Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft
File:                     UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft (raw, json)
Hash identifier:          uV7nyWSMsZMFAPCqzbYBfB9QisUiR0FpCQulrj3wlMY=
Subject key identifier:   8F:DE:DE:34:0C:59:A7:88:EE:F2:17:25:C4:E3:FD:A1:9A:24:38:8A
Authority key identifier: 53:36:D9:13:1D:82:8C:81:67:1C:26:C7:83:86:90:BB:9F:CC:C9:8F
Certificate issuer:       /CN=F36B09DCAF/serialNumber=5336D9131D828C81671C26C7838690BB9FCCC98F
Certificate serial:       0337
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UzbZEx2CjIFnHCbHg4aQu5_MyY8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft
Manifest number:          0336
Signing time:             Mon 12 May 2025 03:33:46 +0000
Manifest this update:     Mon 12 May 2025 03:33:45 +0000
Manifest next update:     Wed 14 May 2025 03:33:45 +0000
Files and hashes:         1: UzbZEx2CjIFnHCbHg4aQu5_MyY8.crl (hash: 2Sugs0a4snoemQRZTpW9XrUQnlQraCEKg4tW/+6WTzE=)
                          2: E8BD056CBE7611EDA48E6C9AF1222468.roa (hash: 3G5RKkTxRd00ttqtYAIBvcE2h9XaoJ7ML38raK/0k9M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UzbZEx2CjIFnHCbHg4aQu5_MyY8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 823 (0x337)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B09DCAF, serialNumber=5336D9131D828C81671C26C7838690BB9FCCC98F
        Validity
            Not Before: May 12 03:33:45 2025 GMT
            Not After : May 14 03:33:45 2025 GMT
        Subject: CN=68216c1a-db59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ab:1b:6b:8e:e7:c5:fb:39:c8:c9:a9:32:78:
                    db:cc:8c:e5:ec:91:0b:be:84:46:8c:fd:7e:45:75:
                    ae:69:3c:be:5c:92:d5:f0:5c:1b:d3:39:50:6f:d2:
                    f3:51:62:f3:38:5c:e5:df:41:8f:af:04:55:61:0e:
                    21:d4:27:b3:16:fb:0a:ad:cf:6d:f6:b1:79:39:59:
                    97:b2:13:ee:ec:7a:a6:94:17:3d:0b:31:e2:5c:4b:
                    30:bd:bc:9b:0c:34:ac:fa:4b:bd:90:f8:54:fa:5e:
                    5f:ec:ec:d4:3e:6f:d3:01:b1:ad:fe:a9:c4:29:e9:
                    5d:9a:46:38:5c:00:1a:9f:cb:42:af:a5:b5:2b:70:
                    0c:e1:cf:a9:7f:f3:9e:c9:69:62:bf:bd:6a:94:be:
                    26:56:04:68:0c:fa:48:b9:76:5b:2a:c7:06:24:84:
                    0b:56:6d:b2:f3:33:a8:8c:5a:5d:90:3d:04:60:97:
                    dc:0d:db:dd:f8:6c:2b:a8:47:42:14:df:e9:22:39:
                    ca:86:72:e7:23:65:82:5b:41:cb:17:fa:3e:1a:b4:
                    85:3d:2d:12:c0:e3:48:07:ab:65:69:91:38:d3:bf:
                    e2:15:72:66:d7:24:d6:08:c1:03:bc:21:d6:e5:42:
                    de:22:e2:9e:a6:8c:d7:77:84:99:20:0f:38:ab:33:
                    61:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DE:DE:34:0C:59:A7:88:EE:F2:17:25:C4:E3:FD:A1:9A:24:38:8A
            X509v3 Authority Key Identifier:
                keyid:53:36:D9:13:1D:82:8C:81:67:1C:26:C7:83:86:90:BB:9F:CC:C9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UzbZEx2CjIFnHCbHg4aQu5_MyY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:42:b1:87:29:08:a7:36:18:89:22:f8:2a:8b:7c:0b:ca:30:
         7d:bd:17:4a:10:0e:57:6f:34:1b:21:ba:9f:0b:47:ec:be:a7:
         ab:82:be:ae:85:23:a6:a4:be:de:85:b9:03:b5:48:57:c9:76:
         2e:88:82:b3:b9:61:9c:a8:3e:bd:78:ee:6e:54:8a:a0:b1:cd:
         19:4b:80:4d:e3:76:a3:7d:81:6a:1c:1e:a4:24:b8:2b:63:1a:
         9d:73:10:ef:18:ec:5e:4c:bb:45:76:80:16:b6:6a:99:d1:fc:
         78:b6:5e:b3:43:67:4e:3f:d1:d1:53:d4:1a:b0:f2:fe:f5:fa:
         9f:a1:86:ee:c9:84:f3:b4:b4:cd:99:6f:66:1e:16:2a:0b:c1:
         4d:77:be:0a:7e:ab:74:ee:21:0a:2d:0b:fe:2b:38:1e:f7:99:
         4f:5e:a6:0e:ec:cd:d1:e2:3b:39:69:53:59:65:3f:f4:ec:5f:
         13:4e:41:c3:68:7f:7d:47:09:f5:c8:64:df:ec:22:a5:8f:58:
         df:53:16:1a:9a:25:03:d8:3b:72:04:9e:4f:ed:66:95:60:c1:
         c9:6c:4d:cd:60:1f:77:10:58:42:88:21:cd:a9:17:3f:10:3d:
         08:8d:88:d3:b2:e9:ef:42:41:dd:5e:68:94:ef:44:a3:9e:2b:
         9c:a9:d8:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:28:05 2025 by rpki-client