Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
File:                     PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft (raw, json)
Hash identifier:          hC4JjBvOs1WJ/n7pSTKMe+1xiXxe+gcZc7qLQEe5PF4=
Subject key identifier:   7E:81:5B:7E:21:60:FA:D4:C1:7A:96:1B:C5:BD:1A:0B:1B:17:D7:88
Authority key identifier: 3D:2A:F3:53:44:65:E3:FA:EC:A9:5B:BD:23:1F:72:3C:8A:06:F5:D1
Certificate issuer:       /CN=F36E8936AF/serialNumber=3D2AF3534465E3FAECA95BBD231F723C8A06F5D1
Certificate serial:       036B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
Manifest number:          036A
Signing time:             Tue 29 Apr 2025 03:24:22 +0000
Manifest this update:     Tue 29 Apr 2025 03:24:21 +0000
Manifest next update:     Thu 01 May 2025 03:24:21 +0000
Files and hashes:         1: PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.crl (hash: wyqi/toXNI2Obb/ygNGWll1PcW+4jsoMXc7nTQwBvWY=)
                          2: DFF1E77490ED11ED942A0B7DF1222468.roa (hash: 9WA9paanDgVyhx1/5/CO95xKP5kF7OW8npO/gngIuxQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 May 2025 03:24:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875 (0x36b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8936AF, serialNumber=3D2AF3534465E3FAECA95BBD231F723C8A06F5D1
        Validity
            Not Before: Apr 29 03:24:21 2025 GMT
            Not After : May  1 03:24:21 2025 GMT
        Subject: CN=68104665-c15e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7d:1e:07:50:7d:5f:2c:11:02:4a:58:82:42:
                    78:07:6f:1f:f9:a9:64:b2:25:32:33:bf:ae:aa:45:
                    50:25:23:e5:20:19:55:a7:f1:74:a0:5e:c5:98:8a:
                    4b:0f:af:bf:d8:45:3c:06:82:ea:57:f9:91:6f:0a:
                    f7:01:47:ec:36:a4:d0:1f:62:21:7d:cc:bd:eb:e5:
                    25:bf:42:df:f7:a2:5a:ac:72:4c:04:17:70:0b:8a:
                    6c:eb:02:b3:f1:f0:e0:15:eb:37:ee:9b:c1:5c:0e:
                    51:9f:50:41:23:76:98:3f:cc:24:d7:ba:dc:8b:a5:
                    75:66:80:be:65:09:25:d5:b7:38:98:42:63:17:17:
                    7a:2a:0d:52:26:9e:e1:ac:9e:18:77:30:82:7c:3a:
                    66:26:c3:7b:3c:8a:e2:9b:81:29:62:ab:d5:da:0f:
                    dd:fe:c0:74:dd:42:01:b3:e9:d9:b4:9b:2b:2b:24:
                    42:2d:a3:a5:8a:02:6a:2c:b3:69:86:1a:3f:78:1e:
                    15:44:db:54:5b:21:2d:e6:02:a7:2a:47:80:4a:88:
                    38:d7:36:ee:ad:70:36:cf:0b:95:35:1a:5e:b0:c7:
                    2c:9c:88:51:07:2d:f3:4a:c9:2c:82:00:94:b7:8b:
                    17:61:17:00:cf:c2:5e:91:26:97:83:32:09:72:22:
                    08:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:81:5B:7E:21:60:FA:D4:C1:7A:96:1B:C5:BD:1A:0B:1B:17:D7:88
            X509v3 Authority Key Identifier:
