Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
File:                     ZsmzRf1S4DCcordufO0LUGyNAZs.mft (raw, json)
Hash identifier:          P+q6wjIcVBa6QVju1DZNHCGqzedE26sfrpuiNtFsFs8=
Subject key identifier:   A2:A7:D9:DC:D3:D4:A2:61:62:96:B1:70:BA:AF:C0:EA:74:E6:4D:BC
Authority key identifier: 66:C9:B3:45:FD:52:E0:30:9C:A2:B7:6E:7C:ED:0B:50:6C:8D:01:9B
Certificate issuer:       /CN=F36A2F84AF/serialNumber=66C9B345FD52E0309CA2B76E7CED0B506C8D019B
Certificate serial:       05F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
Manifest number:          05F7
Signing time:             Sat 23 Aug 2025 02:24:57 +0000
Manifest this update:     Sat 23 Aug 2025 02:24:56 +0000
Manifest next update:     Mon 25 Aug 2025 02:24:56 +0000
Files and hashes:         1: ZsmzRf1S4DCcordufO0LUGyNAZs.crl (hash: lMeb2gogfq1KwQgZ2BEXxtCHU5026mxHTpLKO0v8rKc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1527 (0x5f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2F84AF, serialNumber=66C9B345FD52E0309CA2B76E7CED0B506C8D019B
        Validity
            Not Before: Aug 23 02:24:56 2025 GMT
            Not After : Aug 25 02:24:56 2025 GMT
        Subject: CN=68a92679-8715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:34:a5:e9:d3:14:39:ae:28:c7:9a:60:3e:
                    37:8c:ea:5d:11:08:c5:c5:3f:58:a3:f1:ec:78:08:
                    31:2d:f2:bc:a5:73:c0:ed:df:fe:27:2e:08:44:80:
                    6d:4a:9b:74:73:55:e0:63:bc:8d:e9:da:64:a8:40:
                    31:c7:8b:ae:64:78:6f:6b:74:2b:d4:8e:b9:ff:df:
                    3e:05:f2:61:61:83:5b:a8:5f:8d:20:38:16:d4:67:
                    60:40:d5:e0:77:54:8e:8d:69:04:28:32:d8:5a:29:
                    83:1d:89:f1:d2:52:1f:0f:74:f1:93:6d:dd:2c:9f:
                    49:01:38:eb:de:f8:68:eb:35:d1:01:10:b2:1b:49:
                    6a:a2:53:d8:bb:9d:05:6e:44:89:7e:12:92:62:e7:
                    ee:27:70:ec:ea:99:48:51:50:07:46:45:0a:13:b1:
                    3b:dd:35:b4:ce:c2:7e:50:c7:2d:f5:b7:33:c3:dc:
                    53:98:bb:ef:56:2a:3d:f8:45:ac:be:8e:22:0f:3f:
                    3e:97:32:6d:d1:f0:13:7c:22:cf:c8:bf:ef:3e:4e:
                    ed:55:3d:0a:ea:3b:bb:dc:4f:84:ba:6e:a9:f7:a2:
                    a0:6a:26:bf:7b:50:43:b7:e6:1b:0b:8a:0b:81:67:
                    c8:54:f7:77:c9:26:67:23:a2:0a:58:bd:b3:68:51:
                    d4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:A7:D9:DC:D3:D4:A2:61:62:96:B1:70:BA:AF:C0:EA:74:E6:4D:BC
            X509v3 Authority Key Identifier:
                keyid:66:C9:B3:45:FD:52:E0:30:9C:A2:B7:6E:7C:ED:0B:50:6C:8D:01:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:df:d4:98:6e:b7:2f:a9:ac:ef:4c:f1:1c:db:87:c7:25:ca:
         d7:59:0f:c7:7a:9b:32:3b:a5:da:e7:28:da:70:51:3c:cd:0a:
         b5:92:4d:18:d1:bf:a0:8b:5a:46:ca:dc:ae:2c:8b:ff:5b:9c:
         43:f0:be:e2:d8:5a:aa:fc:98:34:45:cf:13:12:90:3e:29:ba:
         2c:d2:6b:0f:19:da:f6:24:c6:97:fb:3a:e6:00:d9:1d:9d:25:
         08:98:d0:f5:ee:c9:dc:0b:cc:ce:0a:e4:50:42:ad:bf:91:cf:
         25:2e:6f:e2:0f:d7:90:6b:d6:33:80:f2:d9:99:1f:f1:54:94:
         0b:7b:c9:de:39:57:72:07:2b:30:c2:62:89:c1:8e:86:9e:10:
         d7:9b:91:09:92:d9:6a:71:37:6e:8e:37:8d:dc:07:f6:71:b3:
         ca:03:cd:86:f2:1f:78:2c:f6:62:ed:eb:7e:40:01:10:1b:4f:
         2e:92:d6:39:d7:b2:c1:73:d7:84:f7:db:66:cc:7d:6f:3f:ac:
         5e:5e:51:fb:e7:70:ff:89:b0:c3:bd:37:3e:50:bd:4c:fe:fc:
         a2:92:aa:ad:5f:28:9e:64:9c:3a:cf:43:97:42:a6:4f:9f:1d:
         2a:6d:b6:cd:2e:8a:49:5a:83:c1:de:80:e8:81:3e:fe:bf:8e:
         6f:b6:3b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:02:19 2025 by rpki-client