Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.mft
File:                     BW6zzs3ua4NtH6CPCHznRGcD3qE.mft (raw, json)
Hash identifier:          +i2xUyIGPWR6v1LdTF8j+Jeu0K+ssPH3YbOwrc0QkN0=
Subject key identifier:   1B:3A:2F:49:5E:3D:08:36:46:4C:BC:80:F1:78:BB:E0:A1:B4:6C:4C
Authority key identifier: 05:6E:B3:CE:CD:EE:6B:83:6D:1F:A0:8F:08:7C:E7:44:67:03:DE:A1
Certificate issuer:       /CN=F3664036AF/serialNumber=056EB3CECDEE6B836D1FA08F087CE7446703DEA1
Certificate serial:       0120
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BW6zzs3ua4NtH6CPCHznRGcD3qE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.mft
Manifest number:          011F
Signing time:             Thu 01 May 2025 04:43:33 +0000
Manifest this update:     Thu 01 May 2025 04:43:32 +0000
Manifest next update:     Sat 03 May 2025 04:43:32 +0000
Files and hashes:         1: BW6zzs3ua4NtH6CPCHznRGcD3qE.crl (hash: L1Mn/WSm6NsvQnisHYpMEfCCV2F/zkIsEV+VUNAtZ+I=)
                          2: 66B953BA4D9311EFA7586846762E951A.roa (hash: byh4Eg9udfVVMXX0HCkdJJZ1KKKQasdGqUIYmXZmtrg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BW6zzs3ua4NtH6CPCHznRGcD3qE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 May 2025 00:07:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664036AF, serialNumber=056EB3CECDEE6B836D1FA08F087CE7446703DEA1
        Validity
            Not Before: May  1 04:43:32 2025 GMT
            Not After : May  3 04:43:32 2025 GMT
        Subject: CN=6812fbf5-c5cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:5b:e5:b0:0e:5e:37:bf:d1:06:53:0b:8d:
                    ee:6b:a9:c8:35:0d:55:af:da:e1:77:c7:bc:cb:91:
                    8a:fe:22:91:3d:94:1e:01:7a:0d:b3:72:9f:4e:0a:
                    2f:25:e9:de:c4:68:e5:ac:f0:ff:58:5c:0e:27:e8:
                    ce:2d:b9:fa:9e:6e:09:db:d2:a9:d5:99:ed:e9:20:
                    16:70:03:0d:82:55:f4:0a:63:53:14:42:de:86:b4:
                    b1:e5:d2:4c:3f:6f:ed:cb:c3:74:09:ac:c7:4f:17:
                    4f:0d:25:80:c7:8e:35:20:d3:f8:4b:8e:fe:5c:c9:
                    2b:83:c1:ce:1a:c2:89:1b:e9:50:18:b1:d1:f1:19:
                    ae:4e:ba:28:11:7c:37:87:fd:2f:b9:30:03:60:62:
                    f5:f7:49:cc:85:93:84:47:d2:d2:55:c1:f4:61:50:
                    15:ae:c7:43:3a:87:3b:76:74:97:c1:bc:44:86:a2:
                    21:2a:59:a7:ce:2c:5c:64:c4:c3:08:67:f7:cd:b0:
                    8a:4c:66:20:5a:85:61:81:ac:9c:b4:ba:12:d1:10:
                    6d:1b:d3:02:6e:ce:49:05:61:de:c1:51:20:7d:69:
                    b9:72:cf:a2:5c:95:89:af:7b:97:27:7e:d6:18:9b:
                    15:f5:31:4c:91:f9:d8:f7:d4:f3:94:4a:dc:1e:07:
                    e9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:3A:2F:49:5E:3D:08:36:46:4C:BC:80:F1:78:BB:E0:A1:B4:6C:4C
