Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
File:                     Ga2syP-jkxMYpsdToKwbKukpXgM.mft (raw, json)
Hash identifier:          WQskcZ3Z0KNZWx3tV+Ebcx9Qq+xWUfsK9f2OJfELeTI=
Subject key identifier:   6E:EE:35:AA:31:48:B8:ED:BE:4C:D4:6A:55:2B:9E:66:35:3F:6D:30
Authority key identifier: 19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
Certificate issuer:       /CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Certificate serial:       090C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
Manifest number:          0901
Signing time:             Tue 17 Jun 2025 01:21:41 +0000
Manifest this update:     Tue 17 Jun 2025 01:21:40 +0000
Manifest next update:     Thu 19 Jun 2025 01:21:40 +0000
Files and hashes:         1: Ga2syP-jkxMYpsdToKwbKukpXgM.crl (hash: Hj+hyfJACuhmH1TU1XojBrQY1yG93Kzt13A48TDZGp8=)
                          2: 40F0EA0C864C11EF8B0D4162762E951A.roa (hash: 5nZTReAvtcbgPm+oRDhQ83p7XciRK3gVMtmCqG06N7Q=)
                          3: 19DBEAFC864C11EF91E74660762E951A.roa (hash: ssNbfh+xyxoJkv8ui9GVFM6RQk48tyv7Wmx8dqGtWao=)
                          4: 8F04BF5C864C11EF8F687464762E951A.roa (hash: MFVB+4npBxn/Yh83eigumhh31Iuk3EG7QH/ll1Qzce0=)
                          5: DF0FB1A6864B11EFAA421C60762E951A.roa (hash: wcCwWJ/0MHVkGO7m4+40u82BAL5x3asIQ+jyQE9ovPY=)
                          6: 325E4A4E864B11EF9931C05B762E951A.roa (hash: uilxINn6WdcvcjXq+Nwl5lpnynygHnR6cPspfvXc/m0=)
                          7: EB320A3E864511EF82F333B8762E951A.roa (hash: AOcstZS+3TqPjLs5Onnwkaac6jTexzGQCvTnjKOL0G4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 19 Jun 2025 00:06:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2316 (0x90c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B52A6AF, serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
        Validity
            Not Before: Jun 17 01:21:40 2025 GMT
            Not After : Jun 19 01:21:40 2025 GMT
        Subject: CN=6850c325-987d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:f3:be:85:de:49:0a:97:5a:34:57:05:e8:
                    7d:0e:7a:c1:7c:4c:b9:c9:40:16:b9:7a:22:bf:16:
                    dd:d8:de:f6:d7:9c:b0:22:9b:34:5a:98:c5:8f:07:
                    bb:95:6f:33:3b:71:6f:59:8e:e4:f3:3c:75:80:02:
                    fc:94:5e:f3:96:75:be:5e:52:20:3f:7f:45:2d:e0:
                    ba:83:e6:e2:11:86:14:b2:0b:60:8c:a6:22:ed:1e:
                    e4:3c:2f:83:cb:56:b8:41:9c:7e:79:dc:03:38:cf:
                    14:21:4e:1e:dc:70:a3:16:2c:bb:4c:37:62:a5:8b:
                    e4:dc:cf:e6:24:74:9e:5d:43:30:61:30:29:55:61:
                    11:11:30:13:8f:c6:5f:41:20:86:9a:c0:b7:fc:ca:
                    8b:dd:1b:6a:e9:10:01:2d:cd:9e:39:a7:9b:55:b7:
                    78:73:e6:e1:d3:70:c8:a6:ba:e5:97:75:f7:03:b1:
                    c1:33:f3:ad:75:3b:65:86:1e:9d:79:b5:1e:1e:2f:
                    b2:75:c2:d2:a7:84:61:73:b9:63:c4:97:85:b6:4b:
                    27:31:ad:76:0c:5d:77:5b:63:c8:a5:53:d6:32:eb:
                    f1:27:f2:c5:17:34:98:8f:a8:38:41:21:f7:e1:12:
                    0a:06:6c:9c:93:6f:fc:5d:58:fa:10:44:b7:f3:f4:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:EE:35:AA:31:48:B8:ED:BE:4C:D4:6A:55:2B:9E:66:35:3F:6D:30
            X509v3 Authority Key Identifier:
                keyid:19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:4d:63:12:99:98:fd:f0:ac:15:c8:fd:c8:b0:74:f7:ea:1d:
         e1:70:ce:95:1c:28:54:68:67:af:06:a8:cc:04:8d:12:b2:4f:
         e6:32:cb:87:af:d0:9d:b5:12:50:70:50:ac:7d:c1:6f:28:6a:
         87:4a:5d:3f:ac:5d:c4:48:2d:8d:e5:e2:d8:93:af:b5:c0:d0:
         a9:8b:d8:44:30:e0:a1:fe:da:b6:f5:8d:09:d4:37:4a:94:85:
         7d:8c:8a:81:71:0f:cf:a6:e6:8a:7f:aa:c5:05:e3:ce:23:5b:
         80:9c:eb:a0:ac:34:2a:0b:a7:a9:f9:c2:28:11:f9:fb:2c:15:
         e7:e8:25:e6:c0:af:6a:3b:8e:cd:42:7e:f0:5f:dc:e0:1e:8c:
         89:dd:46:73:cf:30:81:a0:9e:f1:f5:7d:57:39:62:18:07:29:
         0c:0d:98:82:26:46:96:73:75:7e:82:e6:fa:96:d7:70:f2:32:
         8d:5d:84:23:44:0a:32:3d:cb:1d:e3:48:52:2a:d7:89:46:35:
         0b:19:f6:13:53:0d:05:68:ec:d2:63:fa:f7:15:69:7e:d6:12:
         ea:e5:35:c4:64:e4:e4:db:b6:8c:6f:69:dc:b5:38:42:31:30:
         b4:d5:ae:da:13:2c:7c:e1:b5:51:36:67:25:50:c2:82:3b:83:
         ef:f7:4c:b8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCQwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjUyQTZBRjExMC8GA1UEBRMoMTlBREFDQzhGRkEzOTMxMzE4QTZDNzUzQTBBQzFC
MkFFOTI5NUUwMzAeFw0yNTA2MTcwMTIxNDBaFw0yNTA2MTkwMTIxNDBaMBgxFjAU
BgNVBAMTDTY4NTBjMzI1LTk4N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCtvO+hd5JCpdaNFcF6H0OesF8TLnJQBa5eiK/Ft3Y3vbXnLAimzRamMWP
B7uVbzM7cW9ZjuTzPHWAAvyUXvOWdb5eUiA/f0Ut4LqD5uIRhhSyC2CMpiLtHuQ8
L4PLVrhBnH553AM4zxQhTh7ccKMWLLtMN2Kli+Tcz+YkdJ5dQzBhMClVYRERMBOP
xl9BIIaawLf8yovdG2rpEAEtzZ45p5tVt3hz5uHTcMimuuWXdfcDscEz8611O2WG
Hp15tR4eL7J1wtKnhGFzuWPEl4W2SycxrXYMXXdbY8ilU9Yy6/En8sUXNJiPqDhB
IffhEgoGbJyTb/xdWPoQRLfz9JrVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUbu41
qjFIuO2+TNRqVSueZjU/bTAwHwYDVR0jBBgwFoAUGa2syP+jkxMYpsdToKwbKukp
XgMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI1MkE2LzZBRTMwN0I2NkZGRDExRTlBNjlDQzEzNEY4QUVBMjI4L0dhMnN5
UC1qa3hNWXBzZFRvS3diS3VrcFhnTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dhMnN5UC1qa3hNWXBzZFRvS3diS3VrcFhnTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjUyQTYvNkFFMzA3QjY2RkZEMTFFOUE2OUNDMTM0RjhB
RUEyMjgvR2Eyc3lQLWpreE1ZcHNkVG9Ld2JLdWtwWGdNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBgTWMSmZj98KwVyP3IsHT36h3hcM6V
HChUaGevBqjMBI0Ssk/mMsuHr9CdtRJQcFCsfcFvKGqHSl0/rF3ESC2N5eLYk6+1
wNCpi9hEMOCh/tq29Y0J1DdKlIV9jIqBcQ/PpuaKf6rFBePOI1uAnOugrDQqC6ep
+cIoEfn7LBXn6CXmwK9qO47NQn7wX9zgHoyJ3UZzzzCBoJ7x9X1XOWIYBykMDZiC
JkaWc3V+gub6ltdw8jKNXYQjRAoyPcsd40hSKteJRjULGfYTUw0FaOzSY/r3FWl+
1hLq5TXEZOTk27aMb2nctThCMTC01a7aEyx84bVRNmclUMKCO4Pv90y4
-----END CERTIFICATE-----
Generated at Tue Jun 17 10:35:14 2025 by rpki-client