Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
File:                     ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft (raw, json)
Hash identifier:          X5mHKo8zxkbkhbUGMtSyDpBZTkToJxcUfzacF4F+Dsg=
Subject key identifier:   59:D3:7E:08:E2:DC:CA:3E:58:28:FE:BC:B1:49:EA:27:CF:96:DE:A6
Authority key identifier: 64:E4:8B:75:E2:16:74:F8:6D:4E:6B:5F:42:36:9A:7A:73:BE:25:41
Certificate issuer:       /CN=F36E3530AF/serialNumber=64E48B75E21674F86D4E6B5F42369A7A73BE2541
Certificate serial:       023D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
Manifest number:          023A
Signing time:             Mon 20 Oct 2025 04:15:19 +0000
Manifest this update:     Mon 20 Oct 2025 04:15:19 +0000
Manifest next update:     Wed 22 Oct 2025 04:15:19 +0000
Files and hashes:         1: ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl (hash: NJfS5S3DK02waIQLqiea5ZrpxvqWqUTGRylaHeSm8go=)
                          2: 5861C26CBC5511EF90F9D982762E951A.roa (hash: eB1InoySBqZLX3x4VP2uOavu6C8qTlq0DiXebO5lSp0=)
                          3: DF636C20BC5511EF9A9E2F85762E951A.roa (hash: tSQEd/CsVNkSQe/vkWSz1QvPEAJap3A5Pjx3E2Z7rJs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 573 (0x23d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E3530AF, serialNumber=64E48B75E21674F86D4E6B5F42369A7A73BE2541
        Validity
            Not Before: Oct 20 04:15:19 2025 GMT
            Not After : Oct 22 04:15:19 2025 GMT
        Subject: CN=68f5b757-13b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:70:ff:20:58:ad:6b:68:ab:f1:4f:b9:1a:20:
                    81:67:2e:a0:e6:12:ff:78:9c:8b:3c:1d:08:16:79:
                    87:1f:71:40:86:a2:55:6c:0f:7e:4a:99:3b:00:c9:
                    7e:de:d2:3c:c0:bb:1a:24:16:4d:62:01:38:29:97:
                    6b:e5:3a:03:25:97:82:93:6d:be:ae:4c:16:ed:b4:
                    d9:32:e2:86:0e:e6:fc:fc:ef:c4:54:c8:6c:44:32:
                    5c:43:63:39:b5:b3:50:55:98:9e:e3:52:b1:40:a6:
                    c7:75:78:86:ec:0e:b1:f9:8f:a1:ec:19:03:30:99:
                    f2:55:10:d9:7f:1b:72:05:48:b9:e3:89:23:26:10:
                    0a:21:2c:46:55:d1:8e:31:3d:1a:eb:82:51:b0:53:
                    02:5f:9e:6d:dc:bd:4b:37:0f:66:86:fa:60:a2:4d:
                    8f:f1:52:e7:a3:4e:c8:38:c3:ba:14:2a:39:2e:f3:
                    21:c8:9a:17:c6:ab:6c:b0:70:4c:62:98:1c:02:ee:
                    6f:e0:25:1f:73:48:02:74:8b:b1:9c:4b:db:6f:c0:
                    c6:85:41:c0:cb:17:d5:5e:0d:5f:43:ab:f5:c8:be:
                    40:32:81:d3:f1:ed:c6:d7:c8:b9:2b:79:d1:d9:39:
                    51:b3:e2:1d:9a:c0:5c:36:89:9c:5a:6c:a8:4a:59:
                    3a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D3:7E:08:E2:DC:CA:3E:58:28:FE:BC:B1:49:EA:27:CF:96:DE:A6
            X509v3 Authority Key Identifier:
                keyid:64:E4:8B:75:E2:16:74:F8:6D:4E:6B:5F:42:36:9A:7A:73:BE:25:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZOSLdeIWdPhtTmtfQjaaenO-JUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E3530/64051F66FDAA11EEB8D47855017001B1/ZOSLdeIWdPhtTmtfQjaaenO-JUE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c5:82:78:0a:6e:67:5f:69:20:18:18:97:5f:20:26:17:ae:
         5d:3f:03:26:73:f4:53:95:97:a4:35:3b:0b:6c:7c:5c:0a:7e:
         8d:ab:cb:a9:79:eb:53:fc:1f:c8:dd:ba:b4:48:16:76:6f:a4:
         9e:77:61:77:f5:f8:5e:74:8e:30:f8:af:bd:6b:08:9a:eb:19:
         4e:64:70:06:ca:ea:e8:f8:78:33:9d:56:e0:27:6f:cd:eb:f4:
         03:e7:3e:82:74:2c:fc:79:43:2d:13:1b:46:d5:97:65:bd:29:
         02:54:62:9b:98:64:fe:2e:d7:72:29:3a:86:91:68:69:77:a3:
         7c:4d:81:e0:aa:17:2d:d3:a9:12:b5:ed:48:ad:cf:48:80:3c:
         21:50:92:ed:60:37:a2:cb:ca:4c:a8:27:8c:51:ae:6d:05:1a:
         15:88:08:b0:1a:f9:15:0f:5c:88:2c:a9:81:f6:7d:fa:e0:87:
         f9:b9:75:9c:a6:7f:1e:95:25:6d:fb:77:fa:37:52:b3:1f:42:
         c6:85:e8:d0:38:01:52:e8:2a:ac:a8:d9:6e:cc:d9:e7:b9:59:
         6b:b0:9a:bd:5d:91:be:ab:ff:ce:ed:c4:fd:56:b4:08:7c:78:
         d6:c4:e5:f8:ce:ae:ab:92:d4:8f:12:28:75:22:6c:8f:55:35:
         cd:da:2d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:55:32 2025 by rpki-client