Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
File:                     zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft (raw, json)
Hash identifier:          cHP74Rtiu6yET50xTgcXeoEEAUCDDr0omdPn8NrgTa8=
Subject key identifier:   D4:DC:B6:08:B8:05:F4:9E:0A:E5:97:0B:5E:A4:2A:F9:CD:CB:BC:77
Authority key identifier: CC:2C:DE:04:D3:D4:36:1E:84:44:E2:AE:5E:42:F0:ED:F6:22:DC:E4
Certificate issuer:       /CN=F36C3DC5AF/serialNumber=CC2CDE04D3D4361E8444E2AE5E42F0EDF622DCE4
Certificate serial:       06EC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
Manifest number:          06EB
Signing time:             Sat 23 Aug 2025 02:03:18 +0000
Manifest this update:     Sat 23 Aug 2025 02:03:17 +0000
Manifest next update:     Mon 25 Aug 2025 02:03:17 +0000
Files and hashes:         1: zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl (hash: gjn+X46R48mGHSOtDOJKO9SSvtRvNW11WyJCslPZXfA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1772 (0x6ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3DC5AF, serialNumber=CC2CDE04D3D4361E8444E2AE5E42F0EDF622DCE4
        Validity
            Not Before: Aug 23 02:03:17 2025 GMT
            Not After : Aug 25 02:03:17 2025 GMT
        Subject: CN=68a92166-fea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:53:8c:60:18:52:8d:22:32:99:18:22:99:c8:
                    85:3a:5d:2b:7a:68:c4:36:71:b5:6c:52:60:95:84:
                    fd:d1:b4:ce:40:0d:2f:8f:43:fd:35:b8:31:34:98:
                    b5:94:eb:3f:6b:dd:b6:fc:95:70:56:b0:9f:54:74:
                    15:59:11:45:ba:c5:ef:b8:a0:26:3f:8e:c9:03:9d:
                    89:c4:30:93:50:53:69:d3:4a:5c:a8:fd:cc:6c:ba:
                    c1:4e:c9:1d:ed:22:eb:b6:e3:9d:1d:25:f1:94:af:
                    39:8e:ac:a0:b1:3b:08:87:20:9a:50:ed:6a:57:e4:
                    77:49:be:50:3a:5c:4d:3e:5c:52:4c:84:01:44:0f:
                    62:ce:26:9a:89:e9:48:d5:41:ae:dc:e0:58:f4:58:
                    86:38:6c:d5:26:5d:f2:a3:7a:c9:01:24:d6:52:ed:
                    96:b0:40:b8:9f:b3:e7:18:f2:f2:e5:f7:d1:90:a8:
                    41:05:64:20:17:ce:b2:97:ec:16:ea:40:ad:97:a4:
                    22:e8:1b:70:b9:4f:82:80:e1:10:8b:b7:7a:15:ba:
                    6e:d2:52:46:40:60:90:45:44:52:5c:9b:03:da:31:
                    99:ce:db:ec:b2:22:59:49:bd:57:18:35:64:b2:10:
                    70:09:89:13:da:66:1b:eb:03:af:c7:51:2f:2f:6b:
                    19:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DC:B6:08:B8:05:F4:9E:0A:E5:97:0B:5E:A4:2A:F9:CD:CB:BC:77
            X509v3 Authority Key Identifier:
                keyid:CC:2C:DE:04:D3:D4:36:1E:84:44:E2:AE:5E:42:F0:ED:F6:22:DC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:df:a0:5b:8d:94:4e:85:a3:23:52:1e:03:2f:89:54:43:ba:
         5c:37:65:66:f7:e9:89:b3:a1:d9:b7:c7:f4:94:51:75:75:48:
         15:7b:b9:22:a0:3e:62:3b:0a:8d:e9:bb:b5:75:7e:fd:6d:a8:
         71:65:b3:cc:37:1d:59:83:31:26:e4:95:20:d7:20:aa:35:08:
         f2:3c:ab:b2:33:bc:1d:5b:ff:ef:5d:c5:55:d3:5c:83:de:82:
         d2:19:c1:45:44:2b:39:20:f8:a3:a5:8b:df:9f:19:22:a0:59:
         7c:57:61:1e:12:b0:e3:8b:77:dd:11:03:7f:3a:42:51:52:52:
         a7:06:1c:94:e1:c1:ec:e6:13:8a:d1:81:88:53:c3:99:52:bf:
         7e:0e:5c:7d:8d:1c:87:45:69:12:4c:dd:9a:4e:f9:24:97:a3:
         cd:74:d6:2a:ef:f6:ea:c6:c3:10:7d:2a:bf:d2:39:19:e4:ca:
         ec:7b:51:41:c6:de:0c:78:8b:3b:e6:9f:a6:fe:55:d4:0a:fc:
         0d:d5:70:a7:82:c3:e6:0c:56:00:e6:8c:0a:7c:d1:0f:cf:45:
         ce:c7:7f:dd:c5:39:4e:e8:ff:cb:c8:f3:d1:5c:7b:08:d6:e2:
         6b:54:19:57:41:0a:c5:40:05:eb:c0:43:cb:c1:41:90:42:31:
         ab:a8:29:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:19:17 2025 by rpki-client