Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
File:                     6Z6B_I_kh8L4TcmvrcH827QCmvk.mft (raw, json)
Hash identifier:          q9inhdDvZVJJ7cvxQXIPrMSbNvlogtX2+eiWrB7Afcg=
Subject key identifier:   53:C8:20:1C:BC:82:40:85:BB:CA:D2:93:9C:72:C0:CA:A7:64:6F:54
Authority key identifier: E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9
Certificate issuer:       /CN=F36C7A8FAF/serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
Certificate serial:       02CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
Manifest number:          02C8
Signing time:             Sun 27 Apr 2025 03:45:41 +0000
Manifest this update:     Sun 27 Apr 2025 03:45:41 +0000
Manifest next update:     Tue 29 Apr 2025 03:45:41 +0000
Files and hashes:         1: 6Z6B_I_kh8L4TcmvrcH827QCmvk.crl (hash: nkG24WgynHXQuznMWsD5Z0VvM015NI2/RbDj1mMTAWw=)
                          2: DFF4540A0AAA11EE89915D5A4AD9E6FC.roa (hash: cP9R2Qrl9S1ixebQNGm1g6k1ly30xv1Wd7bXVEu0duY=)
                          3: A20A504A0AAA11EE812F6E594AD9E6FC.roa (hash: G7RsbPwM9vl05EvPa/pSvH1sxjZhrGpa0npEjP9lu34=)
                          4: 03B9356C0AAC11EE9989895D4AD9E6FC.roa (hash: GvzLodpAjODjSMFS5AA5iBQ1yRBDjLhq9pR5HhpCZGw=)
                          5: 20911B1A0AAB11EE98E6EE5A4AD9E6FC.roa (hash: 3LYqrUAm+YgDBSHjb0aEV7V78Rp6eI1SjXprGGtvbe8=)
                          6: 57F065AC0AAB11EE93858A5B4AD9E6FC.roa (hash: 3dH4FpXYKrw/ZxlMDdoPn1emT4uwkIhadIqln0a8STQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C7A8FAF, serialNumber=E99E81FC8FE487C2F84DC9AFADC1FCDBB4029AF9
        Validity
            Not Before: Apr 27 03:45:41 2025 GMT
            Not After : Apr 29 03:45:41 2025 GMT
        Subject: CN=680da865-840c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d4:51:ef:bf:87:90:92:97:33:9d:58:b3:62:
                    f8:e2:ad:7a:eb:68:83:34:6b:6a:e7:d5:cc:04:37:
                    9f:17:4b:c2:b5:27:71:af:8a:da:a1:9a:29:c0:ad:
                    57:2d:e5:33:bc:0b:f1:a3:63:88:21:fe:41:28:2d:
                    a6:3b:61:70:e3:69:5d:2c:04:e5:5a:9b:62:b9:58:
                    32:04:10:23:be:c1:dd:58:06:6a:51:8d:4f:48:f9:
                    87:a7:53:ee:3a:bb:fc:10:ee:13:8f:f5:d9:ea:e3:
                    f9:3f:45:1d:a7:06:21:f7:41:39:90:fe:ab:3c:51:
                    bd:c6:45:d5:1f:1a:6f:2a:7d:06:a6:ff:dd:35:bf:
                    03:20:dc:95:d0:84:2a:05:bd:7e:a0:65:19:5f:3a:
                    d4:11:dc:76:b6:bb:67:a4:ec:ea:15:e7:59:22:73:
                    ac:4a:55:d6:ca:0c:be:65:f3:26:ef:08:0c:f5:46:
                    4a:a1:03:a7:1f:db:b6:ef:99:ac:35:c6:c4:09:97:
                    41:6c:3f:cf:44:b3:f2:7f:42:cd:0f:56:cc:7f:9a:
                    94:c4:94:f7:25:e5:d1:27:e3:1b:74:2c:c4:f5:0f:
                    16:d3:61:8b:b2:5a:61:fe:88:07:2d:07:17:16:f5:
                    16:5b:1a:b6:02:ae:59:7c:1b:27:8c:c1:ad:e5:b1:
