Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
File:                     BiCXPEqhlLafR32b7VWXyU0N0Pg.mft (raw, json)
Hash identifier:          7hEgzXPWcsF0QN+eYQ1yzHV1sPfZdF/XezFVeg6C2LU=
Subject key identifier:   2E:7B:D2:E2:E5:53:F7:7A:89:AD:FB:B1:68:71:F8:DD:7F:A7:ED:C4
Authority key identifier: 06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8
Certificate issuer:       /CN=F366DA43AF/serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
Certificate serial:       041B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
Manifest number:          0415
Signing time:             Sun 15 Jun 2025 03:15:19 +0000
Manifest this update:     Sun 15 Jun 2025 03:15:18 +0000
Manifest next update:     Tue 17 Jun 2025 03:15:18 +0000
Files and hashes:         1: BiCXPEqhlLafR32b7VWXyU0N0Pg.crl (hash: U85ymwId+LtFkkCpBVCoMjvpDOmjOsn+D5M6cbIlMVk=)
                          2: 7EF51C66B09411EF816A837D762E951A.roa (hash: dK+s/XqGvJ2z+H1yiumGDgbO/rdLvkiEGWr5WQScXNE=)
                          3: 835DF5F834EE11ED901FCEEDF1222468.roa (hash: 7FPE0FhlSAjUMelmubiUwThbu0o5YNAG9Z3oUXP8EmA=)
                          4: 5B430E4AB09411EF9DCD797D762E951A.roa (hash: 4jVWIqFk1exxKlsXmJSXOLUstbW11Mv50NKI1fpU+9w=)
                          5: 18EA1A1EEFEA11EDBAF5D7884AD9E6FC.roa (hash: Suhxb/oULjMaEZsuBizxaGFSrHq0egh0mczTJVoAnnw=)
                          6: 4540A8D0EFEA11EDA6943F894AD9E6FC.roa (hash: YdysxgceL5KQtLTnwMeNCOiB4lPOcf1FskePKjG3oJk=)
                          7: BDCCC46234EE11EDACB45CEEF1222468.roa (hash: bWeTuDjLwjcjXXalbVQak4qGcRcTM2Bs7Q2hhXrJ914=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Jun 2025 03:15:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1051 (0x41b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DA43AF, serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
        Validity
            Not Before: Jun 15 03:15:18 2025 GMT
            Not After : Jun 17 03:15:18 2025 GMT
        Subject: CN=684e3ac7-4ee2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a2:6b:59:4c:b2:04:d6:66:ae:b2:17:0f:cd:
                    fe:aa:a1:36:55:7a:68:3a:8d:a1:f2:48:5c:3e:21:
                    b9:ec:bd:f2:9f:53:78:c2:fa:d6:56:89:41:75:d0:
                    ed:04:36:5d:2c:cc:32:fc:88:8d:c7:61:ba:68:2e:
                    b9:69:16:1e:10:ec:23:73:5c:8a:f6:70:cf:f1:7a:
                    63:ea:91:f5:39:e0:67:41:16:61:8b:40:6a:ce:c0:
                    5c:b3:de:65:cd:bd:38:d3:23:82:2f:c6:e3:a3:8f:
                    64:74:e8:c2:76:1b:2e:ca:13:46:b1:07:e1:d0:ee:
                    9e:1b:48:80:41:d6:23:1a:85:98:47:3f:47:68:c1:
                    9f:9c:05:f8:7e:7b:bc:fe:57:15:72:c4:54:8a:66:
                    20:d3:da:02:38:de:29:0f:2c:72:0f:31:93:b4:c4:
                    49:98:c3:5d:77:9f:b4:78:ac:7d:51:73:ac:e6:0e:
                    4f:43:2c:fe:96:c9:03:47:2c:f1:dd:7e:99:9d:c7:
                    17:89:45:59:59:1a:62:f0:0f:ad:14:1d:d0:a4:9a:
                    fb:83:a9:e7:7a:ce:a9:3b:69:08:16:f0:92:6e:b3:
