Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
File:                     qUI_pMACbS5NqCEtEo2dJwfoHck.mft (raw, json)
Hash identifier:          0D43NNobCoOK6AxXfXXur/vRCyKIM1bmkK6/FSsYAAw=
Subject key identifier:   66:72:9D:0B:0E:15:9C:19:3D:F6:2C:CF:C1:C4:C6:D8:4A:59:B1:54
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Certificate issuer:       /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial:       05A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
Manifest number:          05A7
Signing time:             Thu 05 Jun 2025 02:28:08 +0000
Manifest this update:     Thu 05 Jun 2025 02:28:07 +0000
Manifest next update:     Sat 07 Jun 2025 02:28:07 +0000
Files and hashes:         1: qUI_pMACbS5NqCEtEo2dJwfoHck.crl (hash: ehpXRC+LT9BnRUiEgRvCoOxJf/vm9yBGbmaarSLfP5I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Jun 2025 02:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1449 (0x5a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E70F4AF, serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
        Validity
            Not Before: Jun  5 02:28:07 2025 GMT
            Not After : Jun  7 02:28:07 2025 GMT
        Subject: CN=684100b8-37de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:06:b3:15:8f:01:fd:76:23:42:8f:b9:0f:8e:
                    70:63:15:63:b6:a2:78:4e:1d:cb:d6:f7:80:c3:69:
                    a3:47:bb:f0:eb:46:f9:b3:f7:fb:b0:60:21:cc:41:
                    46:cd:2d:77:85:67:bb:8b:5e:2d:19:a0:94:38:9a:
                    e6:78:de:7d:02:93:95:d9:9b:45:32:94:18:28:11:
                    36:80:74:d4:84:5c:13:6d:2b:08:56:68:66:22:b6:
                    a9:c4:f8:e0:f0:f2:97:e8:7c:1c:14:30:5e:83:c2:
                    f7:fa:5a:d8:66:73:dd:f0:18:db:d0:3c:48:1d:8e:
                    20:e3:8b:15:72:c1:9b:9b:eb:7f:b0:92:2e:9e:ed:
                    4c:65:4b:61:af:e2:4b:fd:94:8f:17:51:9b:a1:11:
                    2c:4f:f2:59:4b:80:87:7b:bb:2e:89:18:57:13:0e:
                    cf:d6:4f:10:5b:a4:fd:18:ea:9d:22:9c:af:2f:a9:
                    ab:2d:37:ed:d3:07:36:a8:b5:b6:83:ad:eb:d0:aa:
                    48:d9:fe:4d:13:7f:2b:cd:b9:49:61:92:d8:39:71:
                    74:3e:20:89:73:df:9b:83:ae:9a:9f:59:2b:4c:d9:
                    42:1f:c3:72:ac:06:b0:ca:85:70:94:07:97:92:b6:
                    80:b7:77:8f:60:86:38:c9:06:00:38:6d:07:17:81:
                    4f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:72:9D:0B:0E:15:9C:19:3D:F6:2C:CF:C1:C4:C6:D8:4A:59:B1:54
            X509v3 Authority Key Identifier:
                keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:55:ff:70:92:40:63:37:11:60:46:dd:17:00:00:ec:6b:2f:
         04:7a:e3:c6:89:b4:24:e3:96:b0:ba:3c:c4:45:d0:3c:b1:0d:
         e3:f9:47:65:c8:e8:b9:2c:7e:fc:c0:03:dd:d2:d4:b1:b7:ac:
         04:a7:96:e3:1c:8e:6c:32:40:72:43:b7:4e:a7:e3:73:c3:bf:
         38:22:2e:b2:8b:9b:e4:38:f0:f8:83:57:d9:bc:9f:ee:62:66:
         8d:15:e2:e0:8e:c8:2e:2f:d2:82:ea:ad:0e:f0:f8:df:f4:20:
         33:01:77:1a:f3:97:6d:f6:dc:15:76:13:5b:68:64:5d:28:b1:
         f8:df:66:95:e5:01:ef:c9:e7:fc:e0:55:8e:45:37:73:4e:8d:
         b4:8d:1c:7c:6d:1e:a5:16:ef:13:41:36:8f:dc:aa:07:7c:d5:
         52:da:19:e0:2d:46:dc:10:16:29:62:52:d9:e0:fc:2d:90:ad:
         8c:9f:17:b7:fc:3d:bd:7d:a7:bc:36:e8:ad:92:ca:fe:aa:18:
         b7:0c:09:8f:97:f4:1e:cc:c0:ee:ca:a4:09:28:1c:33:3b:f5:
         d1:95:45:18:23:e3:40:b4:78:b4:11:eb:ae:33:7d:ca:32:19:
         89:0b:4c:74:fa:e8:6b:78:75:f9:7f:d1:2c:ea:f2:e9:f4:cb:
         1c:35:dc:dd
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBakwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTcwRjRBRjExMC8GA1UEBRMoQTk0MjNGQTRDMDAyNkQyRTREQTgyMTJEMTI4RDlE
MjcwN0U4MURDOTAeFw0yNTA2MDUwMjI4MDdaFw0yNTA2MDcwMjI4MDdaMBgxFjAU
BgNVBAMTDTY4NDEwMGI4LTM3ZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdBrMVjwH9diNCj7kPjnBjFWO2onhOHcvW94DDaaNHu/DrRvmz9/uwYCHM
QUbNLXeFZ7uLXi0ZoJQ4muZ43n0Ck5XZm0UylBgoETaAdNSEXBNtKwhWaGYitqnE
+ODw8pfofBwUMF6Dwvf6Wthmc93wGNvQPEgdjiDjixVywZub63+wki6e7UxlS2Gv
4kv9lI8XUZuhESxP8llLgId7uy6JGFcTDs/WTxBbpP0Y6p0inK8vqastN+3TBzao
tbaDrevQqkjZ/k0TfyvNuUlhktg5cXQ+IIlz35uDrpqfWStM2UIfw3KsBrDKhXCU
B5eStoC3d49ghjjJBgA4bQcXgU/ZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUZnKd
Cw4VnBk99izPwcTG2EpZsVQwHwYDVR0jBBgwFoAUqUI/pMACbS5NqCEtEo2dJwfo
HckwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU3MEY0LzY5NTY4NDE2RjA1OTExRUJBRjU2RjQzQkQ4QTAxNENFL3FVSV9w
TUFDYlM1TnFDRXRFbzJkSndmb0hjay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3FVSV9wTUFDYlM1TnFDRXRFbzJkSndmb0hjay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTcwRjQvNjk1Njg0MTZGMDU5MTFFQkFGNTZGNDNCRDhB
MDE0Q0UvcVVJX3BNQUNiUzVOcUNFdEVvMmRKd2ZvSGNrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgVf9wkkBjNxFgRt0XAADsay8EeuPG
ibQk45awujzERdA8sQ3j+UdlyOi5LH78wAPd0tSxt6wEp5bjHI5sMkByQ7dOp+Nz
w784Ii6yi5vkOPD4g1fZvJ/uYmaNFeLgjsguL9KC6q0O8Pjf9CAzAXca85dt9twV
dhNbaGRdKLH432aV5QHvyef84FWORTdzTo20jRx8bR6lFu8TQTaP3KoHfNVS2hng
LUbcEBYpYlLZ4PwtkK2Mnxe3/D29fae8Nuitksr+qhi3DAmPl/QezMDuyqQJKBwz
O/XRlUUYI+NAtHi0EeuuM33KMhmJC0x0+uhreHX5f9Es6vLp9MscNdzd
-----END CERTIFICATE-----
Generated at Fri Jun 6 03:04:40 2025 by rpki-client