Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
File:                     CzGZramPk056KV0rqhPAxHetjyU.mft (raw, json)
Hash identifier:          z1kOMovPec9EOH1nxgoyF5civ31L5/gynd8NjUsTIng=
Subject key identifier:   88:18:B5:63:BA:FA:9D:98:5D:D6:E4:34:5C:9F:44:16:AA:8F:DF:51
Authority key identifier: 0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
Certificate issuer:       /CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Certificate serial:       03A4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
Manifest number:          03A3
Signing time:             Wed 30 Apr 2025 03:18:44 +0000
Manifest this update:     Wed 30 Apr 2025 03:18:43 +0000
Manifest next update:     Fri 02 May 2025 03:18:43 +0000
Files and hashes:         1: CzGZramPk056KV0rqhPAxHetjyU.crl (hash: 8kNBu2ofTBH/RzOqPhGTf/Rzr8BRxfZz8K5PkqPEGLg=)
                          2: 5A992ACC659811ED9CE9B7C8F1222468.roa (hash: NjQvSWJBVOMZRY/QCKY/uG+2g+UAexC0q1YfjK9ZI0s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 May 2025 03:18:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 932 (0x3a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA64DAF, serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
        Validity
            Not Before: Apr 30 03:18:43 2025 GMT
            Not After : May  2 03:18:43 2025 GMT
        Subject: CN=68119694-7664
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:1d:26:aa:f7:93:c6:c1:a5:12:5f:84:dc:
                    30:09:14:1e:6e:e1:07:db:c6:4c:5f:c9:e9:16:34:
                    d3:29:8b:a0:9a:f6:96:34:b2:db:2e:72:a9:ed:e3:
                    f1:ff:0c:51:e6:65:f4:fe:43:d3:db:de:34:09:3a:
                    06:f4:ce:f9:b9:6a:e7:58:a9:18:27:3b:33:e7:39:
                    9a:8a:db:e5:dc:91:af:01:88:f5:a6:1f:36:03:9f:
                    8b:dc:f9:2a:47:b2:bb:72:85:f2:db:8e:32:8e:af:
                    07:ad:6c:c1:b8:2c:ba:ad:04:87:0e:ed:b9:db:85:
                    2b:95:ea:65:62:b1:12:df:56:50:06:8b:67:34:33:
                    3c:36:5a:61:bf:e2:36:cc:f0:30:34:10:b7:2a:5d:
                    a9:24:9a:6a:3c:fd:7a:41:96:cf:61:ff:ae:61:ec:
                    4b:a8:76:fc:0c:76:4e:01:b3:6f:62:9c:4a:63:ec:
                    8a:c6:c0:e1:25:ca:23:e8:50:81:52:38:74:96:34:
                    eb:c0:52:6d:b8:d7:ed:8e:a5:88:e5:6a:fa:a7:2d:
                    92:df:67:71:e5:d5:18:e0:e8:e0:28:77:22:85:39:
                    2d:50:fb:9c:7b:b4:04:4c:4a:aa:b4:90:83:e0:e9:
                    d5:14:b4:b0:d8:59:0d:ad:f3:f2:93:81:3e:cf:75:
                    d8:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:18:B5:63:BA:FA:9D:98:5D:D6:E4:34:5C:9F:44:16:AA:8F:DF:51