                keyid:3D:2A:F3:53:44:65:E3:FA:EC:A9:5B:BD:23:1F:72:3C:8A:06:F5:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/7CC16FAE90EC11EDB3D1D3F7F1222468/PSrzU0Rl4_rsqVu9Ix9yPIoG9dE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:cb:69:81:9b:68:7f:28:e1:73:38:b5:be:e6:92:6b:a4:98:
         d2:bb:76:b3:26:16:c1:a6:57:e5:46:7b:78:be:2a:94:e4:34:
         63:ba:8c:35:53:05:cf:d3:e1:0d:2a:27:0d:58:c4:65:dd:22:
         8c:86:2c:e6:52:0a:97:d9:51:db:b6:fc:85:1e:46:03:7a:0f:
         57:3c:f6:72:b8:c2:0e:6d:db:80:e6:1a:d8:d0:91:1d:45:1d:
         0a:f3:f7:fc:88:c3:82:4e:fd:dd:e1:70:ae:f0:47:4e:2f:40:
         3e:77:fd:da:3d:37:b3:0f:4f:7a:c9:62:4d:8e:26:0f:53:4a:
         1a:de:ae:f9:69:25:63:26:3f:d7:cf:65:5b:d0:21:f6:06:22:
         4d:b1:b0:ee:9a:15:67:c8:e5:e7:76:27:73:c9:b5:03:ab:51:
         8d:94:f7:dc:fa:2a:b0:d1:be:83:14:d5:24:3e:af:2a:11:ff:
         cf:55:4f:ae:e0:2f:e9:37:d0:1e:b4:4a:56:e4:73:36:09:9b:
         81:04:1d:5a:1e:8d:86:d9:fd:1f:ae:7a:16:ca:37:4f:08:eb:
         f1:8e:c9:1b:ca:7e:bf:6a:f2:1e:06:16:bc:ff:61:e4:04:eb:
         14:6f:39:02:96:81:cc:e8:8f:44:ca:41:99:be:af:ee:e1:2c:
         2c:ad:15:17
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA2swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTg5MzZBRjExMC8GA1UEBRMoM0QyQUYzNTM0NDY1RTNGQUVDQTk1QkJEMjMxRjcy
M0M4QTA2RjVEMTAeFw0yNTA0MjkwMzI0MjFaFw0yNTA1MDEwMzI0MjFaMBgxFjAU
BgNVBAMTDTY4MTA0NjY1LWMxNWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJfR4HUH1fLBECSliCQngHbx/5qWSyJTIzv66qRVAlI+UgGVWn8XSgXsWY
iksPr7/YRTwGgupX+ZFvCvcBR+w2pNAfYiF9zL3r5SW/Qt/3olqsckwEF3ALimzr
ArPx8OAV6zfum8FcDlGfUEEjdpg/zCTXutyLpXVmgL5lCSXVtziYQmMXF3oqDVIm
nuGsnhh3MIJ8OmYmw3s8iuKbgSliq9XaD93+wHTdQgGz6dm0mysrJEIto6WKAmos
s2mGGj94HhVE21RbIS3mAqcqR4BKiDjXNu6tcDbPC5U1Gl6wxyyciFEHLfNKySyC
AJS3ixdhFwDPwl6RJpeDMglyIgjNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUfoFb
fiFg+tTBepYbxb0aCxsX14gwHwYDVR0jBBgwFoAUPSrzU0Rl4/rsqVu9Ix9yPIoG
9dEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU4OTM2LzdDQzE2RkFFOTBFQzExRURCM0QxRDNGN0YxMjIyNDY4L1BTcnpV
MFJsNF9yc3FWdTlJeDl5UElvRzlkRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BTcnpVMFJsNF9yc3FWdTlJeDl5UElvRzlkRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTg5MzYvN0NDMTZGQUU5MEVDMTFFREIzRDFEM0Y3RjEy
MjI0NjgvUFNyelUwUmw0X3JzcVZ1OUl4OXlQSW9HOWRFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAty2mBm2h/KOFzOLW+5pJrpJjSu3az
JhbBplflRnt4viqU5DRjuow1UwXP0+ENKicNWMRl3SKMhizmUgqX2VHbtvyFHkYD
eg9XPPZyuMIObduA5hrY0JEdRR0K8/f8iMOCTv3d4XCu8EdOL0A+d/3aPTezD096
yWJNjiYPU0oa3q75aSVjJj/Xz2Vb0CH2BiJNsbDumhVnyOXndidzybUDq1GNlPfc
+iqw0b6DFNUkPq8qEf/PVU+u4C/pN9AetEpW5HM2CZuBBB1aHo2G2f0frnoWyjdP
COvxjskbyn6/avIeBha8/2HkBOsUbzkCloHM6I9EykGZvq/u4SwsrRUX
-----END CERTIFICATE-----
Generated at Tue Apr 29 11:40:39 2025 by rpki-client