Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
File:                     9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft (raw, json)
Hash identifier:          yt4YEZszNrPEgwdM/JPJYmA6mgRL2LjN1NTyIgTMZ/Y=
Subject key identifier:   CF:ED:82:DE:2F:8A:4C:97:45:02:81:8F:C5:F1:BB:B1:74:21:D5:26
Authority key identifier: F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2
Certificate issuer:       /CN=F36A991DRI/serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
Certificate serial:       06A6
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
Manifest number:          06A1
Signing time:             Fri 02 May 2025 02:02:38 +0000
Manifest this update:     Fri 02 May 2025 02:02:38 +0000
Manifest next update:     Sun 04 May 2025 02:02:38 +0000
Files and hashes:         1: 9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl (hash: pkBXEt/fLVuIdPG99fU3c64gb/vkBwCIE+40YHXOf58=)
                          2: 9EF8FBBA1BFB11EE8D767F5E4AD9E6FC.roa (hash: ic/Fv7vDPLdwq215X1uSW0oAemEyGKLMsbDQyRvHOkE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                          rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 May 2025 00:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1702 (0x6a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DRI, serialNumber=F48ABED3ECA308EB22E1B5A24284CFE1E032CFD2
        Validity
            Not Before: May  2 02:02:38 2025 GMT
            Not After : May  4 02:02:38 2025 GMT
        Subject: CN=681427be-8f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:aa:6d:40:bc:cf:f9:25:42:4b:88:6d:46:bf:
                    de:70:46:67:c3:44:9e:a6:5a:7e:57:76:d9:be:3d:
                    03:c0:15:23:6c:00:81:3f:11:ec:31:c6:62:a2:1c:
                    3f:19:53:70:97:d9:52:18:68:b5:4a:18:49:1f:41:
                    d6:bf:45:4c:42:e4:02:54:3d:22:14:b6:43:6c:93:
                    93:09:50:41:ec:cc:7b:f0:af:09:a7:ca:e0:27:f2:
                    7b:c8:83:db:0a:37:9b:33:d9:80:9f:d7:d3:f1:c9:
                    52:68:f0:d8:c1:fe:09:54:3c:bc:aa:39:b9:70:29:
                    cf:a6:01:6a:11:d0:39:34:ab:45:5c:1b:77:92:89:
                    bc:81:19:ca:0a:cc:a4:57:42:3f:05:31:b0:38:63:
                    be:1f:aa:f6:d9:33:83:0d:71:6c:ff:fe:01:97:24:
                    20:b2:62:57:77:1c:25:e3:75:12:c2:e5:05:46:28:
                    05:c0:08:5c:ea:b0:57:59:78:52:94:66:78:2a:af:
                    9b:54:15:98:51:d8:8d:eb:7e:0d:c7:d3:9a:d7:98:
                    53:99:60:bd:e0:32:d9:9b:13:59:00:fd:4d:99:4d:
                    8b:59:be:9b:84:4d:cb:be:7c:f5:f9:5c:48:f0:03:
                    3c:da:e6:64:02:92:80:a2:f2:4f:aa:9a:20:f7:1d:
                    b9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:ED:82:DE:2F:8A:4C:97:45:02:81:8F:C5:F1:BB:B1:74:21:D5:26
            X509v3 Authority Key Identifier:
