Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
File:                     Y-C7azQzzV1xpCsBab2wHiDkVX8.mft (raw, json)
Hash identifier:          NhT++vQL2yS51m8IDPbbAOY/+WxsUPT/GrS5ZtU2rYI=
Subject key identifier:   23:1C:D6:99:2A:45:2C:3E:83:FC:13:B0:AD:A3:46:10:51:E4:28:82
Authority key identifier: 63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F
Certificate issuer:       /CN=F362C18CAF/serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
Certificate serial:       0651
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
Manifest number:          063B
Signing time:             Wed 02 Jul 2025 02:15:10 +0000
Manifest this update:     Wed 02 Jul 2025 02:15:09 +0000
Manifest next update:     Fri 04 Jul 2025 02:15:09 +0000
Files and hashes:         1: Y-C7azQzzV1xpCsBab2wHiDkVX8.crl (hash: Zt7tdq4pZyiDacf2YjVLOT8IGCHhDLS2x4bn73cI8aA=)
                          2: 022F32CA9CCB11EFAAC38E52762E951A.roa (hash: rD0syBKiL7c261Mu8WhV/kxThDTjGQI8fG8xABHRfiA=)
                          3: 1D6B7FA0CCFD11EFBF8BB796762E951A.roa (hash: d0Rz+8diHIGN4O10U8x5EdoQVb2OPGuluExTgAwtQuM=)
                          4: 82F1436CCCFA11EF98386986762E951A.roa (hash: WFETggbNMlIPJwzATTFNhe/4NNL01rzgeTk5fQnvT8o=)
                          5: 3E5CAEF89CCB11EF96936E54762E951A.roa (hash: NaL+5IqvHfzKEob4MeRapqEPczk8TUD17OZ5TfT8Nj0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 04 Jul 2025 02:15:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1617 (0x651)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362C18CAF, serialNumber=63E0BB6B3433CD5D71A42B0169BDB01E20E4557F
        Validity
            Not Before: Jul  2 02:15:09 2025 GMT
            Not After : Jul  4 02:15:09 2025 GMT
        Subject: CN=6864962e-7354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:37:53:e6:8e:70:03:e3:81:e0:86:ad:b5:
                    2d:34:9f:a7:c8:d0:c7:44:61:7b:bd:ff:3c:b4:1a:
                    72:22:27:05:aa:4c:5d:40:c1:21:73:8a:1f:f3:66:
                    1c:6d:50:6b:63:d5:92:3c:70:bd:b4:47:5d:de:81:
                    cc:8d:62:c0:44:f5:ed:9b:fe:c0:0f:00:e1:91:9e:
                    19:59:10:6b:c2:aa:92:79:4e:5a:37:b2:fc:90:c6:
                    48:57:d5:5f:5c:d0:db:7d:1c:b1:b3:ee:c5:f3:dd:
                    c0:d3:4f:d7:2c:65:84:df:3e:ae:e4:b7:f4:ac:ae:
                    22:d9:56:e7:13:e4:08:59:09:91:c2:68:06:89:1b:
                    3d:11:18:92:47:0d:68:41:96:5f:d9:0f:55:97:03:
                    a2:ce:cc:96:40:5b:86:0f:fa:17:a5:f6:e3:f7:8c:
                    ec:57:6e:c0:88:82:e1:dc:4a:c6:b1:a4:c3:e8:87:
                    b9:82:74:0a:60:06:38:c6:fe:dc:35:5f:80:70:ef:
                    96:de:57:1f:4f:45:32:19:a5:ed:d9:51:f2:b0:6a:
                    e9:a0:af:4b:ca:90:4c:fa:35:35:bf:0b:a6:5b:af:
                    10:d7:5c:54:e5:1f:cb:f8:cd:71:c9:a2:20:75:50:
                    f6:79:de:f2:1c:16:10:b7:f1:5c:a4:3d:a0:7b:b8:
                    3c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:1C:D6:99:2A:45:2C:3E:83:FC:13:B0:AD:A3:46:10:51:E4:28:82
            X509v3 Authority Key Identifier:
                keyid:63:E0:BB:6B:34:33:CD:5D:71:A4:2B:01:69:BD:B0:1E:20:E4:55:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y-C7azQzzV1xpCsBab2wHiDkVX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C18C/45883290ABD111EBB1A6715EF8AEA228/Y-C7azQzzV1xpCsBab2wHiDkVX8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:1b:32:ca:40:a8:89:65:63:5d:dc:c9:90:e9:9d:2a:45:1f:
         60:5f:c7:02:bc:b2:f1:25:07:e7:9a:88:f6:22:83:05:38:51:
         6d:05:20:ef:81:0c:af:9d:8c:3f:be:9a:91:d3:8d:27:b6:7c:
         86:dd:de:87:b5:29:bd:2e:d9:33:cf:00:14:98:44:98:09:67:
         fe:ad:b6:55:32:ca:2a:54:56:05:ef:51:36:72:71:e1:dd:c0:
         5f:23:e1:bd:8f:47:b3:5a:02:76:a9:e7:48:92:d5:e6:27:f6:
         5c:0d:62:c5:2c:ee:f9:ac:76:17:1b:a3:a3:d1:f5:33:fb:b4:
         74:e7:37:d8:db:a1:a7:27:bd:78:ad:f8:ca:31:22:be:14:fa:
         30:8b:d9:ff:ff:0b:74:cb:ad:5a:4e:a6:37:85:de:6a:fa:bb:
         e9:5f:54:17:6a:0a:ad:f6:ed:57:ef:49:eb:84:6e:b1:3a:12:
         ee:c2:99:8a:7d:39:36:f6:fb:97:5e:1a:4b:6c:5a:10:87:30:
         60:ac:2e:1e:00:ac:ff:91:cd:59:a1:d7:d8:02:ac:e2:8e:d0:
         d1:6e:e5:92:6f:6f:09:25:60:cb:99:37:5e:4c:d0:64:43:97:
         ab:6d:d0:1e:fd:89:d8:a3:39:4e:e7:10:62:2f:b3:f9:67:e7:
         ea:da:74:71
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkMxOENBRjExMC8GA1UEBRMoNjNFMEJCNkIzNDMzQ0Q1RDcxQTQyQjAxNjlCREIw
MUUyMEU0NTU3RjAeFw0yNTA3MDIwMjE1MDlaFw0yNTA3MDQwMjE1MDlaMBgxFjAU
BgNVBAMTDTY4NjQ5NjJlLTczNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+dTdT5o5wA+OB4IattS00n6fI0MdEYXu9/zy0GnIiJwWqTF1AwSFzih/z
ZhxtUGtj1ZI8cL20R13egcyNYsBE9e2b/sAPAOGRnhlZEGvCqpJ5Tlo3svyQxkhX
1V9c0Nt9HLGz7sXz3cDTT9csZYTfPq7kt/SsriLZVucT5AhZCZHCaAaJGz0RGJJH
DWhBll/ZD1WXA6LOzJZAW4YP+hel9uP3jOxXbsCIguHcSsaxpMPoh7mCdApgBjjG
/tw1X4Bw75beVx9PRTIZpe3ZUfKwaumgr0vKkEz6NTW/C6ZbrxDXXFTlH8v4zXHJ
oiB1UPZ53vIcFhC38VykPaB7uDypAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUIxzW
mSpFLD6D/BOwraNGEFHkKIIwHwYDVR0jBBgwFoAUY+C7azQzzV1xpCsBab2wHiDk
VX8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJDMThDLzQ1ODgzMjkwQUJEMTExRUJCMUE2NzE1RUY4QUVBMjI4L1ktQzdh
elF6elYxeHBDc0JhYjJ3SGlEa1ZYOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ktQzdhelF6elYxeHBDc0JhYjJ3SGlEa1ZYOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkMxOEMvNDU4ODMyOTBBQkQxMTFFQkIxQTY3MTVFRjhB
RUEyMjgvWS1DN2F6UXp6VjF4cENzQmFiMndIaURrVlg4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6GzLKQKiJZWNd3MmQ6Z0qRR9gX8cC
vLLxJQfnmoj2IoMFOFFtBSDvgQyvnYw/vpqR040ntnyG3d6HtSm9LtkzzwAUmESY
CWf+rbZVMsoqVFYF71E2cnHh3cBfI+G9j0ezWgJ2qedIktXmJ/ZcDWLFLO75rHYX
G6Oj0fUz+7R05zfY26GnJ714rfjKMSK+FPowi9n//wt0y61aTqY3hd5q+rvpX1QX
agqt9u1X70nrhG6xOhLuwpmKfTk29vuXXhpLbFoQhzBgrC4eAKz/kc1ZodfYAqzi
jtDRbuWSb28JJWDLmTdeTNBkQ5erbdAe/YnYozlO5xBiL7P5Z+fq2nRx
-----END CERTIFICATE-----
Generated at Thu Jul 3 01:07:19 2025 by rpki-client