Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
File:                     zjU-BgcibJUeYP1ogM7M-5jSvEg.mft (raw, json)
Hash identifier:          R3pINMELSuUbZL3iM+qbRscJeqv2XUF6UhFJ8Bek2+U=
Subject key identifier:   91:FB:25:F3:49:7F:48:6D:0B:9E:4B:18:28:A6:6F:4D:CD:55:04:3D
Authority key identifier: CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48
Certificate issuer:       /CN=F362EFF3AF/serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
Certificate serial:       02EC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
Manifest number:          02EA
Signing time:             Sun 04 May 2025 03:43:28 +0000
Manifest this update:     Sun 04 May 2025 03:43:27 +0000
Manifest next update:     Tue 06 May 2025 03:43:27 +0000
Files and hashes:         1: zjU-BgcibJUeYP1ogM7M-5jSvEg.crl (hash: FyB0MKrbjPMp/tGt3OhQNkKzHdT/ISfDgP2tb2sX2mg=)
                          2: 6C2FB170FFA811EDB10BF6814AD9E6FC.roa (hash: lBXXLwdkJTr+JXNn+pD+2aYKlgsMQpQ0R3v3F5qO+ns=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 May 2025 03:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 748 (0x2ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362EFF3AF, serialNumber=CE353E0607226C951E60FD6880CECCFB98D2BC48
        Validity
            Not Before: May  4 03:43:27 2025 GMT
            Not After : May  6 03:43:27 2025 GMT
        Subject: CN=6816e260-23e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a5:07:a6:de:e4:2c:48:7a:24:c4:d1:e3:32:
                    16:77:83:0f:e6:0f:56:12:5a:b2:ea:66:ee:36:3f:
                    bd:bc:3b:4c:7a:16:6f:96:6c:e0:16:ae:cb:42:ff:
                    4a:60:a2:35:58:9d:90:00:2d:37:55:72:3f:cf:d9:
                    d3:dd:99:92:f5:b3:a1:6f:36:df:cf:67:28:d3:fb:
                    77:d2:b1:60:19:cc:93:7f:61:05:d3:8c:fb:dc:6c:
                    56:76:84:82:8f:33:a5:a2:1c:5c:b5:5c:df:1e:1f:
                    48:9b:ee:82:af:ba:ea:c1:2b:b1:09:e4:94:9d:2a:
                    58:db:0b:9d:16:cc:e6:1b:fc:ce:bd:e2:15:a5:7f:
                    54:d8:50:d2:4e:1f:91:97:d9:da:75:ad:95:79:4a:
                    e4:ff:1c:90:a9:47:33:aa:cc:b4:58:5c:77:de:92:
                    35:ca:a7:c8:e9:d1:68:1a:20:28:41:73:86:68:76:
                    66:66:f2:06:d6:4a:68:91:3f:97:ff:95:ac:07:31:
                    08:92:fe:01:7f:20:99:ab:b4:ea:bd:26:a6:09:87:
                    b4:6f:62:59:1a:d2:a7:5f:16:a9:00:9a:9b:94:3f:
                    5e:16:a2:53:c2:f1:f8:c6:02:37:03:bd:ec:9e:57:
                    b1:92:d2:2e:b5:a6:58:6d:ef:84:25:b7:6c:f7:c4:
                    02:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:FB:25:F3:49:7F:48:6D:0B:9E:4B:18:28:A6:6F:4D:CD:55:04:3D
            X509v3 Authority Key Identifier:
                keyid:CE:35:3E:06:07:22:6C:95:1E:60:FD:68:80:CE:CC:FB:98:D2:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zjU-BgcibJUeYP1ogM7M-5jSvEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362EFF3/AC085646F5B511EDA75CAF494AD9E6FC/zjU-BgcibJUeYP1ogM7M-5jSvEg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:4f:33:65:24:65:a1:47:44:f3:d2:bb:6f:a4:df:25:23:8b:
         53:31:3d:60:96:f8:a9:98:d7:20:db:47:07:f2:12:57:7c:a2:
         f6:c7:d8:c4:29:d9:0f:7b:9c:61:7e:d9:87:27:4e:59:02:70:
         b7:f1:93:13:9f:ea:54:a4:cf:02:9e:d7:62:71:20:01:52:45:
         b4:a3:1a:6d:aa:41:da:56:f4:e0:71:d2:3c:37:bf:1f:1a:b2:
         56:3c:96:af:0e:7c:51:cc:1a:5d:2c:90:14:c0:0e:34:15:54:
         e9:12:bd:ba:14:4b:45:3c:85:49:11:ca:e1:b1:2a:a2:cb:6a:
         e9:25:f5:07:45:25:05:4f:82:a5:88:f9:4c:6c:19:01:b0:23:
         06:e5:06:6a:39:6a:58:87:0c:6a:a0:48:4d:fd:6d:23:78:50:
         3f:3b:f8:7e:65:d9:01:0e:e5:60:20:25:87:a6:06:fe:61:7e:
         38:3e:03:09:4c:0d:93:ae:4c:7d:be:63:f9:14:05:17:78:5d:
         c9:6d:48:9f:ac:48:0c:15:3e:78:41:de:08:b6:3c:25:fb:50:
         e5:d0:f4:3a:9c:e9:ef:e2:ba:01:05:8b:0d:42:17:d8:34:a6:
         e3:78:7b:72:52:b6:69:57:33:fa:cc:6a:e5:c3:65:0e:71:6c:
         0e:c8:52:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 02:57:34 2025 by rpki-client