Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
File:                     YiXGU2dIRI8cYBvpr6uCfJptjJg.mft (raw, json)
Hash identifier:          MMzyO+hSuuSI8WNrdXh4dLgG7UC8L6CRBn/lmkuLhjA=
Subject key identifier:   56:FD:4F:CB:F8:A4:59:45:EF:2D:F0:4A:5D:11:4C:0F:2C:15:50:CE
Authority key identifier: 62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98
Certificate issuer:       /CN=F36E1028RI/serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
Certificate serial:       04AF
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
Manifest number:          04A9
Signing time:             Wed 18 Jun 2025 04:07:55 +0000
Manifest this update:     Wed 18 Jun 2025 04:07:54 +0000
Manifest next update:     Fri 20 Jun 2025 04:07:54 +0000
Files and hashes:         1: YiXGU2dIRI8cYBvpr6uCfJptjJg.crl (hash: oJiF/CaqWi+tQki2zttnGe+jrGdK1NRsLIyXwRS1tFw=)
                          2: 78BBD498055511EEA313DE484AD9E6FC.roa (hash: gcOnw1oPuRTUxnfEp8Cnw2+KJImBfDvkykgZT1R/8jY=)
                          3: EC9655DEBAA211EEAEF6CA61775412E6.roa (hash: yvnXk52RrKBf5bxHjNgZoK+IZnQ2KvhA6TE4cpIiWLU=)
                          4: 1456D4A2586C11EEB137AB2E4AD9E6FC.roa (hash: 0m1O0dIgqFqkbHZ4x0YYbYO8gehKt7WacNKL0mWlsYk=)
                          5: D6EE1EFE055511EEA37AC8494AD9E6FC.roa (hash: oUt21oQyRcYFeyIoTpveRUVSzhhNTG7bwuYrK/bZUtw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
                          rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 20 Jun 2025 04:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1199 (0x4af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1028RI, serialNumber=6225C6536748448F1C601BE9AFAB827C9A6D8C98
        Validity
            Not Before: Jun 18 04:07:54 2025 GMT
            Not After : Jun 20 04:07:54 2025 GMT
        Subject: CN=68523b9b-464a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9a:87:60:36:12:ab:b3:5b:6e:60:a0:97:7c:
                    44:37:2f:f8:5c:ff:99:b8:3c:df:4f:50:f1:fd:b3:
                    4e:d4:25:fc:69:e4:b4:27:d8:b3:56:b0:eb:20:b8:
                    cb:62:a6:6f:34:bc:20:91:13:2e:71:a8:f9:ca:4c:
                    6b:e4:de:55:8f:9b:8d:e2:9b:5a:ae:17:fd:06:27:
                    ea:48:53:b2:99:8e:43:da:23:4d:d0:33:82:f2:55:
                    bc:e1:3f:9f:b9:38:fb:d1:51:01:b6:bc:41:e7:32:
                    31:f6:56:71:ea:46:09:a5:b7:4b:64:a4:b4:82:48:
                    65:86:15:90:e4:24:fd:1b:de:6e:6f:37:77:8a:fa:
                    42:54:22:16:cc:2f:74:7c:90:c3:fc:cc:fa:1a:02:
                    db:d2:86:13:5f:b2:91:89:13:2e:c9:a3:37:ea:d4:
                    5b:c5:e7:0b:36:e1:b6:d6:c6:88:d4:5a:0f:5c:fa:
                    c5:51:9a:a1:34:6c:13:8d:b4:34:2e:a0:c9:d8:05:
                    00:bf:52:0f:b8:c5:46:fa:81:46:93:9a:2c:a8:43:
                    c0:32:1a:54:e8:d5:d6:da:36:3c:37:9d:b2:7e:43:
                    ce:73:5f:1e:7e:47:5f:5d:2f:c1:a2:13:a1:7d:23:
                    90:ad:d7:66:d7:78:68:ad:fa:3f:9c:80:a2:ed:a1:
