Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
File:                     zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft (raw, json)
Hash identifier:          IAPbOZTyKT2ksEvSHuWq+jkUAtuMKpYyvZfkjyUy1Ks=
Subject key identifier:   73:5F:9C:12:00:66:0E:CD:4F:D3:80:04:31:C4:7C:29:96:9C:F6:EA
Authority key identifier: CE:DF:6E:C2:3B:3A:0E:9F:C8:C9:9B:14:73:4A:DA:E7:A1:D8:99:4A
Certificate issuer:       /CN=F3698125AR/serialNumber=CEDF6EC23B3A0E9FC8C99B14734ADAE7A1D8994A
Certificate serial:       022D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
Manifest number:          022B
Signing time:             Fri 02 May 2025 04:09:06 +0000
Manifest this update:     Fri 02 May 2025 04:09:05 +0000
Manifest next update:     Sun 04 May 2025 04:09:05 +0000
Files and hashes:         1: zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl (hash: P5+iO4DxyFGjmb00QRhq4KTEU5Kt/AKnLIrnD2ypMi4=)
                          2: 637017A4270D11EF83B8A0DA7CDC24C2.roa (hash: KcWpAlTox8uHxgsa4XXL2SuGUP0/4ifMRuSUqNE8VdQ=)
                          3: D2BCB8AC24CD11EFBA1E711B7DDC24C2.roa (hash: pk6a4ptH8vZ8/DDIS6o5NsLyUfZR0uUROi741ipkTm8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
                          rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698125AR, serialNumber=CEDF6EC23B3A0E9FC8C99B14734ADAE7A1D8994A
        Validity
            Not Before: May  2 04:09:05 2025 GMT
            Not After : May  4 04:09:05 2025 GMT
        Subject: CN=68144562-cb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:88:aa:50:68:b2:6c:d1:2f:58:b9:02:17:a5:
                    36:fd:ce:82:4f:b6:99:f4:90:d8:26:b6:f7:27:07:
                    a7:e3:a7:fc:c1:23:27:f2:c2:b4:71:da:79:ce:ad:
                    30:f2:a7:30:1d:a9:47:cb:26:9f:a5:c6:59:68:ba:
                    73:e1:03:30:c2:87:df:89:da:5c:24:05:71:bc:bc:
                    01:6d:55:6c:f5:e5:b2:ec:ca:8c:42:c2:e0:71:7e:
                    e1:ac:db:97:19:0b:02:28:bc:ce:63:2a:4e:9c:4f:
                    31:4b:af:2d:dc:4f:19:fa:a7:f2:91:ee:53:30:f1:
                    89:52:27:8d:87:ce:67:5b:9a:20:f7:4c:c0:bc:21:
                    37:3d:17:8e:f0:fd:e6:e1:3d:b9:73:3a:48:7d:ec:
                    b3:b2:ac:0c:52:2e:01:c2:07:d2:0a:5f:34:54:a0:
                    7e:85:25:89:1a:56:2f:5e:01:82:d3:eb:e5:3f:fd:
                    c1:fb:e2:fc:b2:85:bb:0e:3c:24:fe:4a:31:a4:a1:
                    f8:bd:15:c7:0b:1c:71:64:45:2f:aa:64:27:3d:e2:
                    42:34:b2:dc:54:1d:18:b1:33:80:ff:34:6d:0b:9c:
                    0f:61:df:6f:59:64:2f:9e:ff:e0:3e:fa:71:9f:10:
                    0b:c9:69:30:b5:27:be:58:d9:c4:9c:9f:1a:b4:3c:
                    e5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:5F:9C:12:00:66:0E:CD:4F:D3:80:04:31:C4:7C:29:96:9C:F6:EA
