Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
File:                     LO0lCJLZepCqEzI6yk5F0lF2klg.mft (raw, json)
Hash identifier:          b4NkOLETWyzfD/Lj+dAnG3Aj6RIKQuh3UeUMKDHoG4M=
Subject key identifier:   55:97:FB:B3:80:0B:29:82:E6:75:51:F1:BB:F3:AB:19:47:54:0A:30
Authority key identifier: 2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58
Certificate issuer:       /CN=F36B4580AF/serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
Certificate serial:       01B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
Manifest number:          01B6
Signing time:             Tue 13 May 2025 04:30:49 +0000
Manifest this update:     Tue 13 May 2025 04:30:48 +0000
Manifest next update:     Thu 15 May 2025 04:30:48 +0000
Files and hashes:         1: LO0lCJLZepCqEzI6yk5F0lF2klg.crl (hash: /G45f/7sAyUuM/jcBa9O9kOpkYmLaB/s9UIzC23DALk=)
                          2: 33CDD534E21811EEADAEADC1775412E6.roa (hash: zBCcaHSSJiFVaqIDbPbS61APz7NmOnVb/26SMlWLcvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 May 2025 04:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4580AF, serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
        Validity
            Not Before: May 13 04:30:48 2025 GMT
            Not After : May 15 04:30:48 2025 GMT
        Subject: CN=6822caf9-cd34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9d:2a:97:ae:20:74:76:ef:d3:0a:f4:50:8d:
                    07:17:1a:78:19:c6:26:81:f3:c0:27:fe:ac:cc:97:
                    2c:03:34:79:d0:0a:b3:2e:db:a2:8a:96:1b:be:5f:
                    eb:93:ec:5c:d8:f1:1e:f5:45:43:db:f6:99:34:53:
                    25:f4:0b:53:6d:f9:e1:ec:f7:2a:9e:74:0b:45:20:
                    2d:4b:e4:b2:fd:d6:ac:f3:09:de:27:f7:88:c7:56:
                    9f:4a:49:28:a1:cc:38:17:67:6c:bc:6f:64:32:ac:
                    7b:8a:19:a0:07:f1:e6:bb:94:5e:23:17:9a:82:29:
                    88:d7:d0:db:4b:e6:62:0c:32:d5:07:8d:59:3a:04:
                    14:3e:5f:4e:0b:44:88:e0:c0:aa:a7:46:b3:34:14:
                    7f:d8:f1:90:2b:d5:03:01:a4:59:12:90:7d:7e:8a:
                    99:8d:23:d8:90:14:e4:7b:bf:f3:25:cd:ab:83:6c:
                    f0:ea:ae:43:20:bd:71:b0:de:1c:80:98:e7:79:ab:
                    25:fe:32:9a:e4:b9:67:76:6e:81:a0:56:47:e3:ea:
                    3c:3b:c7:64:d7:13:e1:1d:df:91:53:a1:05:0a:54:
                    37:b0:5b:65:96:2c:5f:49:0a:12:b7:07:68:4e:0c:
                    10:2b:a6:99:1e:78:90:a0:31:e4:2a:63:a8:fb:78:
                    e2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:97:FB:B3:80:0B:29:82:E6:75:51:F1:BB:F3:AB:19:47:54:0A:30
