Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
File:                     CzGZramPk056KV0rqhPAxHetjyU.mft (raw, json)
Hash identifier:          L3n9AqypFiqRIVU5xfB6+WnIt0NO7LaR3AS/aBN0Mgo=
Subject key identifier:   08:AC:31:EF:59:C4:2B:19:1E:DB:69:CC:30:45:FD:9B:E5:9C:8D:9F
Authority key identifier: 0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
Certificate issuer:       /CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Certificate serial:       03B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
Manifest number:          03AF
Signing time:             Mon 12 May 2025 03:19:45 +0000
Manifest this update:     Mon 12 May 2025 03:19:44 +0000
Manifest next update:     Wed 14 May 2025 03:19:44 +0000
Files and hashes:         1: CzGZramPk056KV0rqhPAxHetjyU.crl (hash: /l80lJhmtG2LK4UCou5eBvL2edbDH0xNbfBGdPbjKxk=)
                          2: 5A992ACC659811ED9CE9B7C8F1222468.roa (hash: NjQvSWJBVOMZRY/QCKY/uG+2g+UAexC0q1YfjK9ZI0s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 03:19:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 944 (0x3b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA64DAF, serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
        Validity
            Not Before: May 12 03:19:44 2025 GMT
            Not After : May 14 03:19:44 2025 GMT
        Subject: CN=682168d0-852f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e3:10:bb:77:43:e8:4a:4f:3b:08:bf:08:66:
                    3a:cd:7a:04:1c:27:2b:b8:bd:c1:83:78:55:09:35:
                    6d:62:4b:d0:59:e8:53:bf:96:24:9e:b8:6c:e9:85:
                    9e:2a:b0:fe:83:7c:8c:a8:55:cb:61:70:91:d3:c5:
                    70:26:ef:01:2e:e3:30:ee:e3:41:ea:f8:3f:04:7c:
                    91:d6:24:9c:93:e6:11:1b:ca:48:0f:c8:24:2f:9f:
                    ac:d2:87:96:3c:2e:b1:78:0d:b5:c3:56:c6:af:74:
                    83:9b:aa:c8:0f:4f:23:a8:d1:09:f3:8a:47:d0:89:
                    6f:c4:c6:90:aa:8d:5d:49:a4:e6:e5:30:fa:7b:5b:
                    29:c2:ad:20:ed:8e:6e:62:4c:20:f5:71:bb:d1:b0:
                    bf:24:c1:6d:20:1c:e9:7f:03:6b:2f:86:cc:11:63:
                    6f:79:4b:c2:28:4f:6f:f3:18:1d:78:5f:2e:51:c9:
                    42:b6:98:da:0c:64:dd:23:ca:c4:ef:b3:0f:e6:fc:
                    f5:13:8f:b6:17:13:94:8a:09:28:df:01:60:4f:ea:
                    39:a6:0d:e7:98:44:0f:43:13:85:0c:1a:77:a1:e6:
                    8c:87:37:56:aa:9b:67:19:90:8e:bd:92:27:83:42:
                    f1:fb:f9:5d:c6:c5:34:83:ab:97:4e:56:50:91:81:
                    78:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AC:31:EF:59:C4:2B:19:1E:DB:69:CC:30:45:FD:9B:E5:9C:8D:9F
