Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
File:                     NzwYJ-JwTD_cFqh4mA-tyINfpII.mft (raw, json)
Hash identifier:          9h97RiWNDklX3MfhZi8k070mxmsmQhnRI1H7gr4cILE=
Subject key identifier:   53:56:01:A3:E1:43:21:13:11:A7:71:11:97:C7:3C:07:9C:B3:B0:11
Authority key identifier: 37:3C:18:27:E2:70:4C:3F:DC:16:A8:78:98:0F:AD:C8:83:5F:A4:82
Certificate issuer:       /CN=F36EB6AEAF/serialNumber=373C1827E2704C3FDC16A878980FADC8835FA482
Certificate serial:       0785
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NzwYJ-JwTD_cFqh4mA-tyINfpII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
Manifest number:          0783
Signing time:             Sat 07 Jun 2025 01:54:30 +0000
Manifest this update:     Sat 07 Jun 2025 01:54:29 +0000
Manifest next update:     Mon 09 Jun 2025 01:54:29 +0000
Files and hashes:         1: NzwYJ-JwTD_cFqh4mA-tyINfpII.crl (hash: LMTjeMj9dpAhT2WceMJWzRYKGphBk28J7oKCIkFiAHQ=)
                          2: 194DF7D868FB11EFB7429B90762E951A.roa (hash: NFQt82rMb7NWbYXB4Ts4sK7O+uFyIpzTw3E2kXEqFmc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NzwYJ-JwTD_cFqh4mA-tyINfpII.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 01:54:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1925 (0x785)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EB6AEAF, serialNumber=373C1827E2704C3FDC16A878980FADC8835FA482
        Validity
            Not Before: Jun  7 01:54:29 2025 GMT
            Not After : Jun  9 01:54:29 2025 GMT
        Subject: CN=68439bd5-21e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0b:10:27:a8:13:12:43:a6:1b:30:6c:b4:8c:
                    5e:a9:84:f2:14:ab:cd:9f:ed:b5:30:55:3e:61:d9:
                    f4:0e:d5:4d:36:a5:55:f7:b3:65:08:20:72:8d:2a:
                    d5:68:c3:16:43:0b:03:7f:22:d2:b3:13:72:33:81:
                    85:5f:a7:9f:22:60:d8:82:65:f3:0c:8e:1c:25:80:
                    fc:62:23:68:cc:d9:ce:08:af:cc:82:86:1b:a1:b6:
                    c1:38:09:b1:91:e6:4b:a3:f0:a8:76:c7:32:5a:4c:
                    46:7f:71:e9:b5:89:a4:da:be:21:6d:6e:0f:76:18:
                    1f:89:7d:96:8c:df:e2:82:fa:b4:06:e7:ca:46:a5:
                    7e:c6:5e:b3:6f:61:95:53:bb:ca:af:33:ab:6a:a7:
                    2f:42:85:af:2d:25:96:8f:3c:af:db:24:ef:24:6b:
                    8f:0b:85:57:20:31:84:fa:1c:1c:66:53:2c:54:e1:
                    24:b2:85:de:5a:89:4a:96:65:01:a3:ef:4d:6e:80:
                    6e:e7:cd:ff:d1:d4:a3:9c:d6:75:b3:0f:6a:22:da:
                    bb:6e:cc:e1:f4:9e:c5:25:02:c9:80:13:39:ef:75:
                    20:aa:97:5f:7d:a1:f5:f4:93:a3:c7:ae:29:ad:b4:
                    a8:91:cc:7f:20:05:4d:4d:1b:95:8a:30:73:bf:0d:
                    80:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:56:01:A3:E1:43:21:13:11:A7:71:11:97:C7:3C:07:9C:B3:B0:11
            X509v3 Authority Key Identifier:
                keyid:37:3C:18:27:E2:70:4C:3F:DC:16:A8:78:98:0F:AD:C8:83:5F:A4:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NzwYJ-JwTD_cFqh4mA-tyINfpII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:52:da:1d:c2:0b:a4:c6:96:d4:3a:ca:a5:a2:7a:4a:a1:d6:
         cd:a3:54:09:15:c4:85:72:3d:b6:7c:a4:28:6f:ca:a2:f7:a7:
         59:46:db:e6:ac:9d:8d:cd:09:0a:8b:95:50:33:53:c4:c9:7f:
         41:bb:b4:31:32:cd:4c:4c:1c:35:59:f0:6b:02:aa:60:ea:bf:
         99:95:9c:81:d5:ac:20:08:4e:5a:f2:07:40:02:2e:dc:9f:04:
         2d:65:92:da:f8:94:46:a4:60:02:e8:3e:7b:56:a2:8e:de:9c:
         0c:eb:23:d8:f3:33:a8:07:d4:b4:71:b4:91:3a:7e:fe:c1:1a:
         3a:3b:24:b3:50:a3:d3:78:e6:b8:67:37:9c:13:39:cd:ed:f1:
         7a:48:26:6a:7d:a1:ea:61:ee:79:89:ba:73:81:4d:fe:f5:06:
         f6:60:49:98:21:cb:c8:96:ab:d8:90:81:42:b5:aa:18:34:04:
         75:f9:ad:77:52:c6:a2:18:37:ac:9a:6f:41:ff:00:91:ee:00:
         fa:13:ad:d9:f4:b6:e1:d2:d3:3e:bb:0d:8d:f6:57:2b:05:ee:
         e3:11:a5:bf:a4:1e:b6:de:eb:c4:db:ff:a1:3c:ad:f0:21:82:
         c3:0b:34:fc:91:13:8c:84:a9:73:bf:d7:6f:cd:c5:db:89:b5:
         f4:bd:ff:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:12:58 2025 by rpki-client