            X509v3 Authority Key Identifier:
                keyid:2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:4d:10:a0:1b:91:78:d5:74:a4:2a:5e:ef:7c:58:f2:8b:90:
         62:58:1b:78:fe:0b:0f:9e:99:a2:ae:d8:c4:91:3f:c5:6e:a8:
         50:76:0a:da:40:7d:cb:5f:37:5a:a6:b2:c7:df:9b:6b:7f:10:
         c6:5c:7a:3b:ba:da:7f:03:e7:5e:d8:03:15:2d:12:94:d7:5c:
         41:1d:2e:09:55:8a:43:b5:a8:bf:61:3c:f9:48:ba:33:70:9b:
         08:d3:21:0f:a8:95:01:95:21:34:70:30:25:7f:79:82:02:76:
         fd:29:58:39:f6:e6:ed:b4:55:3c:e4:e3:b7:27:7e:98:77:39:
         5e:41:7b:93:32:45:05:63:7e:74:4c:3d:87:2f:98:bf:13:e9:
         4c:98:4b:6e:b8:16:d8:7b:62:e9:92:88:6e:e6:12:a0:90:d4:
         48:fe:06:29:07:b8:0f:09:f9:01:7d:22:f0:cd:65:69:5c:ae:
         66:32:ce:3b:a2:de:ae:e7:f0:b8:97:46:1f:be:51:bd:98:67:
         c4:0d:18:b5:fe:ab:b1:81:69:82:86:4f:c5:15:67:0b:32:d6:
         a4:4f:5f:f6:11:00:03:fb:a3:15:fb:79:f6:b0:89:14:8b:8e:
         ad:4b:5a:d7:96:e6:17:53:d6:11:f9:25:1f:dc:66:db:e4:bc:
         cb:9a:65:ef
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjQ1ODBBRjExMC8GA1UEBRMoMkNFRDI1MDg5MkQ5N0E5MEFBMTMzMjNBQ0E0RTQ1
RDI1MTc2OTI1ODAeFw0yNTA1MTMwNDMwNDhaFw0yNTA1MTUwNDMwNDhaMBgxFjAU
BgNVBAMTDTY4MjJjYWY5LWNkMzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUnSqXriB0du/TCvRQjQcXGngZxiaB88An/qzMlywDNHnQCrMu26KKlhu+
X+uT7FzY8R71RUPb9pk0UyX0C1Nt+eHs9yqedAtFIC1L5LL91qzzCd4n94jHVp9K
SSihzDgXZ2y8b2QyrHuKGaAH8ea7lF4jF5qCKYjX0NtL5mIMMtUHjVk6BBQ+X04L
RIjgwKqnRrM0FH/Y8ZAr1QMBpFkSkH1+ipmNI9iQFOR7v/MlzauDbPDqrkMgvXGw
3hyAmOd5qyX+MprkuWd2boGgVkfj6jw7x2TXE+Ed35FToQUKVDewW2WWLF9JChK3
B2hODBArppkeeJCgMeQqY6j7eOL/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUVZf7
s4ALKYLmdVHxu/OrGUdUCjAwHwYDVR0jBBgwFoAULO0lCJLZepCqEzI6yk5F0lF2
klgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI0NTgwL0UxOUI3QjIyRTIxNzExRUVBMThFOEFCRjc3NTQxMkU2L0xPMGxD
SkxaZXBDcUV6STZ5azVGMGxGMmtsZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xPMGxDSkxaZXBDcUV6STZ5azVGMGxGMmtsZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjQ1ODAvRTE5QjdCMjJFMjE3MTFFRUExOEU4QUJGNzc1
NDEyRTYvTE8wbENKTFplcENxRXpJNnlrNUYwbEYya2xnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAJTRCgG5F41XSkKl7vfFjyi5BiWBt4
/gsPnpmirtjEkT/FbqhQdgraQH3LXzdaprLH35trfxDGXHo7utp/A+de2AMVLRKU
11xBHS4JVYpDtai/YTz5SLozcJsI0yEPqJUBlSE0cDAlf3mCAnb9KVg59ubttFU8
5OO3J36YdzleQXuTMkUFY350TD2HL5i/E+lMmEtuuBbYe2Lpkohu5hKgkNRI/gYp
B7gPCfkBfSLwzWVpXK5mMs47ot6u5/C4l0YfvlG9mGfEDRi1/quxgWmChk/FFWcL
MtakT1/2EQAD+6MV+3n2sIkUi46tS1rXluYXU9YR+SUf3Gbb5LzLmmXv
-----END CERTIFICATE-----
Generated at Wed May 14 04:31:32 2025 by rpki-client