Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
File:                     ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft (raw, json)
Hash identifier:          mpstunTyAivYjE6fLjYRuMxrWhE/5vQe75GQtlK/3gE=
Subject key identifier:   4B:BB:D1:FB:15:F7:24:9E:71:07:4B:FA:EE:37:DB:28:B5:42:3B:C0
Authority key identifier: 64:E4:8B:75:E2:16:74:F8:6D:4E:6B:5F:42:36:9A:7A:73:BE:25:41
Certificate issuer:       /CN=F36E3530AF/serialNumber=64E48B75E21674F86D4E6B5F42369A7A73BE2541
Certificate serial:       021D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
Manifest number:          021A
Signing time:             Thu 18 Sep 2025 04:10:24 +0000
Manifest this update:     Thu 18 Sep 2025 04:10:23 +0000
Manifest next update:     Sat 20 Sep 2025 04:10:23 +0000
Files and hashes:         1: ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl (hash: lc8L5VJbCs1b3ldgcKE6KrbsAU19+1DWsYlltERyIL0=)
                          2: 5861C26CBC5511EF90F9D982762E951A.roa (hash: eB1InoySBqZLX3x4VP2uOavu6C8qTlq0DiXebO5lSp0=)
                          3: DF636C20BC5511EF9A9E2F85762E951A.roa (hash: tSQEd/CsVNkSQe/vkWSz1QvPEAJap3A5Pjx3E2Z7rJs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3530AF, serialNumber=64E48B75E21674F86D4E6B5F42369A7A73BE2541
        Validity
            Not Before: Sep 18 04:10:23 2025 GMT
            Not After : Sep 20 04:10:23 2025 GMT
        Subject: CN=68cb862f-2f1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c0:f9:b0:e0:91:75:cd:8f:e6:10:ff:af:39:
                    b3:32:1a:5f:61:87:c8:bb:a0:c1:b9:a7:c0:fa:c8:
                    e2:1f:3b:78:8a:4b:0e:8d:04:76:40:3f:73:35:f7:
                    ce:b4:3c:d2:b4:7c:e1:83:f6:db:0b:c9:97:e8:a1:
                    b2:23:dd:9a:10:b3:6e:18:70:b3:45:0d:22:12:da:
                    96:6e:a2:32:a1:4e:5b:fc:c5:3f:c5:b8:73:20:06:
                    0c:3f:9f:e0:e6:1e:37:62:e0:ae:ed:b9:52:34:94:
                    79:05:b9:f4:8d:e1:c7:92:8f:e9:01:47:b9:75:b2:
                    f4:5d:8b:13:34:73:92:60:90:1a:a3:e4:86:32:52:
                    33:7c:93:2a:5b:85:70:2d:76:6b:53:4b:8b:3f:ca:
                    09:04:90:72:dd:95:3e:6b:43:26:8f:c8:ed:f4:60:
                    e1:06:e7:06:fe:fe:e0:9f:06:2f:42:8d:47:57:8a:
                    47:3b:eb:18:90:78:0d:03:06:8b:5f:30:84:68:d1:
                    64:31:88:7f:47:c6:c7:8f:9d:d6:6f:0d:21:68:75:
                    9d:14:c5:f0:35:90:7d:98:31:0c:7e:82:a8:86:ee:
                    16:c6:b1:17:f3:51:f0:6a:63:ec:da:69:05:5a:95:
                    27:df:62:96:0e:de:7d:d2:4d:a0:f2:10:70:c3:9b:
                    cb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BB:D1:FB:15:F7:24:9E:71:07:4B:FA:EE:37:DB:28:B5:42:3B:C0
            X509v3 Authority Key Identifier:
                keyid:64:E4:8B:75:E2:16:74:F8:6D:4E:6B:5F:42:36:9A:7A:73:BE:25:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:4d:4f:ae:fc:01:5d:d6:c3:58:95:f9:b4:72:6a:95:bc:69:
         3d:55:8e:ea:ce:b3:a8:f8:8b:ab:68:33:68:c6:95:cd:7d:1b:
         65:71:51:0f:5d:00:b5:31:9c:c3:97:18:c1:d6:ab:37:8a:78:
         30:91:47:2c:d5:80:81:f5:f8:b8:f4:01:4c:df:74:46:02:bc:
         ce:fd:79:dc:9c:2e:50:f7:3f:7b:9a:cc:59:06:8d:9f:95:66:
         4d:7f:3f:6f:7a:9e:42:c8:c0:6f:c1:ad:88:b8:58:b8:6d:49:
         34:60:d8:33:3d:dc:fb:e5:a1:18:c8:05:f9:13:65:3a:15:d2:
         33:a4:b9:19:91:18:01:3f:98:cd:5f:97:01:d0:ce:a8:cf:a9:
         95:11:4b:c5:45:dd:ab:d5:b1:dc:36:0d:f1:4c:38:45:6b:71:
         ea:4e:7c:7c:ea:7b:2a:c7:2d:73:e1:cc:00:8f:5a:bf:c7:64:
         07:a3:f3:e0:d4:f5:11:d2:10:94:28:1b:0c:4d:66:12:32:5e:
         4f:06:96:92:b2:d8:29:f6:fb:30:83:cf:62:9b:aa:2c:ae:12:
         9b:1c:0b:03:37:21:8a:1b:8a:3e:54:97:c5:75:06:55:88:00:
         51:33:c5:45:cb:d0:1c:fb:39:ee:17:ae:61:41:3f:51:0d:26:
         62:41:1d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 06:19:17 2025 by rpki-client