Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
File:                     gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft (raw, json)
Hash identifier:          /xBIWqzQG82TQVIav2ld0Pd5SI9AzZa4Aa9zfVH0qS0=
Subject key identifier:   41:9C:55:1C:4D:F8:3F:29:B7:64:D7:38:57:D2:CE:6D:99:EE:8C:C2
Authority key identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
Certificate issuer:       /CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Certificate serial:       03AF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
Manifest number:          03AA
Signing time:             Sun 27 Jul 2025 03:30:17 +0000
Manifest this update:     Sun 27 Jul 2025 03:30:16 +0000
Manifest next update:     Tue 29 Jul 2025 03:30:16 +0000
Files and hashes:         1: gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl (hash: fshNjnDk3yRyMUl+NYhFtmDxxY7YuEls6OD02rHNPbk=)
                          2: 98A7885C8DDF11EE856E001B4AD9E6FC.roa (hash: TrALYequ4gbamTwRj8gCMuUP9BJ+K7+H8Khcj3l43ng=)
                          3: AB725E028DE011EE9520701E4AD9E6FC.roa (hash: 7fwPCumSJFs34OrhghTo8l+HdWqKbq+1hmCpmK0WZcE=)
                          4: 22934508A60D11EDB81041C4F1222468.roa (hash: iIIKmZv0hW8wlHoV6xZsUe6KFdRjuYNOIqMfAgHd9Rk=)
                          5: 0845198C8DDF11EE841826194AD9E6FC.roa (hash: RjAkig7q9LVsQiCR96gKwlxjshut4m5EhwHTV6qeAo0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 943 (0x3af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ECAA2AF, serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
        Validity
            Not Before: Jul 27 03:30:16 2025 GMT
            Not After : Jul 29 03:30:16 2025 GMT
        Subject: CN=68859d49-99af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:bf:3d:18:03:5c:e8:9a:86:8b:2a:3a:3a:
                    65:ae:91:2f:80:57:17:17:e2:b1:cc:39:95:7d:5b:
                    b8:94:0b:70:95:70:19:f2:d8:79:54:d7:63:55:4b:
                    c0:b4:fe:73:01:98:1d:be:08:29:44:8a:2f:a5:67:
                    57:2b:ab:c0:f2:e2:5e:2d:94:3d:f3:24:d9:96:90:
                    92:5e:09:cf:16:2b:72:92:7a:69:e6:bf:93:53:04:
                    64:17:e9:eb:14:b6:4b:81:a6:ac:6f:ba:c8:1c:d6:
                    e1:1f:22:ba:f1:cd:50:ba:cc:fe:11:bc:fd:3d:3a:
                    b5:48:86:4a:47:56:38:e1:b6:45:17:5c:b0:de:ee:
                    0d:c6:9e:80:0e:a6:83:d7:7e:dd:96:fd:76:c0:9d:
                    7b:49:7d:7d:24:e3:56:ec:a6:15:e5:27:29:b2:dc:
                    9d:8e:a3:2c:54:2d:fc:3c:06:6e:4d:97:45:4d:63:
                    a0:9e:5f:17:99:18:b7:62:d0:e2:72:8c:4a:79:90:
                    5f:ae:4f:89:85:13:37:4f:ba:c7:24:3f:91:52:bd:
                    19:3f:d8:46:06:37:f7:59:9d:65:84:31:58:82:6c:
                    91:aa:43:88:12:1e:cd:75:e0:6b:cc:1d:4f:6c:b7:
                    b4:a7:71:b4:9d:19:22:8e:64:a8:5d:6c:64:de:87:
                    9a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:9C:55:1C:4D:F8:3F:29:B7:64:D7:38:57:D2:CE:6D:99:EE:8C:C2
            X509v3 Authority Key Identifier:
                keyid:83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:00:a0:e4:87:6d:df:60:aa:a8:e6:2e:b9:40:cd:41:88:b3:
         5d:1a:41:06:fa:61:64:a7:3f:c7:f6:d0:a7:f1:87:07:d9:fa:
         31:36:2f:80:64:82:5a:05:e3:f5:ec:66:1a:50:d4:29:c4:91:
         83:98:a1:19:5f:4b:d1:d6:d6:c7:aa:08:bc:c9:29:c2:32:b5:
         dd:39:da:ce:ba:2a:4b:0c:d6:6b:b4:68:41:63:82:64:2e:09:
         d3:a0:ac:e5:54:86:e5:4b:1c:c5:5c:d1:83:7b:e6:00:d6:30:
         8b:ec:25:b6:55:04:ce:7a:80:dc:da:9c:12:7b:4b:cc:f6:48:
         e4:01:94:5a:0a:c5:89:a2:4c:1a:35:18:05:25:4d:3c:33:09:
         71:40:a0:fa:6a:0f:f2:ec:cf:3b:d4:86:3a:59:13:01:10:97:
         39:7a:9f:53:d0:ba:d6:08:ae:0a:e4:d3:36:86:d5:c1:d0:2a:
         7f:31:47:8c:85:0d:1b:b5:19:92:6f:1a:20:73:fb:58:74:9d:
         b4:20:ff:d6:93:05:13:f8:0d:0d:e5:53:8a:79:e1:7d:0f:7e:
         9b:e6:a4:35:7c:33:9d:52:15:ec:8f:e5:5b:ef:f7:d0:74:89:
         77:3a:1e:30:58:89:54:ca:38:24:44:06:79:22:07:73:c9:93:
         07:af:16:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:06:53 2025 by rpki-client