            X509v3 Authority Key Identifier:
                keyid:CE:DF:6E:C2:3B:3A:0E:9F:C8:C9:9B:14:73:4A:DA:E7:A1:D8:99:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:69:b1:ca:1c:3b:8f:53:23:cc:98:7c:00:a7:a6:97:53:de:
         71:21:a9:bf:5c:06:25:ce:6f:3a:a9:25:b7:7e:f6:03:c5:7e:
         84:f6:c7:b4:17:ee:c2:7f:9c:70:52:a2:3b:44:59:1c:a4:32:
         61:74:63:fa:7f:22:67:9f:8b:51:52:b2:96:d1:25:0d:d9:9b:
         ce:53:30:52:85:76:7b:70:3b:e1:7e:12:c3:57:37:06:ba:0e:
         c3:f9:6e:cd:64:d0:fc:bb:09:9f:43:32:74:3e:e5:d3:2d:43:
         7a:19:9d:5c:1e:f5:06:1a:03:e1:67:4c:01:94:57:d6:96:00:
         9b:e7:62:f0:fa:71:05:28:0e:7e:ba:9c:d6:45:99:27:2b:29:
         c8:6a:a9:a6:7f:05:03:16:31:13:21:2f:3a:92:9a:de:8c:cc:
         55:2a:06:90:be:44:6e:3c:d1:e0:ed:1a:42:6a:16:f8:ee:d6:
         e6:90:6d:60:e4:d8:47:08:cb:89:43:6d:3d:fb:c4:fa:86:b5:
         c2:6b:67:ac:39:82:ba:4e:cd:d0:4a:19:a2:1f:8a:c1:31:01:
         9d:62:03:ce:ca:1e:43:90:16:1c:4b:68:3a:b2:36:ab:b0:e6:
         b6:00:cc:c3:24:16:82:c6:30:81:7c:6b:de:88:89:28:84:68:
         72:d5:cb:a0
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAi0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTgxMjVBUjExMC8GA1UEBRMoQ0VERjZFQzIzQjNBMEU5RkM4Qzk5QjE0NzM0QURB
RTdBMUQ4OTk0QTAeFw0yNTA1MDIwNDA5MDVaFw0yNTA1MDQwNDA5MDVaMBgxFjAU
BgNVBAMTDTY4MTQ0NTYyLWNiMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDwiKpQaLJs0S9YuQIXpTb9zoJPtpn0kNgmtvcnB6fjp/zBIyfywrRx2nnO
rTDypzAdqUfLJp+lxllounPhAzDCh9+J2lwkBXG8vAFtVWz15bLsyoxCwuBxfuGs
25cZCwIovM5jKk6cTzFLry3cTxn6p/KR7lMw8YlSJ42HzmdbmiD3TMC8ITc9F47w
/ebhPblzOkh97LOyrAxSLgHCB9IKXzRUoH6FJYkaVi9eAYLT6+U//cH74vyyhbsO
PCT+SjGkofi9FccLHHFkRS+qZCc94kI0stxUHRixM4D/NG0LnA9h329ZZC+e/+A+
+nGfEAvJaTC1J75Y2cScnxq0POV1AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUc1+c
EgBmDs1P04AEMcR8KZac9uowHwYDVR0jBBgwFoAUzt9uwjs6Dp/IyZsUc0ra56HY
mUowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk4MTI1L0JFRjcxQzk0ODM4NDExRUU4RTI2OTczNTRBRDlFNkZDL3p0OXV3
anM2RHBfSXlac1VjMHJhNTZIWW1Vby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3p0OXV3anM2RHBfSXlac1VjMHJhNTZIWW1Vby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTgxMjUvQkVGNzFDOTQ4Mzg0MTFFRThFMjY5NzM1NEFEOUU2
RkMvenQ5dXdqczZEcF9JeVpzVWMwcmE1NkhZbVVvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCmabHKHDuPUyPMmHwAp6aXU95xIam/XAYl
zm86qSW3fvYDxX6E9se0F+7Cf5xwUqI7RFkcpDJhdGP6fyJnn4tRUrKW0SUN2ZvO
UzBShXZ7cDvhfhLDVzcGug7D+W7NZND8uwmfQzJ0PuXTLUN6GZ1cHvUGGgPhZ0wB
lFfWlgCb52Lw+nEFKA5+upzWRZknKynIaqmmfwUDFjETIS86kprejMxVKgaQvkRu
PNHg7RpCahb47tbmkG1g5NhHCMuJQ209+8T6hrXCa2esOYK6Ts3QShmiH4rBMQGd
YgPOyh5DkBYcS2g6sjarsOa2AMzDJBaCxjCBfGveiIkohGhy1cug
-----END CERTIFICATE-----
Generated at Fri May 2 18:25:52 2025 by rpki-client