Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3673434/E02DC5CA573B11F0946C0BB1DAE4EC9C/zDbEyDb2g8aerrH_ZE9EfXvZhyw.mft
File:                     zDbEyDb2g8aerrH_ZE9EfXvZhyw.mft (raw, json)
Hash identifier:          gthggZPQ9Vp5uNa5+0PQqPxLARd6FfV7FWUrcdwkkJI=
Subject key identifier:   7C:48:6C:E9:8B:23:4A:3C:53:41:92:07:FE:D5:E7:2E:2A:B9:DF:F0
Authority key identifier: CC:36:C4:C8:36:F6:83:C6:9E:AE:B1:FF:64:4F:44:7D:7B:D9:87:2C
Certificate issuer:       /CN=F3673434AF/serialNumber=CC36C4C836F683C69EAEB1FF644F447D7BD9872C
Certificate serial:       24
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zDbEyDb2g8aerrH_ZE9EfXvZhyw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3673434/E02DC5CA573B11F0946C0BB1DAE4EC9C/zDbEyDb2g8aerrH_ZE9EfXvZhyw.mft
Manifest number:          23
Signing time:             Mon 04 Aug 2025 05:27:48 +0000
Manifest this update:     Mon 04 Aug 2025 05:27:47 +0000
Manifest next update:     Wed 06 Aug 2025 05:27:47 +0000
Files and hashes:         1: zDbEyDb2g8aerrH_ZE9EfXvZhyw.crl (hash: cuCiE2sT2FEq0x4RCJF3v9d2svki+JmO1z5ELqcIcIY=)
                          2: 343527EC574311F0A862D5DEDAE4EC9C.roa (hash: x/7F4asAIq7GGBZnvwCpIemwPhh8Px7ZKiwTMxkW1Bs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3673434/E02DC5CA573B11F0946C0BB1DAE4EC9C/zDbEyDb2g8aerrH_ZE9EfXvZhyw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3673434/E02DC5CA573B11F0946C0BB1DAE4EC9C/zDbEyDb2g8aerrH_ZE9EfXvZhyw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zDbEyDb2g8aerrH_ZE9EfXvZhyw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 06 Aug 2025 00:07:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3673434AF, serialNumber=CC36C4C836F683C69EAEB1FF644F447D7BD9872C
        Validity
            Not Before: Aug  4 05:27:47 2025 GMT
            Not After : Aug  6 05:27:47 2025 GMT
        Subject: CN=689044d4-ff7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:c4:19:58:7c:68:22:91:e1:84:f9:66:25:
                    05:de:3c:4c:23:5a:cb:5b:dd:7d:eb:5b:29:d0:6e:
                    43:dd:d0:77:ee:c0:8d:df:ea:80:5c:95:24:9d:16:
                    69:a3:76:74:70:ae:d3:64:a5:e0:c0:5e:bd:5b:3a:
                    f8:4d:d8:34:b2:9c:1c:55:12:b6:2f:03:d6:85:c9:
                    02:d7:ed:3e:e0:fc:7b:b3:af:a8:3b:d6:6c:8e:68:
                    75:78:fd:12:80:0c:fe:d3:6c:a6:0f:f7:dd:76:f5:
                    3b:f5:2b:01:fd:d6:80:e4:57:c9:a6:ea:73:98:78:
                    ea:f9:21:cb:be:ba:0d:e1:0a:f6:28:93:cc:15:82:
                    a9:5e:f9:fb:cc:ef:4f:fb:1f:ae:c7:93:86:2f:52:
                    70:1d:d9:08:e5:a3:c8:05:f8:d8:42:a1:80:01:49:
                    8b:2d:0d:ed:9b:f0:4e:48:5d:e9:8b:7b:0f:81:3d:
                    bb:c7:16:c4:bd:54:cd:6b:34:b3:af:31:11:42:c2:
                    e2:d8:f5:fb:60:27:a2:e3:f2:6c:c2:f2:e6:5f:5d:
                    65:83:93:00:57:b5:4d:b6:46:50:af:5e:d7:d5:83:
                    71:b7:e9:48:23:97:0f:eb:0a:ca:7c:89:fd:05:4e:
                    89:5c:55:7c:95:45:7e:39:72:14:26:d9:c6:2f:03:
                    ae:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:48:6C:E9:8B:23:4A:3C:53:41:92:07:FE:D5:E7:2E:2A:B9:DF:F0
            X509v3 Authority Key Identifier:
                keyid:CC:36:C4:C8:36:F6:83:C6:9E:AE:B1:FF:64:4F:44:7D:7B:D9:87:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3673434/E02DC5CA573B11F0946C0BB1DAE4EC9C/zDbEyDb2g8aerrH_ZE9EfXvZhyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zDbEyDb2g8aerrH_ZE9EfXvZhyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3673434/E02DC5CA573B11F0946C0BB1DAE4EC9C/zDbEyDb2g8aerrH_ZE9EfXvZhyw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:04:e7:40:a2:12:59:7f:9b:cb:42:09:f7:05:e9:32:e2:1c:
         42:cc:ff:11:e3:b7:60:4d:30:3a:af:7b:99:30:03:bb:73:24:
         aa:f6:d4:70:ff:0d:c5:25:2b:f6:ec:0c:b5:5e:b3:e4:f5:8e:
         53:09:ef:92:bc:1b:eb:ab:cf:79:a4:97:8f:53:8d:a6:1f:9c:
         c5:4e:d8:f6:a6:13:96:90:5d:21:84:71:c5:3b:e1:f5:82:93:
         12:93:a3:2c:7f:35:31:2e:2a:f0:85:be:4d:1b:ea:ba:62:84:
         5f:ac:e8:5a:08:48:88:41:89:27:55:2c:72:53:18:61:25:29:
         7d:2f:db:b8:aa:6d:c8:b9:6a:e7:55:54:50:be:d6:01:10:46:
         e5:d5:07:d2:af:3f:db:e5:0d:bb:77:d9:9d:e4:09:39:2e:00:
         c2:77:3d:98:c2:e7:0b:18:ee:59:7f:e2:c2:29:2e:a0:4a:71:
         3d:46:5e:0f:e1:f8:bf:06:37:cd:7e:15:68:05:b1:0b:e6:27:
         5c:ef:cd:e6:c5:80:5d:c3:8c:e0:ed:84:5b:32:01:4d:7c:d2:
         6e:fc:79:71:62:23:2e:30:ba:e2:e8:55:71:b1:3a:4a:32:9a:
         da:45:47:80:c1:0f:8a:48:2e:42:29:fd:77:af:5c:ee:38:fe:
         08:b6:19:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:07 2025 by rpki-client