Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
File:                     zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft (raw, json)
Hash identifier:          +b3meU+ZK2EtwwP2om+n44iCz/g6u8SJxb4Q6TgqPc0=
Subject key identifier:   E1:79:8E:A5:F2:41:3E:B8:31:74:E4:15:E5:51:C4:56:84:58:8D:6F
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Certificate issuer:       /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial:       013D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
Manifest number:          0139
Signing time:             Sat 17 May 2025 04:43:01 +0000
Manifest this update:     Sat 17 May 2025 04:43:00 +0000
Manifest next update:     Mon 19 May 2025 04:43:00 +0000
Files and hashes:         1: zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl (hash: ToT8dchFNP2S4kY7pU7ulcyo1PUrBbHSW7heR8EpVZg=)
                          2: 7A18E53AE3A511EFB1E8E756762E951A.roa (hash: 2LPC2UkkLzMGcbYCbFGtnfKTTqIGsxGXV0s+CLhea/M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 May 2025 00:06:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 317 (0x13d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697E68AF, serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
        Validity
            Not Before: May 17 04:43:00 2025 GMT
            Not After : May 19 04:43:00 2025 GMT
        Subject: CN=682813d5-68bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:81:4e:79:12:af:dd:c8:a6:e1:1f:9f:d8:29:
                    85:9e:e6:d6:c0:d9:4d:9a:ca:e4:c8:83:af:3a:dc:
                    02:89:fc:82:7a:1b:12:16:9d:e9:44:c7:11:e8:5d:
                    a9:b7:9a:cb:bb:1d:82:89:1f:3b:a5:39:21:e0:15:
                    74:a8:d7:a2:40:f2:1e:b6:d0:0d:fe:8a:8a:5a:94:
                    34:c2:e4:ee:f5:55:a3:49:3a:2e:70:9b:0a:1b:2d:
                    96:da:4e:e9:07:22:b6:53:a3:31:41:2e:ee:0e:d1:
                    ab:16:e9:40:40:b9:e4:4f:78:ba:bb:de:1d:90:9c:
                    18:96:5c:8a:2b:d6:16:42:50:55:65:fa:fe:1e:94:
                    bf:3a:e6:0a:a2:06:49:59:c9:68:66:3f:67:7d:25:
                    11:fa:3b:70:fb:a6:22:23:2e:25:0f:aa:af:65:12:
                    40:a2:14:d0:c4:86:4d:b4:0e:4d:8a:78:76:6f:14:
                    76:49:07:29:c4:87:4a:87:b7:de:f1:b0:65:38:4e:
                    df:61:67:0c:7b:1a:dd:fe:c9:71:fe:ac:ff:5b:3d:
                    33:b2:86:3e:c9:02:c2:a3:81:28:c5:78:6e:6a:2c:
                    03:9d:ee:f9:8e:9e:f2:d1:da:3f:29:10:25:79:aa:
                    e2:d2:9d:43:4d:6d:8d:76:0f:fb:70:d8:fd:5d:68:
                    8d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:79:8E:A5:F2:41:3E:B8:31:74:E4:15:E5:51:C4:56:84:58:8D:6F
            X509v3 Authority Key Identifier:
                keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:7c:95:81:64:5e:95:cc:f2:a2:94:25:6a:30:5b:7a:2f:cf:
         28:7c:23:e3:da:11:f0:9b:f6:fb:c2:39:8d:50:e5:0d:b0:e9:
         a6:49:a5:ee:fc:76:f5:44:4c:f6:25:7c:73:ca:ca:8b:26:29:
         27:6c:99:4a:4c:34:bb:33:75:85:57:7b:f7:ff:8c:a2:d0:cc:
         81:10:be:1a:4a:9c:61:69:3a:ba:de:9b:40:89:47:92:92:55:
         03:dd:7a:62:fc:bb:4f:85:0d:11:5a:a5:61:12:a0:8d:cf:bc:
         75:d1:36:93:08:8b:88:db:10:69:f9:22:38:4f:32:5e:d3:51:
         9c:6b:7d:d8:a6:a3:5a:b7:7c:b0:b8:ab:d1:fc:82:29:e5:04:
         5d:5f:e9:9a:2a:02:cb:52:d0:0b:4f:34:3c:bf:b3:e6:c0:86:
         c6:46:f6:02:a5:58:4f:4a:50:80:ae:4c:99:f5:05:5d:49:b2:
         db:ef:ec:ae:8d:f4:ef:72:90:13:16:53:73:9b:05:49:5b:d9:
         e7:cf:a4:f3:6a:fb:6c:6e:3f:00:03:42:7c:88:ec:77:2c:47:
         70:e0:3b:98:9c:8a:90:99:30:48:19:66:1e:9f:88:58:f8:2a:
         35:6f:c3:64:36:fd:d2:36:c9:9d:b5:17:81:9f:f3:29:0f:90:
         91:fa:49:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 10:25:05 2025 by rpki-client