                    14:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C8:20:1C:BC:82:40:85:BB:CA:D2:93:9C:72:C0:CA:A7:64:6F:54
            X509v3 Authority Key Identifier:
                keyid:E9:9E:81:FC:8F:E4:87:C2:F8:4D:C9:AF:AD:C1:FC:DB:B4:02:9A:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6Z6B_I_kh8L4TcmvrcH827QCmvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C7A8F/0D485FCA0A9A11EE955F44294AD9E6FC/6Z6B_I_kh8L4TcmvrcH827QCmvk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c1:b6:bb:44:4c:77:35:99:83:c9:3a:11:b1:8c:9d:e5:07:
         98:de:bf:b5:e8:cc:96:0f:70:5d:84:1f:3e:8a:b5:6b:bb:86:
         2a:cc:57:f3:0a:f4:39:7a:f8:05:50:12:64:10:28:d4:39:30:
         1a:e4:37:b3:39:6d:b7:f7:28:1e:e7:f4:89:53:d8:56:90:c9:
         8e:bc:24:ee:2d:19:69:b4:a6:29:9d:f2:6f:bc:45:21:96:92:
         e5:64:db:9f:93:13:a6:14:81:24:c1:81:12:fb:3b:c3:44:dc:
         55:0f:7e:d0:74:b0:08:5b:5f:ce:fb:06:ee:bd:8f:0a:d3:ea:
         65:14:8c:79:03:79:36:36:01:75:12:c6:86:b6:d3:41:02:fa:
         cd:87:3e:f3:34:4b:24:54:ac:27:4e:ae:7e:69:6a:c4:1f:47:
         51:73:3a:30:1a:08:17:5a:a1:d6:ef:2c:ee:9c:56:7f:54:96:
         67:89:cd:da:06:72:1d:27:ea:61:00:63:37:2a:c7:59:a6:1a:
         f4:03:8c:0e:5c:a2:5d:00:4b:de:4b:d3:5a:ee:40:4a:59:6b:
         e7:ec:87:69:7f:8a:9f:f3:01:82:99:75:a8:ea:ce:55:61:b9:
         e7:ea:75:8f:35:6d:66:e5:cc:a7:5b:ec:d0:08:61:83:59:ef:
         7a:55:81:f6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzdBOEZBRjExMC8GA1UEBRMoRTk5RTgxRkM4RkU0ODdDMkY4NERDOUFGQURDMUZD
REJCNDAyOUFGOTAeFw0yNTA0MjcwMzQ1NDFaFw0yNTA0MjkwMzQ1NDFaMBgxFjAU
BgNVBAMTDTY4MGRhODY1LTg0MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/1FHvv4eQkpcznVizYvjirXrraIM0a2rn1cwEN58XS8K1J3GvitqhminA
rVct5TO8C/GjY4gh/kEoLaY7YXDjaV0sBOVam2K5WDIEECO+wd1YBmpRjU9I+Yen
U+46u/wQ7hOP9dnq4/k/RR2nBiH3QTmQ/qs8Ub3GRdUfGm8qfQam/901vwMg3JXQ
hCoFvX6gZRlfOtQR3Ha2u2ek7OoV51kic6xKVdbKDL5l8ybvCAz1RkqhA6cf27bv
maw1xsQJl0FsP89Es/J/Qs0PVsx/mpTElPcl5dEn4xt0LMT1DxbTYYuyWmH+iAct
BxcW9RZbGrYCrll8GyeMwa3lsRR/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUU8gg
HLyCQIW7ytKTnHLAyqdkb1QwHwYDVR0jBBgwFoAU6Z6B/I/kh8L4TcmvrcH827QC
mvkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM3QThGLzBENDg1RkNBMEE5QTExRUU5NTVGNDQyOTRBRDlFNkZDLzZaNkJf
SV9raDhMNFRjbXZyY0g4MjdRQ212ay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzZaNkJfSV9raDhMNFRjbXZyY0g4MjdRQ212ay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzdBOEYvMEQ0ODVGQ0EwQTlBMTFFRTk1NUY0NDI5NEFE
OUU2RkMvNlo2Ql9JX2toOEw0VGNtdnJjSDgyN1FDbXZrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+wba7REx3NZmDyToRsYyd5QeY3r+1
6MyWD3BdhB8+irVru4YqzFfzCvQ5evgFUBJkECjUOTAa5DezOW239yge5/SJU9hW
kMmOvCTuLRlptKYpnfJvvEUhlpLlZNufkxOmFIEkwYES+zvDRNxVD37QdLAIW1/O
+wbuvY8K0+plFIx5A3k2NgF1EsaGttNBAvrNhz7zNEskVKwnTq5+aWrEH0dRczow
GggXWqHW7yzunFZ/VJZnic3aBnIdJ+phAGM3KsdZphr0A4wOXKJdAEveS9Na7kBK
WWvn7Idpf4qf8wGCmXWo6s5VYbnn6nWPNW1m5cynW+zQCGGDWe96VYH2
-----END CERTIFICATE-----
Generated at Sun Apr 27 18:12:58 2025 by rpki-client