Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
File:                     zjU-BgcibJUeYP1ogM7M-5jSvEg.mft (raw, json)
Hash identifier:          qcd0saLWe8M5cNsBN3+gg++Qmdkw0ChUHtDdKyt6X0M=
Subject key identifier:   C5:8C:65:FA:F8:8A:CA:95:77:B7:CE:1B:13:A6:E5:28:7B:C4:0E:38
Authority key identifier: CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48
Certificate issuer:       /CN=F362EFF3AF/serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
Certificate serial:       0351
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
Manifest number:          034F
Signing time:             Tue 12 Aug 2025 03:42:49 +0000
Manifest this update:     Tue 12 Aug 2025 03:42:49 +0000
Manifest next update:     Thu 14 Aug 2025 03:42:49 +0000
Files and hashes:         1: zjU-BgcibJUeYP1ogM7M-5jSvEg.crl (hash: gJV50uXIjM8WCCdCITsO7OBBl+DtwNh+S21xDFuoVJI=)
                          2: 6C2FB170FFA811EDB10BF6814AD9E6FC.roa (hash: lBXXLwdkJTr+JXNn+pD+2aYKlgsMQpQ0R3v3F5qO+ns=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 Aug 2025 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849 (0x351)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362EFF3AF, serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
        Validity
            Not Before: Aug 12 03:42:49 2025 GMT
            Not After : Aug 14 03:42:49 2025 GMT
        Subject: CN=689ab839-a8cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f4:fd:9e:5b:02:a6:fb:42:10:d6:be:9b:72:
                    e2:6a:06:d5:b3:26:00:52:aa:d0:ed:d5:0f:77:79:
                    95:76:c7:6c:0b:e8:3c:81:ab:51:68:9e:5d:f7:c0:
                    d4:6d:a8:31:68:ef:a6:89:09:b8:14:79:75:3c:84:
                    28:d9:7b:5b:5a:55:90:14:41:8f:a2:f2:0b:8d:54:
                    21:e0:5f:b6:e8:4e:25:ed:4a:d1:0f:d7:dc:d4:07:
                    14:c5:a5:31:86:6d:c3:dc:3a:a3:38:7e:8f:d1:15:
                    a9:89:58:ab:df:5f:e6:8e:04:0c:84:6b:1d:fc:ab:
                    a6:22:6b:a6:06:76:03:ce:a5:f9:04:98:02:5d:91:
                    38:9a:a6:63:35:f7:fb:4c:26:52:01:80:40:2d:a5:
                    45:fd:3f:9a:78:50:2a:d6:34:82:6d:14:4c:b4:cf:
                    a3:f6:d3:25:a1:be:bd:1a:ef:3a:bd:8d:3a:d2:de:
                    ce:2f:6c:b2:ef:e6:e3:fc:fa:2d:ad:61:89:cd:c8:
                    59:b1:f2:f1:d6:41:6d:97:52:5a:5b:78:5e:9b:82:
                    a7:48:69:bf:a5:e1:15:50:d6:d0:c5:27:24:46:ae:
                    43:cf:1c:79:0f:33:99:65:af:d7:cd:a5:a6:9b:27:
                    82:75:5f:6c:eb:b9:e8:b7:e8:39:00:5c:11:1a:b7:
                    d9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:8C:65:FA:F8:8A:CA:95:77:B7:CE:1B:13:A6:E5:28:7B:C4:0E:38
            X509v3 Authority Key Identifier:
                keyid:CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:4b:85:41:f1:02:8e:d8:8b:38:8f:a1:fb:a8:b4:2c:e6:c3:
         cf:b8:ca:06:c0:1b:73:f5:89:74:99:26:a3:26:d9:e1:e2:2e:
         86:95:a7:56:77:a0:04:9b:8b:11:ba:99:0b:d2:72:4c:27:d4:
         55:d4:42:18:17:9c:30:bb:be:16:e1:94:0d:62:a0:f8:bc:9e:
         3d:6c:65:4e:ce:28:1b:4f:43:c7:44:a9:e2:60:56:74:d9:08:
         f3:af:49:bb:c4:33:ea:a2:36:87:20:e5:db:4e:de:21:d8:97:
         ba:a5:f2:91:6a:f1:f7:cd:f2:cf:5a:e0:b9:70:d1:20:62:61:
         da:72:1c:43:13:c9:7c:75:41:b5:28:45:18:57:01:42:42:dd:
         2c:2c:b2:37:b7:b4:97:97:d7:8f:16:44:ec:09:28:b1:cb:e7:
         fe:a0:70:2b:33:55:2f:87:98:dc:30:96:75:e9:40:62:ae:08:
         ed:7e:80:3a:0f:ed:81:b1:65:34:f5:9f:ec:7f:e2:b8:0e:f1:
         bc:39:0c:dd:1d:1c:b0:45:2e:c1:2f:17:08:d1:25:7e:22:8a:
         79:da:89:41:5c:f0:ad:10:65:25:37:e2:54:10:37:d0:ff:d6:
         80:a4:64:d0:e5:50:51:25:cb:1e:e9:90:54:6b:a0:6e:04:00:
         95:13:9f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:16:29 2025 by rpki-client