Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
File:                     zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft (raw, json)
Hash identifier:          BoJahQIWVKJ9hNKBP11YQMz09o8P6OFqVDxTVa1qp/8=
Subject key identifier:   13:D7:EB:30:79:EF:02:80:0F:C1:A1:EF:B8:FC:8E:C6:4C:59:2E:A7
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Certificate issuer:       /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial:       0133
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
Manifest number:          012F
Signing time:             Wed 07 May 2025 04:44:37 +0000
Manifest this update:     Wed 07 May 2025 04:44:36 +0000
Manifest next update:     Fri 09 May 2025 04:44:36 +0000
Files and hashes:         1: zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl (hash: +Iv47Ys8cpXJZmFYJhGwBWAr+C6GKsn6mFZJus/6tMA=)
                          2: 7A18E53AE3A511EFB1E8E756762E951A.roa (hash: 2LPC2UkkLzMGcbYCbFGtnfKTTqIGsxGXV0s+CLhea/M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 May 2025 04:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 307 (0x133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697E68AF, serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
        Validity
            Not Before: May  7 04:44:36 2025 GMT
            Not After : May  9 04:44:36 2025 GMT
        Subject: CN=681ae535-1440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8f:91:d7:8b:47:ad:8f:6e:39:2e:9e:93:7e:
                    71:50:a6:62:51:5a:64:94:ca:8a:70:b8:4b:45:18:
                    c1:a3:6a:89:35:5f:3c:10:cc:26:52:3c:e2:97:62:
                    44:2b:c5:9f:ef:57:86:a7:4d:5d:2b:34:77:da:88:
                    9a:56:64:f9:c2:8d:99:a1:43:9c:b1:dc:76:6a:65:
                    40:f5:58:5d:da:49:19:e4:b7:df:be:f1:fa:5e:ad:
                    6d:41:5e:e0:f8:78:46:57:e6:4f:99:24:bf:51:1f:
                    8e:ff:08:54:85:6e:da:05:dc:d9:46:7d:7d:36:48:
                    bf:40:18:36:be:5d:14:74:28:8a:da:3a:3c:9f:4a:
                    52:49:6b:74:af:24:a9:bd:40:3a:65:c0:65:a7:31:
                    43:3f:05:da:3f:59:c5:66:e4:4f:b5:03:af:72:d2:
                    5a:13:b4:c4:33:e9:5b:67:f4:ca:eb:18:1a:1c:60:
                    d4:e3:23:b7:de:87:22:98:58:41:2b:69:17:17:3c:
                    eb:21:1c:5b:84:48:bc:b1:a2:dd:78:21:f9:7e:cd:
                    ca:b6:85:87:18:a4:c7:c8:17:9e:fd:b3:ec:94:db:
                    88:bd:94:fb:8f:ff:d5:cc:02:94:6e:db:c6:c9:7b:
                    c4:df:d2:04:98:ce:1a:51:64:4f:f2:99:1f:65:00:
                    ae:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:D7:EB:30:79:EF:02:80:0F:C1:A1:EF:B8:FC:8E:C6:4C:59:2E:A7
            X509v3 Authority Key Identifier:
                keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:19:1d:c2:6f:96:b2:c0:93:e3:6a:16:63:33:b9:99:2e:f7:
         71:30:7b:3b:1b:16:59:7a:48:65:c3:26:7d:7f:cb:e2:c4:ab:
         25:a6:0f:1f:55:be:db:9a:01:70:a0:e7:b4:7f:58:55:fe:b8:
         bf:5b:ba:ed:38:06:50:82:5f:ea:11:9e:36:37:5d:c3:c6:ce:
         97:b0:35:72:d9:72:aa:98:25:d4:2d:03:da:bb:d2:19:a1:63:
         85:95:09:6f:77:d6:dd:05:a3:a5:0a:1a:8f:01:b6:40:1c:15:
         44:de:ee:c9:11:cc:59:08:3b:e5:8c:da:b7:ff:f1:b4:49:04:
         36:67:e1:78:45:d0:af:71:8e:60:39:88:4e:5d:fa:4a:b4:c9:
         24:cf:16:50:37:7b:3b:09:9c:84:df:f2:0f:08:6a:33:3b:7d:
         b9:74:98:84:c9:bc:1d:46:b0:8a:bd:93:41:3e:20:37:ef:bf:
         86:a5:96:c1:8a:f3:16:a7:e9:c4:d3:d7:3a:60:bd:ed:be:8b:
         05:8f:e7:7d:1d:b9:08:09:1c:cf:26:35:6b:d0:99:a0:52:5d:
         42:d1:4b:13:aa:f2:cd:03:78:eb:03:34:4d:2c:8c:5c:cb:90:
         58:d6:e4:1f:16:c9:e1:26:e9:eb:47:cc:03:ec:1d:11:70:26:
         18:c1:51:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:52:34 2025 by rpki-client