                keyid:F4:8A:BE:D3:EC:A3:08:EB:22:E1:B5:A2:42:84:CF:E1:E0:32:CF:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/666DF45619F311EBA0396308F8AEA228/9Iq-0-yjCOsi4bWiQoTP4eAyz9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a3:81:79:9e:50:76:a6:bd:6e:6f:5d:67:1e:68:d6:8c:e5:
         9f:82:e3:f1:2e:66:65:d3:b1:df:08:c1:ce:6b:1a:51:c7:42:
         15:5b:5c:20:d7:89:6f:20:c1:55:d2:96:b7:09:14:e7:01:0a:
         35:14:45:3a:4f:48:1a:07:3e:3d:70:b7:3a:78:03:e5:28:54:
         85:e2:2b:e5:52:51:ff:34:6a:2f:56:64:90:ce:1e:09:57:ba:
         9d:22:7b:5b:7d:55:55:bd:c9:21:98:ee:40:8e:79:7a:7c:66:
         d2:39:19:fb:2f:0c:a5:63:5d:8b:a8:52:22:ff:79:03:fc:2e:
         17:9c:4a:7a:41:40:66:ed:f9:32:bc:6c:f7:d7:5c:92:fc:44:
         a7:95:41:6b:b7:6d:6e:bc:30:9f:2d:c3:d9:d0:38:9e:4d:79:
         b8:3a:1a:af:37:1e:e4:9e:1a:20:70:ba:3e:df:6d:88:39:9d:
         87:3e:8c:b0:71:80:f4:5b:81:93:42:0e:28:4f:79:44:6a:54:
         cb:37:40:f4:ea:46:bf:2d:05:42:1b:34:04:d8:21:5a:2d:8c:
         d9:97:09:d8:36:a0:1f:4b:f5:ff:6a:37:99:01:49:99:cd:ad:
         ec:6c:2f:75:00:f6:65:16:9d:df:6d:40:37:51:98:64:f9:57:
         af:25:0f:af
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBqYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTk5MURSSTExMC8GA1UEBRMoRjQ4QUJFRDNFQ0EzMDhFQjIyRTFCNUEyNDI4NENG
RTFFMDMyQ0ZEMjAeFw0yNTA1MDIwMjAyMzhaFw0yNTA1MDQwMjAyMzhaMBgxFjAU
BgNVBAMTDTY4MTQyN2JlLThmNmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/qm1AvM/5JUJLiG1Gv95wRmfDRJ6mWn5Xdtm+PQPAFSNsAIE/EewxxmKi
HD8ZU3CX2VIYaLVKGEkfQda/RUxC5AJUPSIUtkNsk5MJUEHszHvwrwmnyuAn8nvI
g9sKN5sz2YCf19PxyVJo8NjB/glUPLyqOblwKc+mAWoR0Dk0q0VcG3eSibyBGcoK
zKRXQj8FMbA4Y74fqvbZM4MNcWz//gGXJCCyYld3HCXjdRLC5QVGKAXACFzqsFdZ
eFKUZngqr5tUFZhR2I3rfg3H05rXmFOZYL3gMtmbE1kA/U2ZTYtZvpuETcu+fPX5
XEjwAzza5mQCkoCi8k+qmiD3HbkDAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUz+2C
3i+KTJdFAoGPxfG7sXQh1SYwHwYDVR0jBBgwFoAU9Iq+0+yjCOsi4bWiQoTP4eAy
z9IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE5OTFELzY2NkRGNDU2MTlGMzExRUJBMDM5NjMwOEY4QUVBMjI4LzlJcS0w
LXlqQ09zaTRiV2lRb1RQNGVBeXo5SS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
LzlJcS0wLXlqQ09zaTRiV2lRb1RQNGVBeXo5SS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QTk5MUQvNjY2REY0NTYxOUYzMTFFQkEwMzk2MzA4RjhBRUEy
MjgvOUlxLTAteWpDT3NpNGJXaVFvVFA0ZUF5ejlJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBwo4F5nlB2pr1ub11nHmjWjOWfguPxLmZl
07HfCMHOaxpRx0IVW1wg14lvIMFV0pa3CRTnAQo1FEU6T0gaBz49cLc6eAPlKFSF
4ivlUlH/NGovVmSQzh4JV7qdIntbfVVVvckhmO5Ajnl6fGbSORn7LwylY12LqFIi
/3kD/C4XnEp6QUBm7fkyvGz311yS/ESnlUFrt21uvDCfLcPZ0DieTXm4OhqvNx7k
nhogcLo+322IOZ2HPoywcYD0W4GTQg4oT3lEalTLN0D06ka/LQVCGzQE2CFaLYzZ
lwnYNqAfS/X/ajeZAUmZza3sbC91APZlFp3fbUA3UZhk+VevJQ+v
-----END CERTIFICATE-----
Generated at Fri May 2 10:44:19 2025 by rpki-client