            X509v3 Authority Key Identifier:
                keyid:0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:54:bc:5e:ac:b8:d8:4d:18:04:31:1b:76:74:5f:fe:7c:e6:
         7d:64:86:e3:1d:33:46:e7:0a:a4:87:f9:af:b4:97:6c:74:fd:
         29:0c:7f:7f:36:fc:32:cb:58:85:87:38:f0:2a:80:70:c6:e3:
         af:65:04:98:37:dd:53:e8:40:47:17:65:93:76:23:6f:8c:a9:
         2a:7c:eb:e6:ea:4c:e0:ad:56:0f:6b:d6:34:62:db:8f:73:64:
         7a:25:e7:bf:23:21:bf:65:ad:99:b8:ab:96:89:81:23:69:4d:
         ba:6e:fb:fa:b3:3f:76:34:e0:d9:d4:c6:2d:a4:11:25:59:cb:
         d0:16:c5:52:70:ea:3b:8e:46:d0:45:60:4a:b3:9c:c6:cd:b9:
         b2:52:ad:8b:6e:3c:ac:54:c8:9d:f5:37:79:e2:ef:8b:7b:65:
         54:3c:40:30:c4:53:1c:ad:2b:66:0d:6d:da:6c:db:2d:dc:00:
         1c:df:a5:9b:96:7e:69:fa:23:49:3e:62:ec:b1:44:0e:05:14:
         cc:f9:2d:e4:36:c7:8a:0c:12:be:a3:15:e9:a9:0a:c5:e4:20:
         ab:b3:9c:ce:28:54:1a:a7:d4:89:64:39:f4:54:44:ae:a2:1b:
         ff:97:0c:3a:5d:65:93:1a:35:e3:72:26:96:6f:bb:8f:a3:b2:
         49:1a:50:b3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA7AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkE2NERBRjExMC8GA1UEBRMoMEIzMTk5QURBOThGOTM0RTdBMjk1RDJCQUExM0Mw
QzQ3N0FEOEYyNTAeFw0yNTA1MTIwMzE5NDRaFw0yNTA1MTQwMzE5NDRaMBgxFjAU
BgNVBAMTDTY4MjE2OGQwLTg1MmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDe4xC7d0PoSk87CL8IZjrNegQcJyu4vcGDeFUJNW1iS9BZ6FO/liSeuGzp
hZ4qsP6DfIyoVcthcJHTxXAm7wEu4zDu40Hq+D8EfJHWJJyT5hEbykgPyCQvn6zS
h5Y8LrF4DbXDVsavdIObqsgPTyOo0QnzikfQiW/ExpCqjV1JpOblMPp7WynCrSDt
jm5iTCD1cbvRsL8kwW0gHOl/A2svhswRY295S8IoT2/zGB14Xy5RyUK2mNoMZN0j
ysTvsw/m/PUTj7YXE5SKCSjfAWBP6jmmDeeYRA9DE4UMGneh5oyHN1aqm2cZkI69
kieDQvH7+V3GxTSDq5dOVlCRgXjhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUCKwx
71nEKxke22nMMEX9m+WcjZ8wHwYDVR0jBBgwFoAUCzGZramPk056KV0rqhPAxHet
jyUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJBNjRELzkzRDI3MjBFNjU5NzExRUQ5QTdDQjhDNkYxMjIyNDY4L0N6R1py
YW1QazA1NktWMHJxaFBBeEhldGp5VS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0N6R1pyYW1QazA1NktWMHJxaFBBeEhldGp5VS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkE2NEQvOTNEMjcyMEU2NTk3MTFFRDlBN0NCOEM2RjEy
MjI0NjgvQ3pHWnJhbVBrMDU2S1YwcnFoUEF4SGV0anlVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJVLxerLjYTRgEMRt2dF/+fOZ9ZIbj
HTNG5wqkh/mvtJdsdP0pDH9/Nvwyy1iFhzjwKoBwxuOvZQSYN91T6EBHF2WTdiNv
jKkqfOvm6kzgrVYPa9Y0YtuPc2R6Jee/IyG/Za2ZuKuWiYEjaU26bvv6sz92NODZ
1MYtpBElWcvQFsVScOo7jkbQRWBKs5zGzbmyUq2LbjysVMid9Td54u+Le2VUPEAw
xFMcrStmDW3abNst3AAc36Wbln5p+iNJPmLssUQOBRTM+S3kNseKDBK+oxXpqQrF
5CCrs5zOKFQap9SJZDn0VESuohv/lww6XWWTGjXjciaWb7uPo7JJGlCz
-----END CERTIFICATE-----
Generated at Tue May 13 02:19:36 2025 by rpki-client