Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
File:                     9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft (raw, json)
Hash identifier:          zZC34iXab9h7+5lRkdgs0j5G2tSy9FgteYosaOFze9E=
Subject key identifier:   47:2E:E5:EB:80:06:12:B5:B6:84:D3:6D:1C:15:B1:37:14:A1:82:2A
Authority key identifier: F5:92:84:D7:66:78:85:1F:7A:A7:43:B1:3F:6C:06:74:79:55:00:74
Certificate issuer:       /CN=F36EED3EAF/serialNumber=F59284D76678851F7AA743B13F6C067479550074
Certificate serial:       02CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
Manifest number:          02CE
Signing time:             Sat 10 May 2025 03:45:45 +0000
Manifest this update:     Sat 10 May 2025 03:45:45 +0000
Manifest next update:     Mon 12 May 2025 03:45:45 +0000
Files and hashes:         1: 9ZKE12Z4hR96p0OxP2wGdHlVAHQ.crl (hash: BMVTYhv+IBzTmYAGwv2wUmg58npXTbzb98fz3LdJnpY=)
                          2: C226B7D40AA411EEAEA4A5484AD9E6FC.roa (hash: Qm72goTpyMAJ3Op/uLoxMku/eqrMrQ5Gy2DoW/t8FVs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 May 2025 00:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EED3EAF, serialNumber=F59284D76678851F7AA743B13F6C067479550074
        Validity
            Not Before: May 10 03:45:45 2025 GMT
            Not After : May 12 03:45:45 2025 GMT
        Subject: CN=681ecbe9-1d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:32:99:f0:41:e1:b8:f5:70:4f:d2:5e:75:3c:
                    4e:f0:75:d9:06:84:b0:19:13:cb:3c:53:50:f5:04:
                    f3:27:68:c4:73:1b:7d:87:d0:e2:9c:91:7d:82:2d:
                    7e:74:c5:2a:27:d9:a5:93:74:c2:d1:13:a1:33:64:
                    68:2c:bf:1d:b7:0f:da:f6:52:dd:1f:d1:be:56:f4:
                    04:92:f9:4d:54:74:f8:74:52:94:01:cf:f3:80:78:
                    f6:8b:1e:d3:c7:03:bc:6d:56:e0:26:c1:08:5d:60:
                    3f:f9:a9:e8:ea:b0:75:f4:02:ae:3b:7a:b0:26:aa:
                    27:e4:d3:79:95:06:17:49:99:28:e5:8d:83:2a:bb:
                    b1:d9:b8:6d:e6:32:ef:10:eb:2b:c0:ae:29:f6:fb:
                    54:95:ea:97:f1:b7:fa:cc:11:df:6a:0c:fb:10:f8:
                    be:6b:9b:55:65:f1:10:b0:e4:13:a7:14:f9:a7:b7:
                    2d:66:d5:c3:4b:66:16:c8:aa:9f:54:74:78:e2:e4:
                    31:f4:94:e1:a4:33:c0:04:1c:d9:28:13:79:82:9a:
                    64:21:18:06:e2:6b:98:c6:12:70:51:06:b6:28:10:
                    1d:40:49:17:b5:b9:fe:41:29:2d:44:35:e1:ee:71:
                    c2:ad:e0:59:ea:ce:d0:13:a1:b7:f7:4d:e1:27:93:
                    e2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:2E:E5:EB:80:06:12:B5:B6:84:D3:6D:1C:15:B1:37:14:A1:82:2A
            X509v3 Authority Key Identifier:
                keyid:F5:92:84:D7:66:78:85:1F:7A:A7:43:B1:3F:6C:06:74:79:55:00:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:da:3a:f0:a2:ac:90:ea:ac:78:0b:9f:ee:eb:25:e6:5b:a9:
         cd:33:6d:c4:89:58:71:04:e8:04:50:9b:5c:fa:20:e6:0b:86:
         87:b0:b7:2c:25:af:55:39:64:6b:83:cb:3c:9a:da:b2:c0:78:
         a5:3b:ca:2c:cc:09:dc:da:d3:e6:2c:2e:35:06:c0:f5:15:20:
         4a:83:84:e7:3e:67:eb:48:60:6e:b8:29:87:60:8c:d1:c7:91:
         87:4e:21:5f:5f:69:86:56:f7:02:95:60:ad:b5:95:87:fe:60:
         7c:b5:26:fd:ae:68:57:e7:c7:3f:3d:f2:e4:6e:41:3a:ad:bb:
         19:21:3a:e4:6e:f6:9c:13:c0:8d:d0:ca:04:f8:1c:9d:94:2d:
         08:cc:fd:04:20:74:66:b8:f0:68:c6:ea:a0:ba:a5:3e:d5:33:
         cc:5a:b0:50:a1:56:82:5e:2e:9a:5c:05:d0:96:6a:8e:1a:89:
         0d:d7:74:fd:c5:91:cd:e1:32:70:86:65:e8:aa:bc:65:1e:95:
         f9:fc:20:32:6a:2b:76:05:e1:18:29:41:86:4a:e3:16:7f:43:
         1a:64:6f:96:22:98:9e:92:f0:6b:86:7a:1b:3e:5f:06:69:d0:
         78:fd:87:4b:c4:e2:96:58:7f:24:ba:06:ec:7a:a4:08:26:48:
         88:d8:22:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:28:32 2025 by rpki-client