Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
File:                     zES432VSaGhWOxfptlH5NdVgDNA.mft (raw, json)
Hash identifier:          MC8KH3CFxWIpt9Bv3tkZwbSsKXO9oT/MGldZDftUU0c=
Subject key identifier:   F9:37:F8:D9:02:61:5D:8B:08:53:1E:9A:9A:0C:A7:87:78:D8:56:C4
Authority key identifier: CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0
Certificate issuer:       /CN=F363FCC8AF/serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
Certificate serial:       0768
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
Manifest number:          0765
Signing time:             Fri 08 Aug 2025 01:59:50 +0000
Manifest this update:     Fri 08 Aug 2025 01:59:49 +0000
Manifest next update:     Sun 10 Aug 2025 01:59:49 +0000
Files and hashes:         1: zES432VSaGhWOxfptlH5NdVgDNA.crl (hash: EWe9dqWWn4Shep1a4OF0GzGHlLnxEK2iMuXK/nRVJQY=)
                          2: E27073C0F1C111EB9AE36071D8A014CE.roa (hash: y0Q3Frj55z+tecyGPqJPk0LP5+vSEULCrL6Cm5KqQeE=)
                          3: 6CB087F0CD7E11EA9E3A5845F8AEA228.roa (hash: rBsld+QOBW/CrzRT0eM+UJTuXYzPefxB5jKhtvGTg/I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 10 Aug 2025 01:59:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1896 (0x768)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FCC8AF, serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
        Validity
            Not Before: Aug  8 01:59:49 2025 GMT
            Not After : Aug 10 01:59:49 2025 GMT
        Subject: CN=68955a16-d015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:32:16:39:b8:8f:da:32:a4:66:fb:51:ca:4b:
                    9b:e8:93:c5:19:85:8c:d6:d7:11:b8:d2:b8:57:e7:
                    e3:4b:54:34:e8:c0:8e:f6:b0:16:1e:40:08:fc:3c:
                    84:94:72:55:9c:f7:fe:53:63:03:c4:9b:da:48:da:
                    be:5f:96:81:5a:9b:6c:8c:e6:5f:ac:e5:3e:27:59:
                    30:3c:06:d6:92:6d:87:ca:55:ef:48:59:ba:64:26:
                    90:da:5e:33:2f:a0:36:56:13:4b:d9:e2:a5:08:50:
                    35:e1:bb:d3:53:25:c0:a9:86:da:c4:48:7b:4e:c4:
                    5c:17:67:c0:29:06:07:83:a4:c4:e1:ff:f8:9a:b6:
                    13:01:91:37:47:e7:08:07:ff:3f:6d:ed:e5:a9:67:
                    5c:30:ba:04:ff:d0:c6:5a:45:b5:7c:10:af:88:14:
                    8d:20:c7:87:cf:cb:44:be:4f:bb:22:dd:09:d4:f8:
                    d6:17:b8:99:08:b9:51:b5:05:b3:8f:e4:06:d2:36:
                    0a:88:0c:dd:65:b5:92:b7:86:d4:13:71:3f:9b:3f:
                    95:8c:a0:c0:7a:3e:9d:60:7b:65:f3:2b:40:47:87:
                    c1:46:89:69:21:31:f3:29:e4:a5:8a:b3:bb:fd:8c:
                    a9:f3:fb:4e:33:d5:cd:d4:2a:79:91:2a:a1:53:e2:
                    e9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:37:F8:D9:02:61:5D:8B:08:53:1E:9A:9A:0C:A7:87:78:D8:56:C4
            X509v3 Authority Key Identifier:
                keyid:CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:9c:f1:80:80:92:2b:36:2c:20:f0:9f:71:b0:0c:54:2e:a6:
         24:7b:f7:55:9e:b1:30:f0:50:fc:e6:49:92:21:04:d4:4e:41:
         78:56:98:30:88:3f:71:92:9b:b6:47:38:b9:7d:85:e7:c6:95:
         75:c6:1b:24:29:a6:bf:4a:4f:05:85:bb:2d:87:9c:73:c7:54:
         43:a9:d7:43:78:cb:ff:db:da:eb:b4:83:09:d4:8e:68:dd:39:
         85:f2:3c:3d:fb:2b:bf:6e:27:f1:19:01:64:26:9e:5a:27:6d:
         28:a2:b6:d2:3a:6b:36:2a:3c:58:37:6f:ac:cb:64:b5:3e:d7:
         98:6e:55:13:9d:ff:50:23:f1:78:9e:b7:9e:df:5a:34:9b:ec:
         aa:9a:e4:6d:eb:db:6e:da:e8:f1:a6:73:1f:1e:24:6c:e6:ae:
         49:86:ec:f2:0f:85:23:68:f7:f9:c4:3e:ff:45:9f:c4:ac:9a:
         54:6f:19:91:d4:b7:c6:ba:a8:e1:7d:40:47:3e:85:c4:f7:1e:
         58:4d:46:ef:7f:a2:8b:d2:c9:49:5c:c0:b1:cf:6a:a5:e7:c2:
         9e:5a:7a:43:17:a1:84:2a:d7:47:c6:43:e2:e8:f1:65:e3:65:
         54:0e:49:4d:0c:af:ea:a0:39:0f:04:ad:b9:47:12:1e:6f:17:
         92:7b:c6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:23:16 2025 by rpki-client