                    6a:bc:5e:ad:c3:c1:01:00:a0:41:10:15:fd:c6:55:
                    a3:10:96:57:d3:66:f0:de:25:b0:e1:09:95:03:3e:
                    47:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7B:D2:E2:E5:53:F7:7A:89:AD:FB:B1:68:71:F8:DD:7F:A7:ED:C4
            X509v3 Authority Key Identifier:
                keyid:06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:c2:c5:c3:2e:92:e0:de:4f:fb:82:ac:c4:5a:9e:49:62:32:
         16:02:0f:b3:89:89:cf:db:8f:42:33:59:16:5a:d4:c0:47:16:
         2d:bb:54:ee:73:db:6d:85:70:f0:87:2d:c9:ce:aa:6e:9b:1e:
         9c:56:18:0d:9a:0c:cb:5d:d7:4b:bc:5b:d0:60:dc:19:43:d2:
         2f:1c:6a:1f:7b:db:bf:38:74:be:93:d8:2f:23:c3:a2:03:c6:
         c8:db:04:49:b1:74:21:23:0b:e5:23:8d:57:c2:f3:75:3c:7b:
         36:e4:e3:7a:ac:a2:54:f1:72:ad:2c:87:d2:e3:cc:6b:28:68:
         c1:2b:47:ae:69:0b:97:7c:c8:1b:95:0d:f9:83:db:5f:5b:e3:
         57:31:c8:56:32:fc:30:6e:84:d9:77:cd:c0:6d:19:0e:fd:ed:
         78:35:ef:a8:b2:e9:5e:25:ca:11:bf:6d:e7:0a:e1:46:a5:b4:
         0c:63:1f:79:c0:e3:7b:22:f7:ff:9c:12:c1:8f:29:05:f2:fa:
         13:58:c7:6c:1d:3c:ec:8f:6a:71:97:50:29:20:91:a4:05:db:
         b1:7c:b9:23:ac:40:9a:9e:73:5a:58:f2:7d:ed:fe:99:72:dd:
         20:f1:9d:b4:fa:9a:0f:47:3e:66:47:c7:6d:e9:04:5a:16:2e:
         03:df:4c:fe
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBBswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkRBNDNBRjExMC8GA1UEBRMoMDYyMDk3M0M0QUExOTRCNjlGNDc3RDlCRUQ1NTk3
Qzk0RDBERDBGODAeFw0yNTA2MTUwMzE1MThaFw0yNTA2MTcwMzE1MThaMBgxFjAU
BgNVBAMTDTY4NGUzYWM3LTRlZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjomtZTLIE1maushcPzf6qoTZVemg6jaHySFw+IbnsvfKfU3jC+tZWiUF1
0O0ENl0szDL8iI3HYbpoLrlpFh4Q7CNzXIr2cM/xemPqkfU54GdBFmGLQGrOwFyz
3mXNvTjTI4IvxuOjj2R06MJ2Gy7KE0axB+HQ7p4bSIBB1iMahZhHP0dowZ+cBfh+
e7z+VxVyxFSKZiDT2gI43ikPLHIPMZO0xEmYw113n7R4rH1Rc6zmDk9DLP6WyQNH
LPHdfpmdxxeJRVlZGmLwD60UHdCkmvuDqed6zqk7aQgW8JJus2q8Xq3DwQEAoEEQ
Ff3GVaMQllfTZvDeJbDhCZUDPkdFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULnvS
4uVT93qJrfuxaHH43X+n7cQwHwYDVR0jBBgwFoAUBiCXPEqhlLafR32b7VWXyU0N
0PgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZEQTQzLzI0QTREOTQ2MzRFRTExRUQ4OEVDRDBFQ0YxMjIyNDY4L0JpQ1hQ
RXFobExhZlIzMmI3VldYeVUwTjBQZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0JpQ1hQRXFobExhZlIzMmI3VldYeVUwTjBQZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkRBNDMvMjRBNEQ5NDYzNEVFMTFFRDg4RUNEMEVDRjEy
MjI0NjgvQmlDWFBFcWhsTGFmUjMyYjdWV1h5VTBOMFBnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDcwsXDLpLg3k/7gqzEWp5JYjIWAg+z
iYnP249CM1kWWtTARxYtu1Tuc9tthXDwhy3Jzqpumx6cVhgNmgzLXddLvFvQYNwZ
Q9IvHGofe9u/OHS+k9gvI8OiA8bI2wRJsXQhIwvlI41XwvN1PHs25ON6rKJU8XKt
LIfS48xrKGjBK0euaQuXfMgblQ35g9tfW+NXMchWMvwwboTZd83AbRkO/e14Ne+o
suleJcoRv23nCuFGpbQMYx95wON7Ivf/nBLBjykF8voTWMdsHTzsj2pxl1ApIJGk
BduxfLkjrECannNaWPJ97f6Zct0g8Z20+poPRz5mR8dt6QRaFi4D30z+
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:19:43 2025 by rpki-client