Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
File:                     Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft (raw, json)
Hash identifier:          ZSRKBemSz9qow562CO0J4+5Zq0lPbHzlwkmtF4Wk5JE=
Subject key identifier:   84:83:1A:6A:CD:37:9C:4D:12:1D:49:A5:28:59:CF:BA:74:1E:D6:CC
Authority key identifier: 46:3C:7A:F3:3B:D2:F1:4A:FD:4D:2A:34:5D:9C:31:81:7C:78:73:7C
Certificate issuer:       /CN=F36C29E6AF/serialNumber=463C7AF33BD2F14AFD4D2A345D9C31817C78737C
Certificate serial:       24
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
Manifest number:          24
Signing time:             Thu 03 Jul 2025 05:22:06 +0000
Manifest this update:     Thu 03 Jul 2025 05:22:05 +0000
Manifest next update:     Sat 05 Jul 2025 05:22:05 +0000
Files and hashes:         1: Rjx68zvS8Ur9TSo0XZwxgXx4c3w.crl (hash: 0DA7TxuYJ1AmAGEZzd961IdhtQOzlkI/T26D7nUt5V8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 05:22:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C29E6AF, serialNumber=463C7AF33BD2F14AFD4D2A345D9C31817C78737C
        Validity
            Not Before: Jul  3 05:22:05 2025 GMT
            Not After : Jul  5 05:22:05 2025 GMT
        Subject: CN=6866137e-8fc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:01:8f:79:92:cc:56:4a:f5:23:56:3f:19:d4:
                    5f:8d:49:55:f3:96:40:1b:21:f6:8d:7c:e3:d1:d3:
                    58:a6:da:55:72:a7:be:a9:49:3b:fa:b5:02:45:1a:
                    99:58:55:93:54:7c:b5:13:98:f6:d9:aa:90:b8:df:
                    9b:29:5b:7d:3e:02:98:b9:f4:84:14:7d:cc:de:26:
                    6c:9b:c0:84:aa:8e:e3:7c:f0:c1:ba:b3:cd:02:78:
                    78:42:57:7c:0a:ef:d4:c7:b0:83:67:79:c3:46:89:
                    78:f1:d6:e5:fe:6a:b1:14:af:9c:8c:d1:3f:a2:6f:
                    e5:eb:54:73:3e:ac:db:29:15:ce:ba:3a:f0:77:fe:
                    5d:35:b1:4a:34:c7:4e:9d:04:ab:ef:e5:1f:67:6f:
                    4e:f1:ad:9a:63:96:b2:ac:37:7b:69:4f:4c:16:99:
                    f6:bf:47:ed:06:75:a0:24:47:a8:83:53:13:15:11:
                    13:fc:11:3d:c6:02:de:78:41:d3:46:f9:d4:39:e1:
                    36:32:67:50:0a:87:54:80:a4:1a:18:d9:00:47:3d:
                    58:16:ab:54:2f:f3:d4:58:d4:c0:d5:7d:21:b4:bf:
                    55:5b:65:2c:d6:94:9c:74:ef:a5:ec:a6:68:78:16:
                    a0:8f:28:14:9c:05:d3:97:53:2b:d5:a8:11:a0:72:
                    df:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:83:1A:6A:CD:37:9C:4D:12:1D:49:A5:28:59:CF:BA:74:1E:D6:CC
            X509v3 Authority Key Identifier:
                keyid:46:3C:7A:F3:3B:D2:F1:4A:FD:4D:2A:34:5D:9C:31:81:7C:78:73:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C29E6/BD45789E3D7011F08FB292D3DAE4EC9C/Rjx68zvS8Ur9TSo0XZwxgXx4c3w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:bd:8a:ee:f8:20:43:55:eb:dd:6b:4d:98:4d:fe:17:32:d0:
         1e:20:1c:70:bf:84:80:cf:04:95:cc:d4:ff:4d:24:56:b7:51:
         31:fe:bc:d6:e0:fd:da:12:5c:05:7f:92:1a:92:12:c6:e1:de:
         a0:44:12:96:e0:6c:5c:74:db:60:64:ba:19:6f:14:33:ae:32:
         98:5b:bb:30:ad:e6:da:f7:cc:a4:91:e3:db:39:87:63:ee:93:
         02:d6:3a:46:12:24:b7:44:3a:37:1a:72:8f:fd:78:a1:5f:30:
         72:fe:93:e7:e1:34:1f:e1:d7:5d:82:71:16:f8:68:d2:6c:a2:
         82:f0:f5:6e:95:c6:a5:7c:01:12:26:02:1e:d3:79:84:9a:fb:
         69:3d:0b:0d:aa:2f:94:78:0e:2a:86:ea:c4:4e:ea:c8:69:1c:
         66:9e:84:52:e1:81:dd:ea:04:ab:75:1a:df:6c:03:e1:b2:57:
         e6:25:05:8c:6e:27:31:2e:29:1c:2b:15:19:f0:49:ea:c5:bc:
         49:cf:95:54:44:1e:94:0a:26:95:b4:b1:ef:95:7d:35:ef:21:
         58:74:4f:33:00:26:16:aa:50:44:07:f7:9a:3c:2b:fc:e7:3e:
         9b:35:54:d6:b9:bd:43:af:f8:52:0b:de:15:37:2b:57:12:e8:
         1e:5e:4f:79
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBJDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
MjlFNkFGMTEwLwYDVQQFEyg0NjNDN0FGMzNCRDJGMTRBRkQ0RDJBMzQ1RDlDMzE4
MTdDNzg3MzdDMB4XDTI1MDcwMzA1MjIwNVoXDTI1MDcwNTA1MjIwNVowGDEWMBQG
A1UEAxMNNjg2NjEzN2UtOGZjMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMMBj3mSzFZK9SNWPxnUX41JVfOWQBsh9o1849HTWKbaVXKnvqlJO/q1AkUa
mVhVk1R8tROY9tmqkLjfmylbfT4CmLn0hBR9zN4mbJvAhKqO43zwwbqzzQJ4eEJX
fArv1Mewg2d5w0aJePHW5f5qsRSvnIzRP6Jv5etUcz6s2ykVzro68Hf+XTWxSjTH
Tp0Eq+/lH2dvTvGtmmOWsqw3e2lPTBaZ9r9H7QZ1oCRHqINTExURE/wRPcYC3nhB
00b51DnhNjJnUAqHVICkGhjZAEc9WBarVC/z1FjUwNV9IbS/VVtlLNaUnHTvpeym
aHgWoI8oFJwF05dTK9WoEaBy3xsCAwEAAaOCArgwggK0MB0GA1UdDgQWBBSEgxpq
zTecTRIdSaUoWc+6dB7WzDAfBgNVHSMEGDAWgBRGPHrzO9LxSv1NKjRdnDGBfHhz
fDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QzI5RTYvQkQ0NTc4OUUzRDcwMTFGMDhGQjI5MkQzREFFNEVDOUMvUmp4Njh6
dlM4VXI5VFNvMFhad3hnWHg0YzN3LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvUmp4Njh6dlM4VXI5VFNvMFhad3hnWHg0YzN3LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZDMjlFNi9CRDQ1Nzg5RTNENzAxMUYwOEZCMjkyRDNEQUU0
RUM5Qy9Sang2OHp2UzhVcjlUU28wWFp3eGdYeDRjM3cubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAIq9iu74IENV691rTZhN/hcy0B4gHHC/
hIDPBJXM1P9NJFa3UTH+vNbg/doSXAV/khqSEsbh3qBEEpbgbFx022BkuhlvFDOu
MphbuzCt5tr3zKSR49s5h2PukwLWOkYSJLdEOjcaco/9eKFfMHL+k+fhNB/h112C
cRb4aNJsooLw9W6VxqV8ARImAh7TeYSa+2k9Cw2qL5R4DiqG6sRO6shpHGaehFLh
gd3qBKt1Gt9sA+GyV+YlBYxuJzEuKRwrFRnwSerFvEnPlVREHpQKJpW0se+VfTXv
IVh0TzMAJhaqUEQH95o8K/znPps1VNa5vUOv+FIL3hU3K1cS6B5eT3k=
-----END CERTIFICATE-----
Generated at Thu Jul 3 20:07:24 2025 by rpki-client