            X509v3 Authority Key Identifier:
                keyid:05:6E:B3:CE:CD:EE:6B:83:6D:1F:A0:8F:08:7C:E7:44:67:03:DE:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BW6zzs3ua4NtH6CPCHznRGcD3qE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:80:fc:06:41:f4:10:38:7c:b5:a5:79:d2:f9:85:01:06:2d:
         62:21:70:7b:b2:f1:f2:29:3e:7c:b3:d3:19:69:b6:20:06:e5:
         d2:4f:ba:d0:7a:88:b9:70:95:47:40:5e:26:54:a7:39:a3:12:
         c4:6e:6a:91:3c:d5:96:43:9d:74:57:eb:0a:f7:0b:87:e0:57:
         ec:b8:ce:56:93:9e:af:88:99:5e:ac:d1:cd:a0:3a:c9:d0:7a:
         e7:f0:4c:d6:f0:b5:50:5e:a0:f3:35:89:bf:c1:4a:51:40:3a:
         f3:8c:8c:06:c3:8b:67:6d:2c:cd:17:4d:e5:0c:9e:82:e3:1f:
         a2:53:e4:d1:21:af:c8:00:33:ec:46:6c:32:2c:68:75:98:3b:
         9c:ff:ae:d8:fb:0f:ab:f5:3e:4a:4a:e4:70:b2:95:51:65:d3:
         f6:77:b6:c3:14:93:9e:2f:d3:4c:bb:b6:5e:18:61:1d:60:ef:
         66:82:04:55:d0:9e:8e:85:9a:59:28:ea:06:17:30:67:f9:12:
         db:2e:34:6d:a5:5c:da:2c:a4:66:1e:4d:41:6b:02:f9:68:1c:
         38:9f:9e:35:03:3f:74:0b:10:44:b6:45:7d:8c:31:ab:5b:7f:
         1a:65:b9:20:ca:b8:b8:83:a0:96:0a:4b:80:3b:39:8a:fb:da:
         a4:86:6d:6f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICASAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjQwMzZBRjExMC8GA1UEBRMoMDU2RUIzQ0VDREVFNkI4MzZEMUZBMDhGMDg3Q0U3
NDQ2NzAzREVBMTAeFw0yNTA1MDEwNDQzMzJaFw0yNTA1MDMwNDQzMzJaMBgxFjAU
BgNVBAMTDTY4MTJmYmY1LWM1Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkJFvlsA5eN7/RBlMLje5rqcg1DVWv2uF3x7zLkYr+IpE9lB4Beg2zcp9O
Ci8l6d7EaOWs8P9YXA4n6M4tufqebgnb0qnVme3pIBZwAw2CVfQKY1MUQt6GtLHl
0kw/b+3Lw3QJrMdPF08NJYDHjjUg0/hLjv5cySuDwc4awokb6VAYsdHxGa5OuigR
fDeH/S+5MANgYvX3ScyFk4RH0tJVwfRhUBWux0M6hzt2dJfBvESGoiEqWafOLFxk
xMMIZ/fNsIpMZiBahWGBrJy0uhLREG0b0wJuzkkFYd7BUSB9ablyz6JclYmve5cn
ftYYmxX1MUyR+dj31POUStweB+lpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGzov
SV49CDZGTLyA8Xi74KG0bEwwHwYDVR0jBBgwFoAUBW6zzs3ua4NtH6CPCHznRGcD
3qEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY0MDM2LzQ4NDAwMjlBNEQ5MjExRUY5ODU4Q0FCQjc2MkU5NTFBL0JXNnp6
czN1YTROdEg2Q1BDSHpuUkdjRDNxRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0JXNnp6czN1YTROdEg2Q1BDSHpuUkdjRDNxRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjQwMzYvNDg0MDAyOUE0RDkyMTFFRjk4NThDQUJCNzYy
RTk1MUEvQlc2enpzM3VhNE50SDZDUENIem5SR2NEM3FFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQApgPwGQfQQOHy1pXnS+YUBBi1iIXB7
svHyKT58s9MZabYgBuXST7rQeoi5cJVHQF4mVKc5oxLEbmqRPNWWQ510V+sK9wuH
4FfsuM5Wk56viJlerNHNoDrJ0Hrn8EzW8LVQXqDzNYm/wUpRQDrzjIwGw4tnbSzN
F03lDJ6C4x+iU+TRIa/IADPsRmwyLGh1mDuc/67Y+w+r9T5KSuRwspVRZdP2d7bD
FJOeL9NMu7ZeGGEdYO9mggRV0J6OhZpZKOoGFzBn+RLbLjRtpVzaLKRmHk1BawL5
aBw4n541Az90CxBEtkV9jDGrW38aZbkgyri4g6CWCkuAOzmK+9qkhm1v
-----END CERTIFICATE-----
Generated at Thu May 1 10:05:08 2025 by rpki-client