec:39:3f:
         b0:fe:1b:44:97:7b:03:9e:75:b9:33:cd:d7:67:8a:9f:34:fd:
         ce:c8:c3:c8:ec:a4:31:a1:2c:b0:20:5b:2e:e8:5c:d8:2c:91:
         85:65:b8:9b:f5:8c:c5:f7:e7:ce:6b:6d:34:77:4b:1a:cc:09:
         1a:d8:9f:59:e3:e9:7c:f0:02:43:54:90:92:d0:2e:d4:cb:7f:
         af:d2:65:19:b3:37:44:70:65:08:fa:37:27:c1:3b:d2:da:de:
         fa:90:7f:71:83:8f:a5:09:e7:bd:49:5e:48:9d:07:ca:a0:31:
         fc:ec:a6:2d:70:68:9f:92:58:9a:f8:82:46:ed:41:a9:ac:35:
         d2:d3:e4:e1:75:fb:5d:52:c2:c0:17:45:be:da:ab:cb:e8:b4:
         54:41:66:1a:e0:75:a0:2b:12:fd:c0:29:4d:53:43:bc:a8:1c:
         0e:72:ad:b1:32:86:ca:89:a7:d9:27:d9:9b:02:82:8a:3f:29:
         f5:99:d6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:38:09 2025 by rpki-client