Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.mft
File:                     jdcjjwE3sVj1PHvg_w0uWBnz638.mft (raw, json)
Hash identifier:          gts83GFWoxhncfUN6x4wSftuCuMS02apj7xZmIOPmP0=
Subject key identifier:   91:B3:F3:A8:E1:5E:C2:C2:A3:53:08:87:7E:AD:17:A3:07:5E:79:D0
Authority key identifier: 8D:D7:23:8F:01:37:B1:58:F5:3C:7B:E0:FF:0D:2E:58:19:F3:EB:7F
Certificate issuer:       /CN=F36A15D5AF/serialNumber=8DD7238F0137B158F53C7BE0FF0D2E5819F3EB7F
Certificate serial:       086B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jdcjjwE3sVj1PHvg_w0uWBnz638.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.mft
Manifest number:          0869
Signing time:             Tue 13 May 2025 01:36:27 +0000
Manifest this update:     Tue 13 May 2025 01:36:26 +0000
Manifest next update:     Thu 15 May 2025 01:36:26 +0000
Files and hashes:         1: jdcjjwE3sVj1PHvg_w0uWBnz638.crl (hash: ecvLTAtV9ygk13Co6i6cRy3NpzQepAi78VF103nKA/o=)
                          2: 93BEE2E806AE11EA96835D44F8AEA228.roa (hash: ympYrU6cVzeM/Zo6Ql2gUr5WY/OKcA1alTUO/oYBqs8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jdcjjwE3sVj1PHvg_w0uWBnz638.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 May 2025 01:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2155 (0x86b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A15D5AF, serialNumber=8DD7238F0137B158F53C7BE0FF0D2E5819F3EB7F
        Validity
            Not Before: May 13 01:36:26 2025 GMT
            Not After : May 15 01:36:26 2025 GMT
        Subject: CN=6822a21b-1da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4c:d1:1f:60:14:e7:be:86:a0:58:f0:d6:b4:
                    11:a1:d1:67:b2:19:a5:8d:99:4e:b7:aa:12:1a:d4:
                    45:b2:e1:ed:a2:09:33:77:a6:d3:45:c5:56:84:b6:
                    02:a8:17:41:c5:e2:a7:68:40:dc:e6:b9:2d:47:b7:
                    72:65:6a:4a:f0:76:cc:6d:78:a4:b4:16:8a:95:ba:
                    04:9b:8a:59:b2:0a:20:93:93:39:13:52:8f:31:5b:
                    f2:c1:6c:72:ae:cc:77:a0:b6:d1:56:38:8d:e1:d6:
                    0d:c3:59:6a:e9:81:21:d4:e9:b4:4a:c5:ba:2d:04:
                    70:cd:b6:6f:6a:bb:3a:52:99:b1:47:18:d7:87:e8:
                    2a:ea:b9:79:c3:fa:cc:96:0c:00:3c:76:d1:d7:65:
                    f5:26:99:b9:ab:72:78:39:84:4b:64:15:b6:f0:49:
                    fe:aa:0e:11:f2:da:08:3f:8f:02:4a:80:e6:5c:4c:
                    d5:ef:8b:08:a7:9e:86:88:82:00:79:8b:c5:ef:dd:
                    79:13:fb:76:23:12:4d:17:07:ef:4e:30:f3:7f:7d:
                    03:2c:b8:c3:be:9a:ee:b6:8d:15:c3:be:8b:d0:6a:
                    a9:45:0f:09:16:0a:c3:90:4f:8f:6a:44:19:6d:81:
                    0b:72:8e:44:9d:ef:84:52:f6:11:de:49:45:2f:15:
                    6d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:B3:F3:A8:E1:5E:C2:C2:A3:53:08:87:7E:AD:17:A3:07:5E:79:D0
