Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
File:                     165kWvnltuIirj4ZQpl0u9hlaUE.mft (raw, json)
Hash identifier:          ipQSb+wlNibaqLmQrHxg9q3WvEaIFMgCKS2Ztz9CqAY=
Subject key identifier:   ED:4E:89:A4:A4:93:F7:54:77:13:07:60:72:8C:AF:54:F0:A2:E7:97
Authority key identifier: D7:AE:64:5A:F9:E5:B6:E2:22:AE:3E:19:42:99:74:BB:D8:65:69:41
Certificate issuer:       /CN=F36A9688AF/serialNumber=D7AE645AF9E5B6E222AE3E19429974BBD8656941
Certificate serial:       0571
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
Manifest number:          0570
Signing time:             Fri 02 May 2025 02:30:20 +0000
Manifest this update:     Fri 02 May 2025 02:30:19 +0000
Manifest next update:     Sun 04 May 2025 02:30:19 +0000
Files and hashes:         1: 165kWvnltuIirj4ZQpl0u9hlaUE.crl (hash: cPj2QOcCcMNZHe5zO5+ri5X5T5r0O47mi7q3BJxBluU=)
                          2: 2A3F25CA461211EDA2ED7DD4F1222468.roa (hash: lvPd6VTKcLMhU/3Nl8dyjCE5frGwG4hqXNXwJymfNBg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 May 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1393 (0x571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9688AF, serialNumber=D7AE645AF9E5B6E222AE3E19429974BBD8656941
        Validity
            Not Before: May  2 02:30:19 2025 GMT
            Not After : May  4 02:30:19 2025 GMT
        Subject: CN=68142e3c-15ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:25:33:0d:17:a6:ce:30:b9:1d:7c:48:20:0a:
                    03:f0:f0:1c:26:9a:19:5b:e1:b3:9d:17:73:87:62:
                    06:38:7b:27:82:be:fd:21:06:13:2e:0b:b1:20:af:
                    1d:41:dd:22:5f:01:7c:ce:c6:a5:71:df:79:83:97:
                    ff:9a:57:cc:50:cf:81:c4:7b:68:34:35:95:f7:3b:
                    4c:6b:c9:fc:7f:f0:41:47:45:a3:0a:3f:aa:9a:9f:
                    98:d0:64:7d:68:6e:3e:ad:ae:32:01:2d:d5:d0:3e:
                    80:89:7a:28:b0:dd:df:e2:fc:9e:55:16:1e:af:10:
                    5f:50:85:d1:01:b2:b9:bd:b7:b7:5f:f9:21:5e:4e:
                    41:42:48:64:3d:51:0a:dc:36:77:5b:43:18:9b:05:
                    26:51:6e:2d:0c:1b:7f:80:82:48:7a:39:32:03:47:
                    59:94:59:7f:6b:46:e8:79:b7:de:c8:0d:e9:0c:e7:
                    c7:52:e9:ae:8d:97:51:13:ce:59:1c:eb:2e:38:dd:
                    f0:c4:26:3e:7b:a3:fb:37:61:e6:55:47:a1:80:23:
                    58:a7:87:9d:d6:70:e8:1d:8b:3b:1c:92:18:4a:d1:
                    24:50:3d:71:f0:f5:c1:2b:79:13:d1:29:52:cc:3f:
                    e8:09:93:1e:eb:f6:9a:08:e1:26:db:7e:65:d9:de:
                    6f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:4E:89:A4:A4:93:F7:54:77:13:07:60:72:8C:AF:54:F0:A2:E7:97
            X509v3 Authority Key Identifier:
                keyid:D7:AE:64:5A:F9:E5:B6:E2:22:AE:3E:19:42:99:74:BB:D8:65:69:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:32:a4:e0:32:e1:20:f5:0c:6d:e6:45:05:1c:f1:27:1e:89:
         34:14:d8:cb:54:4f:d7:e1:a5:2f:c8:35:fd:f2:2c:a1:2c:c8:
         d5:22:df:58:bc:cf:bc:25:72:d7:c3:d8:70:f2:c7:8f:ce:14:
         a0:70:aa:21:65:e4:ad:4d:24:7a:4c:13:fd:15:4b:cf:3e:ff:
         de:6c:c0:a8:85:a2:3c:b1:65:44:38:71:3a:8f:84:4d:86:8d:
         5d:d8:7a:9b:a5:3b:54:af:17:fe:f0:e5:f8:31:90:c4:86:c8:
         40:c0:9f:19:03:9c:08:ca:6c:db:a2:ad:db:8f:f8:bc:4b:9e:
         b7:e6:0e:f5:06:2d:dc:d8:df:82:68:fc:a5:3f:11:73:88:ac:
         67:3e:a7:dc:7b:c8:ca:95:b8:4a:bd:5d:da:54:65:47:86:c4:
         c3:9f:37:2e:43:70:fe:66:35:58:cf:c3:5b:36:cf:da:4b:9e:
         06:80:e6:8a:2d:b9:c1:fa:23:4a:74:a2:60:97:be:a8:d7:8c:
         a2:ab:d3:0b:7e:ec:85:7f:5c:97:f0:f4:f8:07:6e:f5:31:82:
         b0:60:c3:47:41:3f:86:08:37:35:47:e6:bc:d5:47:22:df:de:
         fc:89:3b:a8:cc:6a:49:3a:b9:25:7f:b2:e8:6f:9e:b8:1d:ca:
         04:14:1f:b2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBXEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTk2ODhBRjExMC8GA1UEBRMoRDdBRTY0NUFGOUU1QjZFMjIyQUUzRTE5NDI5OTc0
QkJEODY1Njk0MTAeFw0yNTA1MDIwMjMwMTlaFw0yNTA1MDQwMjMwMTlaMBgxFjAU
BgNVBAMTDTY4MTQyZTNjLTE1YWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDnJTMNF6bOMLkdfEggCgPw8Bwmmhlb4bOdF3OHYgY4eyeCvv0hBhMuC7Eg
rx1B3SJfAXzOxqVx33mDl/+aV8xQz4HEe2g0NZX3O0xryfx/8EFHRaMKP6qan5jQ
ZH1obj6trjIBLdXQPoCJeiiw3d/i/J5VFh6vEF9QhdEBsrm9t7df+SFeTkFCSGQ9
UQrcNndbQxibBSZRbi0MG3+Agkh6OTIDR1mUWX9rRuh5t97IDekM58dS6a6Nl1ET
zlkc6y443fDEJj57o/s3YeZVR6GAI1inh53WcOgdizsckhhK0SRQPXHw9cEreRPR
KVLMP+gJkx7r9poI4SbbfmXZ3m/DAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU7U6J
pKST91R3EwdgcoyvVPCi55cwHwYDVR0jBBgwFoAU165kWvnltuIirj4ZQpl0u9hl
aUEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE5Njg4LzEyMDcyRkU2RkZFODExRUJCMTkyRkIwOUQ4QTAxNENFLzE2NWtX
dm5sdHVJaXJqNFpRcGwwdTlobGFVRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzE2NWtXdm5sdHVJaXJqNFpRcGwwdTlobGFVRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTk2ODgvMTIwNzJGRTZGRkU4MTFFQkIxOTJGQjA5RDhB
MDE0Q0UvMTY1a1d2bmx0dUlpcmo0WlFwbDB1OWhsYVVFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDYMqTgMuEg9Qxt5kUFHPEnHok0FNjL
VE/X4aUvyDX98iyhLMjVIt9YvM+8JXLXw9hw8sePzhSgcKohZeStTSR6TBP9FUvP
Pv/ebMCohaI8sWVEOHE6j4RNho1d2HqbpTtUrxf+8OX4MZDEhshAwJ8ZA5wIymzb
oq3bj/i8S5635g71Bi3c2N+CaPylPxFziKxnPqfce8jKlbhKvV3aVGVHhsTDnzcu
Q3D+ZjVYz8NbNs/aS54GgOaKLbnB+iNKdKJgl76o14yiq9MLfuyFf1yX8PT4B271
MYKwYMNHQT+GCDc1R+a81Uci3978iTuozGpJOrklf7Lob564HcoEFB+y
-----END CERTIFICATE-----
Generated at Fri May 2 07:06:26 2025 by rpki-client