Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
File:                     CzGZramPk056KV0rqhPAxHetjyU.mft (raw, json)
Hash identifier:          sc0IXC48VJgEsDcRUufRMq8B9DS3YpgqF4vysmUpcmU=
Subject key identifier:   5F:9A:B5:5C:38:14:A8:19:34:7C:5A:7F:9C:A2:02:82:3A:65:11:AA
Authority key identifier: 0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
Certificate issuer:       /CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Certificate serial:       0418
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
Manifest number:          0417
Signing time:             Sat 23 Aug 2025 03:17:32 +0000
Manifest this update:     Sat 23 Aug 2025 03:17:31 +0000
Manifest next update:     Mon 25 Aug 2025 03:17:31 +0000
Files and hashes:         1: CzGZramPk056KV0rqhPAxHetjyU.crl (hash: ZE6elPWEYq+PP8Z5448vJjg8zTrsyEWUDqf/A8asOko=)
                          2: 5A992ACC659811ED9CE9B7C8F1222468.roa (hash: NjQvSWJBVOMZRY/QCKY/uG+2g+UAexC0q1YfjK9ZI0s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA64DAF, serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
        Validity
            Not Before: Aug 23 03:17:31 2025 GMT
            Not After : Aug 25 03:17:31 2025 GMT
        Subject: CN=68a932cb-b55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ad:25:52:c3:e8:de:98:46:32:5b:21:88:1b:
                    62:c8:0c:15:34:02:58:0c:7c:9e:d8:d3:50:18:ec:
                    89:2b:4a:df:9f:43:f2:52:c0:05:78:1c:da:83:7b:
                    ed:3b:35:f9:a9:49:c2:52:7f:81:f9:5a:21:0c:b1:
                    8e:95:38:93:0b:18:b6:60:e9:82:31:9b:4a:ec:32:
                    eb:c0:c4:72:a9:03:2e:45:3b:55:bf:28:be:aa:db:
                    92:a8:ac:8f:b5:04:3b:06:1d:95:d6:45:eb:c3:b2:
                    1c:6b:cb:2f:81:7f:45:e4:71:a4:ed:94:b1:f1:b9:
                    77:7b:0b:5d:c3:33:8e:1d:12:13:a8:52:12:e2:2d:
                    74:03:3e:10:a6:92:a3:6f:f1:f2:3f:60:de:60:49:
                    87:73:f1:98:00:12:f8:29:06:3d:db:40:8e:81:0e:
                    54:65:c8:fb:07:fb:d0:7e:89:e8:cd:c2:80:8d:f7:
                    81:44:fe:f6:c5:80:7c:5f:5a:b5:6e:fb:9c:3f:bd:
                    70:63:fa:8b:d0:88:80:0e:92:eb:e4:7e:89:99:0d:
                    e7:44:ac:9c:6b:5d:1f:86:0f:60:90:27:b3:9f:cb:
                    84:89:e9:9e:72:9e:bf:8d:25:96:5f:58:75:58:d3:
                    93:55:ab:bc:cd:ff:4a:f7:d3:c5:c0:e7:97:54:dc:
                    02:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:9A:B5:5C:38:14:A8:19:34:7C:5A:7F:9C:A2:02:82:3A:65:11:AA
            X509v3 Authority Key Identifier:
                keyid:0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:a7:c0:a7:bb:ad:46:3c:0d:e2:6a:84:91:38:c3:44:e3:b4:
         51:57:26:e3:2d:ca:08:fa:82:8a:b9:82:3c:06:e6:eb:c4:68:
         98:2a:26:d7:b5:ac:cf:74:b1:09:58:c4:72:f3:0b:b5:5c:4c:
         8c:c3:df:70:2c:ec:00:de:5b:ce:ca:48:7a:6d:e1:ae:d2:7e:
         9b:25:49:97:93:23:81:e8:6a:0b:c0:df:90:cd:59:0d:39:ed:
         18:f1:b3:f3:b4:d1:5b:ad:3a:48:72:af:06:e4:aa:f7:9b:16:
         dc:13:34:1e:0b:52:67:9b:99:e7:b1:0d:b1:0e:ec:86:56:b3:
         95:8f:7c:29:2b:5a:0c:bd:d2:7e:74:e5:04:a0:14:ed:12:63:
         59:8f:bd:db:e4:47:82:0a:3f:01:0c:8f:e3:11:13:26:88:3c:
         03:3a:8f:ed:6c:c4:e0:34:7f:9b:4b:6c:a2:61:4c:99:2a:40:
         2f:5e:0d:50:91:2f:d1:e8:2f:ea:10:b3:24:0a:d3:fe:47:63:
         69:8d:dc:44:3b:38:5c:f5:af:dd:7e:d0:21:9a:23:cb:2f:be:
         4c:a5:91:12:c6:cf:ae:83:5f:77:c8:aa:74:b0:67:b1:4c:9f:
         93:50:95:5f:b1:69:b5:7d:c6:e9:96:b6:56:5b:a3:ca:52:77:
         80:b1:d5:12
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBBgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkE2NERBRjExMC8GA1UEBRMoMEIzMTk5QURBOThGOTM0RTdBMjk1RDJCQUExM0Mw
QzQ3N0FEOEYyNTAeFw0yNTA4MjMwMzE3MzFaFw0yNTA4MjUwMzE3MzFaMBgxFjAU
BgNVBAMTDTY4YTkzMmNiLWI1NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCrSVSw+jemEYyWyGIG2LIDBU0AlgMfJ7Y01AY7IkrSt+fQ/JSwAV4HNqD
e+07NfmpScJSf4H5WiEMsY6VOJMLGLZg6YIxm0rsMuvAxHKpAy5FO1W/KL6q25Ko
rI+1BDsGHZXWRevDshxryy+Bf0XkcaTtlLHxuXd7C13DM44dEhOoUhLiLXQDPhCm
kqNv8fI/YN5gSYdz8ZgAEvgpBj3bQI6BDlRlyPsH+9B+iejNwoCN94FE/vbFgHxf
WrVu+5w/vXBj+ovQiIAOkuvkfomZDedErJxrXR+GD2CQJ7Ofy4SJ6Z5ynr+NJZZf
WHVY05NVq7zN/0r308XA55dU3AJrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUX5q1
XDgUqBk0fFp/nKICgjplEaowHwYDVR0jBBgwFoAUCzGZramPk056KV0rqhPAxHet
jyUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJBNjRELzkzRDI3MjBFNjU5NzExRUQ5QTdDQjhDNkYxMjIyNDY4L0N6R1py
YW1QazA1NktWMHJxaFBBeEhldGp5VS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0N6R1pyYW1QazA1NktWMHJxaFBBeEhldGp5VS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkE2NEQvOTNEMjcyMEU2NTk3MTFFRDlBN0NCOEM2RjEy
MjI0NjgvQ3pHWnJhbVBrMDU2S1YwcnFoUEF4SGV0anlVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8p8Cnu61GPA3iaoSROMNE47RRVybj
LcoI+oKKuYI8BubrxGiYKibXtazPdLEJWMRy8wu1XEyMw99wLOwA3lvOykh6beGu
0n6bJUmXkyOB6GoLwN+QzVkNOe0Y8bPztNFbrTpIcq8G5Kr3mxbcEzQeC1Jnm5nn
sQ2xDuyGVrOVj3wpK1oMvdJ+dOUEoBTtEmNZj73b5EeCCj8BDI/jERMmiDwDOo/t
bMTgNH+bS2yiYUyZKkAvXg1QkS/R6C/qELMkCtP+R2NpjdxEOzhc9a/dftAhmiPL
L75MpZESxs+ug193yKp0sGexTJ+TUJVfsWm1fcbplrZWW6PKUneAsdUS
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:18:55 2025 by rpki-client