            X509v3 Authority Key Identifier:
                keyid:8D:D7:23:8F:01:37:B1:58:F5:3C:7B:E0:FF:0D:2E:58:19:F3:EB:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jdcjjwE3sVj1PHvg_w0uWBnz638.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e2:28:6f:55:0f:e2:5b:4b:52:4f:6e:89:46:32:b4:bf:e7:
         75:f0:10:a4:69:23:b7:6e:42:20:ae:06:3d:67:37:fc:54:89:
         e2:5e:87:02:d0:47:69:14:3d:a4:57:d0:10:65:df:85:80:58:
         fc:6f:fb:5a:d6:4e:20:54:a4:4f:a5:dc:f2:57:67:0e:4c:8c:
         5f:be:7e:a1:a9:f7:67:b9:6e:35:25:b6:8f:bd:50:97:b5:cc:
         de:02:29:84:d6:19:3c:20:5f:be:bd:c1:cd:a2:d5:f5:88:82:
         32:a9:97:a1:62:f6:8e:77:2b:62:66:75:b7:ee:a2:90:0e:3e:
         64:99:68:2d:5f:a1:a4:10:fc:19:eb:e1:d7:14:ed:24:fc:43:
         47:94:f8:15:af:86:91:ee:1b:d7:bb:76:b4:85:3d:fe:80:92:
         64:ab:af:46:1f:9b:b4:cc:70:ae:26:8b:28:ba:5b:b7:35:c8:
         9d:89:de:d6:58:4f:40:b9:43:f6:72:07:4b:9a:8b:18:11:15:
         11:5e:c7:fa:c3:62:84:de:a2:40:7c:9f:48:63:30:32:bb:03:
         02:98:8a:46:31:17:ad:b4:32:01:0f:e8:d8:ae:62:1c:04:19:
         d0:cf:c7:51:22:a6:b2:bc:6e:3c:cc:92:e5:60:aa:af:32:e2:
         5f:26:82:f5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCGswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTE1RDVBRjExMC8GA1UEBRMoOERENzIzOEYwMTM3QjE1OEY1M0M3QkUwRkYwRDJF
NTgxOUYzRUI3RjAeFw0yNTA1MTMwMTM2MjZaFw0yNTA1MTUwMTM2MjZaMBgxFjAU
BgNVBAMTDTY4MjJhMjFiLTFkYTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRTNEfYBTnvoagWPDWtBGh0WeyGaWNmU63qhIa1EWy4e2iCTN3ptNFxVaE
tgKoF0HF4qdoQNzmuS1Ht3JlakrwdsxteKS0FoqVugSbilmyCiCTkzkTUo8xW/LB
bHKuzHegttFWOI3h1g3DWWrpgSHU6bRKxbotBHDNtm9quzpSmbFHGNeH6CrquXnD
+syWDAA8dtHXZfUmmbmrcng5hEtkFbbwSf6qDhHy2gg/jwJKgOZcTNXviwinnoaI
ggB5i8Xv3XkT+3YjEk0XB+9OMPN/fQMsuMO+mu62jRXDvovQaqlFDwkWCsOQT49q
RBltgQtyjkSd74RS9hHeSUUvFW2jAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUkbPz
qOFewsKjUwiHfq0XowdeedAwHwYDVR0jBBgwFoAUjdcjjwE3sVj1PHvg/w0uWBnz
638wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExNUQ1L0Y2RjJBRjM2QzNFNTExRTk5REE1MEU3MEY4QUVBMjI4L2pkY2pq
d0Uzc1ZqMVBIdmdfdzB1V0JuejYzOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2pkY2pqd0Uzc1ZqMVBIdmdfdzB1V0JuejYzOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTE1RDUvRjZGMkFGMzZDM0U1MTFFOTlEQTUwRTcwRjhB
RUEyMjgvamRjamp3RTNzVmoxUEh2Z193MHVXQm56NjM4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBm4ihvVQ/iW0tST26JRjK0v+d18BCk
aSO3bkIgrgY9Zzf8VIniXocC0EdpFD2kV9AQZd+FgFj8b/ta1k4gVKRPpdzyV2cO
TIxfvn6hqfdnuW41JbaPvVCXtczeAimE1hk8IF++vcHNotX1iIIyqZehYvaOdyti
ZnW37qKQDj5kmWgtX6GkEPwZ6+HXFO0k/ENHlPgVr4aR7hvXu3a0hT3+gJJkq69G
H5u0zHCuJosoulu3Ncidid7WWE9AuUP2cgdLmosYERURXsf6w2KE3qJAfJ9IYzAy
uwMCmIpGMRettDIBD+jYrmIcBBnQz8dRIqayvG48zJLlYKqvMuJfJoL1
-----END CERTIFICATE-----
Generated at Tue May 13 11:55:04 2025 by rpki-client