Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
File:                     jipNb8UYDX1HWKp5jDiYAu7zv7M.mft (raw, json)
Hash identifier:          IFUnPCv03jLO3E7pH6eR83CKblvEK0cRzkfbRoU/n/k=
Subject key identifier:   C9:96:A6:4A:15:19:EB:17:A3:16:9E:2F:71:B4:27:55:09:C9:B2:FC
Authority key identifier: 8E:2A:4D:6F:C5:18:0D:7D:47:58:AA:79:8C:38:98:02:EE:F3:BF:B3
Certificate issuer:       /CN=F36F4212AF/serialNumber=8E2A4D6FC5180D7D4758AA798C389802EEF3BFB3
Certificate serial:       0234
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
Manifest number:          0233
Signing time:             Sat 23 Aug 2025 04:21:20 +0000
Manifest this update:     Sat 23 Aug 2025 04:21:19 +0000
Manifest next update:     Mon 25 Aug 2025 04:21:19 +0000
Files and hashes:         1: jipNb8UYDX1HWKp5jDiYAu7zv7M.crl (hash: K1YSO/GKLTVMtv1iw7pnZYv506hHgSEvAXIKMfLfZmc=)
                          2: BDA909CACFB911EEA2EBAB6A775412E6.roa (hash: oOsN7fS/FRC6cCK/W7sGcZ0zEfirLAaFD65Y5zMuPNM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F4212AF, serialNumber=8E2A4D6FC5180D7D4758AA798C389802EEF3BFB3
        Validity
            Not Before: Aug 23 04:21:19 2025 GMT
            Not After : Aug 25 04:21:19 2025 GMT
        Subject: CN=68a941c0-3d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1b:91:0c:1c:c7:e9:da:23:3b:be:84:32:0f:
                    60:7c:70:70:80:ea:bb:08:b4:0a:ad:5d:36:ae:6e:
                    9b:94:71:ff:af:8e:c5:f1:a0:46:80:c4:4c:2b:2f:
                    85:8b:79:29:2d:f3:52:28:d6:3a:20:13:6b:80:c3:
                    9f:c6:ab:c7:27:a1:7c:e5:7c:8d:91:55:28:82:1c:
                    a8:1f:2f:07:16:1c:b6:95:67:f7:32:25:38:91:18:
                    78:e6:8b:51:c5:7c:53:e9:ee:e0:46:82:63:16:33:
                    79:f4:bc:7c:09:d6:f0:93:30:f8:44:c9:16:2e:38:
                    9f:a1:26:e8:78:e3:56:22:34:96:8c:52:61:3c:79:
                    31:00:d1:39:e8:e9:8a:5a:a5:56:fa:2c:8c:b9:c4:
                    4b:19:31:78:b7:39:3a:f1:61:15:8e:5b:9e:bb:8d:
                    35:47:c9:fd:eb:02:9f:2d:88:73:77:d5:9b:e4:2e:
                    dc:4d:c9:ca:8c:37:44:de:d0:a0:b1:f8:e4:e4:52:
                    63:22:27:a9:b1:85:18:ca:35:c5:31:ce:7a:42:a8:
                    42:74:e4:58:9e:ef:51:a2:05:93:f6:cc:b9:66:34:
                    58:81:a6:38:c6:16:c6:3a:b6:ca:f5:a4:fe:cc:7b:
                    5a:3d:6d:25:cb:da:96:ee:93:1a:88:b1:1e:06:23:
                    46:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:96:A6:4A:15:19:EB:17:A3:16:9E:2F:71:B4:27:55:09:C9:B2:FC
            X509v3 Authority Key Identifier:
                keyid:8E:2A:4D:6F:C5:18:0D:7D:47:58:AA:79:8C:38:98:02:EE:F3:BF:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jipNb8UYDX1HWKp5jDiYAu7zv7M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4212/53BD7852CFB911EEBADF1A6A775412E6/jipNb8UYDX1HWKp5jDiYAu7zv7M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:60:7f:49:6a:ff:ee:30:71:0d:2f:f6:5a:93:9b:27:8d:47:
         b5:ac:a2:35:62:e1:86:bf:78:5e:7d:b0:83:b6:6d:74:13:16:
         c2:35:0d:6e:78:52:99:ba:10:e1:33:ce:62:8c:99:3b:da:62:
         69:e9:59:f4:57:52:c7:19:e6:06:c2:cf:48:92:54:2e:4c:c8:
         bc:78:38:29:24:4e:97:93:6e:8f:e6:fc:4c:53:e9:5b:eb:99:
         9e:c5:8a:42:f9:69:8c:f3:9a:59:c0:d4:a5:5b:7a:65:cb:9b:
         5d:56:57:3b:8c:90:91:d2:17:b9:59:45:7d:df:09:18:04:e4:
         8b:3c:fc:bf:55:29:ec:52:49:43:d5:ce:3d:4b:8e:3f:07:a2:
         33:a0:7a:e9:ff:81:79:1f:bc:ec:da:ca:d4:dc:70:b2:f2:55:
         d6:9a:6e:3b:f8:28:63:d8:02:4f:e4:2b:27:52:79:ff:77:21:
         23:3a:43:e7:bb:2c:c6:4c:d1:70:bd:51:3b:3d:18:85:00:16:
         90:d6:36:e1:43:04:15:26:b6:7b:01:67:7b:2a:d4:57:b2:7d:
         a9:09:31:5e:c1:34:22:d1:87:50:a5:90:f0:73:64:89:37:4f:
         bd:d4:26:bd:c4:7a:2e:e6:72:89:bb:61:29:f8:c9:fa:50:bb:
         ea:93:af:05
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAjQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjQyMTJBRjExMC8GA1UEBRMoOEUyQTRENkZDNTE4MEQ3RDQ3NThBQTc5OEMzODk4
MDJFRUYzQkZCMzAeFw0yNTA4MjMwNDIxMTlaFw0yNTA4MjUwNDIxMTlaMBgxFjAU
BgNVBAMTDTY4YTk0MWMwLTNkNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCnG5EMHMfp2iM7voQyD2B8cHCA6rsItAqtXTaubpuUcf+vjsXxoEaAxEwr
L4WLeSkt81Io1jogE2uAw5/Gq8cnoXzlfI2RVSiCHKgfLwcWHLaVZ/cyJTiRGHjm
i1HFfFPp7uBGgmMWM3n0vHwJ1vCTMPhEyRYuOJ+hJuh441YiNJaMUmE8eTEA0Tno
6YpapVb6LIy5xEsZMXi3OTrxYRWOW567jTVHyf3rAp8tiHN31ZvkLtxNycqMN0Te
0KCx+OTkUmMiJ6mxhRjKNcUxznpCqEJ05Fie71GiBZP2zLlmNFiBpjjGFsY6tsr1
pP7Me1o9bSXL2pbukxqIsR4GI0YXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUyZam
ShUZ6xejFp4vcbQnVQnJsvwwHwYDVR0jBBgwFoAUjipNb8UYDX1HWKp5jDiYAu7z
v7MwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY0MjEyLzUzQkQ3ODUyQ0ZCOTExRUVCQURGMUE2QTc3NTQxMkU2L2ppcE5i
OFVZRFgxSFdLcDVqRGlZQXU3enY3TS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2ppcE5iOFVZRFgxSFdLcDVqRGlZQXU3enY3TS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjQyMTIvNTNCRDc4NTJDRkI5MTFFRUJBREYxQTZBNzc1
NDEyRTYvamlwTmI4VVlEWDFIV0twNWpEaVlBdTd6djdNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZYH9Jav/uMHENL/Zak5snjUe1rKI1
YuGGv3hefbCDtm10ExbCNQ1ueFKZuhDhM85ijJk72mJp6Vn0V1LHGeYGws9IklQu
TMi8eDgpJE6Xk26P5vxMU+lb65mexYpC+WmM85pZwNSlW3ply5tdVlc7jJCR0he5
WUV93wkYBOSLPPy/VSnsUklD1c49S44/B6IzoHrp/4F5H7zs2srU3HCy8lXWmm47
+Chj2AJP5CsnUnn/dyEjOkPnuyzGTNFwvVE7PRiFABaQ1jbhQwQVJrZ7AWd7KtRX
sn2pCTFewTQi0YdQpZDwc2SJN0+91Ca9xHou5nKJu2Ep+Mn6ULvqk68F
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:21 2025 by rpki-client