                    90:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:FD:4F:CB:F8:A4:59:45:EF:2D:F0:4A:5D:11:4C:0F:2C:15:50:CE
            X509v3 Authority Key Identifier:
                keyid:62:25:C6:53:67:48:44:8F:1C:60:1B:E9:AF:AB:82:7C:9A:6D:8C:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/YiXGU2dIRI8cYBvpr6uCfJptjJg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1028/2526B4EAC8A411EC887B5F99F1222468/YiXGU2dIRI8cYBvpr6uCfJptjJg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:6c:19:08:e2:83:6a:13:28:ac:36:aa:a6:ce:a7:eb:89:dc:
         23:7d:74:6f:a0:10:11:96:06:cd:72:99:8d:53:4d:6a:8f:c3:
         99:bc:86:f8:50:cb:68:6b:07:af:53:f4:7a:fb:2c:76:9d:d2:
         1c:15:bd:8c:91:f5:04:8c:56:4c:bc:5c:ea:b4:83:10:15:84:
         5f:de:4a:2a:91:7b:75:9c:a2:7c:37:b2:84:40:06:aa:b7:c0:
         22:14:57:92:63:98:3d:3a:7f:d1:d7:27:a1:3e:8f:50:00:f8:
         7a:4a:c4:ac:6e:15:66:b4:71:f2:a3:77:10:09:bb:32:61:79:
         bd:53:f8:b7:d7:18:36:ab:d9:55:4a:c5:0f:e6:d9:1e:06:c5:
         c0:fe:42:fc:7f:5b:b4:55:8a:b0:08:fa:d8:bc:57:10:78:d0:
         48:fa:f8:45:14:91:c9:41:7c:07:a4:2f:67:44:a6:9d:0c:37:
         fd:62:4c:1e:5d:c9:a4:c6:eb:89:73:fc:4e:b2:aa:a5:c7:36:
         03:a6:e6:fb:ed:12:7c:7a:ac:b2:94:e9:94:38:ad:23:ea:5c:
         b2:17:25:b3:53:58:0a:72:3a:ac:18:31:a5:2e:d0:c7:ed:6c:
         ed:c5:48:f3:72:ec:19:7c:58:0b:59:d6:db:80:24:0e:22:3e:
         fa:64:8d:45
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBK8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTEwMjhSSTExMC8GA1UEBRMoNjIyNUM2NTM2NzQ4NDQ4RjFDNjAxQkU5QUZBQjgy
N0M5QTZEOEM5ODAeFw0yNTA2MTgwNDA3NTRaFw0yNTA2MjAwNDA3NTRaMBgxFjAU
BgNVBAMTDTY4NTIzYjliLTQ2NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5modgNhKrs1tuYKCXfEQ3L/hc/5m4PN9PUPH9s07UJfxp5LQn2LNWsOsg
uMtipm80vCCREy5xqPnKTGvk3lWPm43im1quF/0GJ+pIU7KZjkPaI03QM4LyVbzh
P5+5OPvRUQG2vEHnMjH2VnHqRgmlt0tkpLSCSGWGFZDkJP0b3m5vN3eK+kJUIhbM
L3R8kMP8zPoaAtvShhNfspGJEy7Jozfq1FvF5ws24bbWxojUWg9c+sVRmqE0bBON
tDQuoMnYBQC/Ug+4xUb6gUaTmiyoQ8AyGlTo1dbaNjw3nbJ+Q85zXx5+R19dL8Gi
E6F9I5Ct12bXeGit+j+cgKLtoZDfAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUVv1P
y/ikWUXvLfBKXRFMDywVUM4wHwYDVR0jBBgwFoAUYiXGU2dIRI8cYBvpr6uCfJpt
jJgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUxMDI4LzI1MjZCNEVBQzhBNDExRUM4ODdCNUY5OUYxMjIyNDY4L1lpWEdV
MmRJUkk4Y1lCdnByNnVDZkpwdGpKZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L1lpWEdVMmRJUkk4Y1lCdnByNnVDZkpwdGpKZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RTEwMjgvMjUyNkI0RUFDOEE0MTFFQzg4N0I1Rjk5RjEyMjI0
NjgvWWlYR1UyZElSSThjWUJ2cHI2dUNmSnB0akpnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC3bBkI4oNqEyisNqqmzqfridwjfXRvoBAR
lgbNcpmNU01qj8OZvIb4UMtoawevU/R6+yx2ndIcFb2MkfUEjFZMvFzqtIMQFYRf
3koqkXt1nKJ8N7KEQAaqt8AiFFeSY5g9On/R1yehPo9QAPh6SsSsbhVmtHHyo3cQ
CbsyYXm9U/i31xg2q9lVSsUP5tkeBsXA/kL8f1u0VYqwCPrYvFcQeNBI+vhFFJHJ
QXwHpC9nRKadDDf9YkweXcmkxuuJc/xOsqqlxzYDpub77RJ8eqyylOmUOK0j6lyy
FyWzU1gKcjqsGDGlLtDH7WztxUjzcuwZfFgLWdbbgCQOIj76ZI1F
-----END CERTIFICATE-----
Generated at Wed Jun 18 11:14:12 2025 by rpki-client