            X509v3 Authority Key Identifier:
                keyid:0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:91:60:b6:3a:ee:47:32:6c:50:49:84:c1:91:b3:df:7d:d5:
         bc:29:19:96:55:dd:5b:80:de:ea:9b:76:be:cd:ea:84:b5:62:
         ec:9c:d3:c5:16:4e:71:c5:97:7e:8e:95:25:b3:ca:7a:d5:16:
         b0:6f:b1:3b:91:98:5b:be:a3:d5:36:80:02:1e:a5:40:a1:72:
         f8:8a:29:02:48:d4:07:db:b2:a0:94:6b:58:fe:0d:22:8b:32:
         9e:92:fe:bf:e0:0b:cb:e3:1d:29:c8:e4:09:5d:8f:f9:ef:d1:
         f0:64:64:ac:9d:92:46:04:03:13:27:6d:9d:c5:fd:fd:29:d0:
         d8:37:33:8c:97:f2:ec:96:65:ab:01:96:2b:cd:f0:8d:c1:04:
         c9:bb:9e:c2:68:f1:f7:43:24:8a:3d:12:b8:d1:c3:ca:00:a6:
         3c:ef:f9:40:99:99:21:ce:35:4c:c9:b7:94:2b:ae:30:fa:e8:
         39:67:01:cc:06:d2:c5:9a:a6:93:39:b2:83:6e:ea:6d:42:c8:
         dc:68:40:d2:0b:d2:66:ca:3e:27:4b:03:22:bd:d0:21:5b:6b:
         f1:23:81:da:70:19:b2:6c:f2:58:6f:7c:83:a9:91:c3:99:c6:
         cf:3a:97:27:b8:ac:eb:5d:79:d4:3b:4e:b3:b0:24:7e:9c:4b:
         4a:bf:10:49
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA6QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkE2NERBRjExMC8GA1UEBRMoMEIzMTk5QURBOThGOTM0RTdBMjk1RDJCQUExM0Mw
QzQ3N0FEOEYyNTAeFw0yNTA0MzAwMzE4NDNaFw0yNTA1MDIwMzE4NDNaMBgxFjAU
BgNVBAMTDTY4MTE5Njk0LTc2NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDC2R0mqveTxsGlEl+E3DAJFB5u4QfbxkxfyekWNNMpi6Ca9pY0stsucqnt
4/H/DFHmZfT+Q9Pb3jQJOgb0zvm5audYqRgnOzPnOZqK2+Xcka8BiPWmHzYDn4vc
+SpHsrtyhfLbjjKOrwetbMG4LLqtBIcO7bnbhSuV6mVisRLfVlAGi2c0Mzw2WmG/
4jbM8DA0ELcqXakkmmo8/XpBls9h/65h7EuodvwMdk4Bs29inEpj7IrGwOElyiPo
UIFSOHSWNOvAUm241+2OpYjlavqnLZLfZ3Hl1Rjg6OAodyKFOS1Q+5x7tARMSqq0
kIPg6dUUtLDYWQ2t8/KTgT7PddhVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiBi1
Y7r6nZhd1uQ0XJ9EFqqP31EwHwYDVR0jBBgwFoAUCzGZramPk056KV0rqhPAxHet
jyUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJBNjRELzkzRDI3MjBFNjU5NzExRUQ5QTdDQjhDNkYxMjIyNDY4L0N6R1py
YW1QazA1NktWMHJxaFBBeEhldGp5VS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0N6R1pyYW1QazA1NktWMHJxaFBBeEhldGp5VS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkE2NEQvOTNEMjcyMEU2NTk3MTFFRDlBN0NCOEM2RjEy
MjI0NjgvQ3pHWnJhbVBrMDU2S1YwcnFoUEF4SGV0anlVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCIkWC2Ou5HMmxQSYTBkbPffdW8KRmW
Vd1bgN7qm3a+zeqEtWLsnNPFFk5xxZd+jpUls8p61Rawb7E7kZhbvqPVNoACHqVA
oXL4iikCSNQH27KglGtY/g0iizKekv6/4AvL4x0pyOQJXY/579HwZGSsnZJGBAMT
J22dxf39KdDYNzOMl/LslmWrAZYrzfCNwQTJu57CaPH3QySKPRK40cPKAKY87/lA
mZkhzjVMybeUK64w+ug5ZwHMBtLFmqaTObKDbuptQsjcaEDSC9Jmyj4nSwMivdAh
W2vxI4HacBmybPJYb3yDqZHDmcbPOpcnuKzrXXnUO06zsCR+nEtKvxBJ
-----END CERTIFICATE-----
Generated at Thu May 1 02:37:02 2025 by rpki-client