Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
File:                     KnzueRgruFkbsTXdv7vulMHfQIc.mft (raw, json)
Hash identifier:          NZ+i4xX8Yu02lC9N40GyS3PRmc3L90EYiIty+5apqxU=
Subject key identifier:   B7:C6:04:45:86:E7:DF:A9:25:ED:13:B9:2B:E7:4C:67:EC:51:53:6F
Authority key identifier: 2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87
Certificate issuer:       /CN=F366CE6FAF/serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
Certificate serial:       0264
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
Manifest number:          025B
Signing time:             Tue 06 May 2025 04:04:50 +0000
Manifest this update:     Tue 06 May 2025 04:04:49 +0000
Manifest next update:     Thu 08 May 2025 04:04:49 +0000
Files and hashes:         1: KnzueRgruFkbsTXdv7vulMHfQIc.crl (hash: kkFbJ+ItHyyTAK/Fn7hzcliIfFTbvMcjtjnOwwAfhPM=)
                          2: 1A85425E69BB11EEBF5E904C4AD9E6FC.roa (hash: Kx/Y8dEbUYeqoToY5LpNSdsXIlBKib23+2DqdNa43/Y=)
                          3: FD189F0E69BA11EEBE81314C4AD9E6FC.roa (hash: UK6i2dFbIWYL9h4T/dpZ4yF8qA519gysmxncwqhjDNc=)
                          4: E44337C869BA11EE88CB094C4AD9E6FC.roa (hash: 1d8FtYAZsHDPTXDngJ49htpRva8POmc7nirQyWgiDXo=)
                          5: 3BB28D0269BA11EEABA4ED494AD9E6FC.roa (hash: Q1XgZ9ZmDeVtE4gxia+GOYWXfxLUPO9DALH0Nrtl+eg=)
                          6: B8B5DACA69BA11EEBD303C4B4AD9E6FC.roa (hash: uoqftiTs2TQ3rEVnLUYDWPuBL54Tw5Qh6vFz0fe7JV4=)
                          7: 98FDCD4669BA11EE95130C4B4AD9E6FC.roa (hash: V8tXop4xNSLK7NTMuObTNFw9mcHKdpwbwIJqeSi9teo=)
                          8: 6399788A69BA11EE9D71534A4AD9E6FC.roa (hash: kaAHuzndBPzeMjc2nNN3ZcTB7Ew41AHipGqkh1wKLvg=)
                          9: C7D92E1869B911EE953F70484AD9E6FC.roa (hash: SdAbuipwR7EHxw/Hbwbw2PDVH2wv4MuQ83A/IxBI9GQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 May 2025 00:06:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 612 (0x264)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366CE6FAF, serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
        Validity
            Not Before: May  6 04:04:49 2025 GMT
            Not After : May  8 04:04:49 2025 GMT
        Subject: CN=68198a62-cbdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:b3:31:00:12:bf:e4:ab:6d:ed:fa:f0:dc:
                    ba:29:55:9a:c7:cb:60:f3:44:14:b9:27:6f:b1:c9:
                    c7:a6:18:43:69:58:53:d5:23:d5:89:51:1f:5b:00:
                    e4:61:7d:87:04:85:35:02:88:b7:31:33:2f:82:e3:
                    fb:79:ef:c7:7c:98:b2:f9:80:a9:89:28:8d:46:b8:
                    21:a1:b1:07:1e:86:98:3b:f4:93:75:83:4e:b9:3e:
                    cb:95:a9:b3:7c:91:4a:ab:77:3b:1f:5b:4a:e9:35:
                    2d:23:a5:29:1c:a0:18:8b:d8:cc:b3:24:3c:6c:03:
                    4e:de:7c:a9:2d:dd:20:39:db:7c:b0:bb:05:5f:f6:
                    fb:cd:f0:e1:ae:bf:f8:46:35:1c:18:8e:8b:5d:30:
                    50:38:fb:d2:d4:b1:f1:c9:e0:68:97:2f:42:90:7b:
                    86:5b:16:9e:97:f8:b3:42:ef:7d:e8:7f:8c:d6:ea:
                    d0:52:fe:26:c5:74:28:ee:22:9e:2d:54:3b:36:fa:
                    93:a1:d1:04:c2:5f:8d:a5:de:72:7f:34:9f:57:0a:
                    bb:3c:ab:e9:a6:88:37:ea:78:f8:85:38:4b:47:86:
                    21:d1:a5:1a:b9:d4:20:3f:42:b5:be:eb:ef:97:01:
                    d0:73:d8:a7:82:c8:1a:04:af:19:53:a3:3b:64:93:
                    31:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:C6:04:45:86:E7:DF:A9:25:ED:13:B9:2B:E7:4C:67:EC:51:53:6F
            X509v3 Authority Key Identifier:
                keyid:2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:04:63:5e:bd:6d:50:f1:81:18:f9:57:88:eb:d2:86:c3:9e:
         cd:5e:54:aa:13:ae:82:98:1f:54:a1:cf:64:6d:a2:7b:a7:e6:
         23:e2:31:7a:51:c2:59:a4:67:51:bb:a8:bb:82:5b:ac:16:27:
         b7:fa:d8:f6:e2:a4:5c:db:6f:d4:04:1c:2f:5b:3c:68:81:fd:
         ad:ac:19:12:dd:38:09:dd:51:d8:88:58:c7:9c:ea:ce:95:2e:
         25:d8:ce:0d:13:9a:9a:6a:4e:e1:40:b7:81:12:91:f8:f0:4e:
         c9:31:fd:e6:7f:5e:66:8c:24:b1:5d:03:01:76:9a:1d:9d:fe:
         d4:9b:ec:c6:63:35:4c:32:20:cf:1a:0c:e1:73:83:21:73:fb:
         a7:20:05:37:eb:9b:5f:9f:92:bd:7d:a8:c7:85:1e:ae:8e:1d:
         34:36:f4:2e:e7:59:22:3f:fa:9a:4e:8e:30:7b:f1:38:42:11:
         1d:ac:66:e9:30:ce:15:8a:1a:ac:2b:64:9e:5d:38:71:3b:ef:
         51:97:85:6b:51:16:11:8a:6d:56:c8:a0:94:f3:de:d1:39:b8:
         1f:04:7c:34:25:a1:ad:05:74:b3:e8:51:21:92:38:aa:f9:aa:
         37:2a:bd:7c:de:7b:df:c4:f1:46:27:99:b6:98:f0:16:63:60:
         c6:25:77:26
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAmQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkNFNkZBRjExMC8GA1UEBRMoMkE3Q0VFNzkxODJCQjg1OTFCQjEzNUREQkZCQkVF
OTRDMURGNDA4NzAeFw0yNTA1MDYwNDA0NDlaFw0yNTA1MDgwNDA0NDlaMBgxFjAU
BgNVBAMTDTY4MTk4YTYyLWNiZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7AbMxABK/5Ktt7frw3LopVZrHy2DzRBS5J2+xycemGENpWFPVI9WJUR9b
AORhfYcEhTUCiLcxMy+C4/t578d8mLL5gKmJKI1GuCGhsQcehpg79JN1g065PsuV
qbN8kUqrdzsfW0rpNS0jpSkcoBiL2MyzJDxsA07efKkt3SA523ywuwVf9vvN8OGu
v/hGNRwYjotdMFA4+9LUsfHJ4GiXL0KQe4ZbFp6X+LNC733of4zW6tBS/ibFdCju
Ip4tVDs2+pOh0QTCX42l3nJ/NJ9XCrs8q+mmiDfqePiFOEtHhiHRpRq51CA/QrW+
6++XAdBz2KeCyBoErxlToztkkzG1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUt8YE
RYbn36kl7RO5K+dMZ+xRU28wHwYDVR0jBBgwFoAUKnzueRgruFkbsTXdv7vulMHf
QIcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZDRTZGL0Q5QTQ2NzZDNjk5QTExRUVCQ0M1RkI2NzRBRDlFNkZDL0tuenVl
UmdydUZrYnNUWGR2N3Z1bE1IZlFJYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0tuenVlUmdydUZrYnNUWGR2N3Z1bE1IZlFJYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkNFNkYvRDlBNDY3NkM2OTlBMTFFRUJDQzVGQjY3NEFE
OUU2RkMvS256dWVSZ3J1Rmtic1RYZHY3dnVsTUhmUUljLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBHBGNevW1Q8YEY+VeI69KGw57NXlSq
E66CmB9Uoc9kbaJ7p+Yj4jF6UcJZpGdRu6i7glusFie3+tj24qRc22/UBBwvWzxo
gf2trBkS3TgJ3VHYiFjHnOrOlS4l2M4NE5qaak7hQLeBEpH48E7JMf3mf15mjCSx
XQMBdpodnf7Um+zGYzVMMiDPGgzhc4Mhc/unIAU365tfn5K9fajHhR6ujh00NvQu
51kiP/qaTo4we/E4QhEdrGbpMM4VihqsK2SeXThxO+9Rl4VrURYRim1WyKCU897R
ObgfBHw0JaGtBXSz6FEhkjiq+ao3Kr183nvfxPFGJ5m2mPAWY2DGJXcm
-----END CERTIFICATE-----
Generated at Tue May 6 16:09:25 2025 by rpki-client