Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
File:                     snY9UExa-ft12a62ByQi-Hoaa_Y.mft (raw, json)
Hash identifier:          G2IltlJd0aS+666FM9nl3BXuPiurqURdW//zVLLQwWo=
Subject key identifier:   3C:94:B6:9F:D3:F0:1C:38:D1:24:1E:09:E6:A5:34:92:59:9D:0C:31
Authority key identifier: B2:76:3D:50:4C:5A:F9:FB:75:D9:AE:B6:07:24:22:F8:7A:1A:6B:F6
Certificate issuer:       /CN=F36FC75CAF/serialNumber=B2763D504C5AF9FB75D9AEB6072422F87A1A6BF6
Certificate serial:       FD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
Manifest number:          FC
Signing time:             Tue 01 Jul 2025 05:02:54 +0000
Manifest this update:     Tue 01 Jul 2025 05:02:54 +0000
Manifest next update:     Thu 03 Jul 2025 05:02:53 +0000
Files and hashes:         1: snY9UExa-ft12a62ByQi-Hoaa_Y.crl (hash: WwEPPklmrzLcBRYr3uLLUaQLTLD8PQJV7dXo6O0IPAk=)
                          2: 2836E3E2983811EFB48AAD6F762E951A.roa (hash: ilc1+7HG6/OhpNZjczTeMOkT7vcZALpZGaGEFuomW1E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 05:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC75CAF, serialNumber=B2763D504C5AF9FB75D9AEB6072422F87A1A6BF6
        Validity
            Not Before: Jul  1 05:02:54 2025 GMT
            Not After : Jul  3 05:02:53 2025 GMT
        Subject: CN=68636bfe-d578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:af:00:03:2a:20:bc:e6:e0:3a:e7:0c:6e:7c:
                    12:f6:ea:e4:fd:75:41:ac:fc:ed:34:40:c9:8a:88:
                    2c:7f:72:18:2f:cc:0d:e6:d6:44:e7:67:6c:09:1e:
                    a1:a9:51:62:5d:34:39:48:02:2e:bc:c3:43:e3:fd:
                    61:9c:06:17:0c:3d:4d:47:7e:bc:a6:96:c4:75:e4:
                    45:ae:87:4f:f2:ec:a6:e1:64:84:58:6e:66:05:31:
                    c6:7e:2f:e7:0a:4a:18:a5:8a:18:7d:83:da:79:9a:
                    80:a7:a7:f0:14:13:43:fe:61:a7:28:bf:3e:d2:82:
                    fc:8d:37:93:e8:5a:66:15:85:c1:ab:c4:c6:81:2d:
                    c6:34:4a:ac:03:b7:6f:1e:d1:e8:c2:06:e7:c3:41:
                    00:0d:27:cc:60:7a:a9:a0:0d:cc:65:06:64:94:43:
                    19:74:e8:c3:73:35:d7:d4:97:3c:bf:45:91:21:9a:
                    9e:ce:6f:f7:47:85:56:36:c2:03:9c:aa:38:7a:ff:
                    68:58:c1:88:5f:9c:32:1d:cc:20:37:23:a8:30:91:
                    58:19:da:28:61:8d:18:a2:4f:41:20:8e:c3:9b:a8:
                    c2:fc:75:f7:c1:53:ce:42:e2:ee:92:db:25:24:3a:
                    8f:e8:17:44:0f:6f:a5:12:3c:e9:e7:2f:fe:32:e7:
                    68:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:94:B6:9F:D3:F0:1C:38:D1:24:1E:09:E6:A5:34:92:59:9D:0C:31
            X509v3 Authority Key Identifier:
                keyid:B2:76:3D:50:4C:5A:F9:FB:75:D9:AE:B6:07:24:22:F8:7A:1A:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:98:3f:88:40:5d:89:83:d5:4b:cb:a3:03:36:c0:6f:55:88:
         55:57:8a:c4:22:00:ef:fc:36:c7:53:19:7c:b6:8d:fe:0a:5b:
         e4:bc:1b:46:64:e4:cf:77:e6:b6:b0:ee:df:5d:aa:45:b2:2b:
         53:c7:71:8d:6b:cf:45:60:d2:65:7a:48:65:86:9e:a6:02:fb:
         45:98:98:c4:fe:dc:8f:c5:91:1e:6c:0a:2f:9e:da:a1:1f:a8:
         70:f6:bc:83:ac:85:c1:36:1d:df:a5:9e:a9:77:1d:cd:bb:c6:
         d0:75:f9:b3:33:82:75:74:bf:2d:41:f7:78:74:97:25:64:69:
         2e:4f:9f:fd:98:a4:6c:b3:5c:fc:09:c1:5b:2f:7b:ef:a4:3a:
         a6:20:6b:d2:3c:d1:9d:bc:c1:57:4d:8f:da:cb:97:3a:00:4d:
         e4:36:ce:1a:46:f4:f9:70:4b:01:df:d2:6f:c0:fe:84:68:1b:
         fb:c6:46:67:c3:8f:b9:62:e3:f6:39:7f:fe:d1:f5:4c:e1:7a:
         c0:d0:a4:d4:2f:17:f0:8a:8a:68:59:89:09:5a:65:fb:93:98:
         73:1f:95:5c:d4:42:7c:08:b1:40:af:7b:06:e2:74:96:28:1a:
         05:ee:4f:a9:44:20:3b:3e:7b:1e:8c:d2:c6:b7:c8:e0:f8:ec:
         6f:94:ac:6f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkM3NUNBRjExMC8GA1UEBRMoQjI3NjNENTA0QzVBRjlGQjc1RDlBRUI2MDcyNDIy
Rjg3QTFBNkJGNjAeFw0yNTA3MDEwNTAyNTRaFw0yNTA3MDMwNTAyNTNaMBgxFjAU
BgNVBAMTDTY4NjM2YmZlLWQ1NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5rwADKiC85uA65wxufBL26uT9dUGs/O00QMmKiCx/chgvzA3m1kTnZ2wJ
HqGpUWJdNDlIAi68w0Pj/WGcBhcMPU1HfrymlsR15EWuh0/y7KbhZIRYbmYFMcZ+
L+cKShilihh9g9p5moCnp/AUE0P+Yacovz7SgvyNN5PoWmYVhcGrxMaBLcY0SqwD
t28e0ejCBufDQQANJ8xgeqmgDcxlBmSUQxl06MNzNdfUlzy/RZEhmp7Ob/dHhVY2
wgOcqjh6/2hYwYhfnDIdzCA3I6gwkVgZ2ihhjRiiT0EgjsObqML8dffBU85C4u6S
2yUkOo/oF0QPb6USPOnnL/4y52jHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUPJS2
n9PwHDjRJB4J5qU0klmdDDEwHwYDVR0jBBgwFoAUsnY9UExa+ft12a62ByQi+Hoa
a/YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZDNzVDLzlFMTRCNUJFOTgzNjExRUZCOTdCRDE2NDc2MkU5NTFBL3NuWTlV
RXhhLWZ0MTJhNjJCeVFpLUhvYWFfWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3NuWTlVRXhhLWZ0MTJhNjJCeVFpLUhvYWFfWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkM3NUMvOUUxNEI1QkU5ODM2MTFFRkI5N0JEMTY0NzYy
RTk1MUEvc25ZOVVFeGEtZnQxMmE2MkJ5UWktSG9hYV9ZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjmD+IQF2Jg9VLy6MDNsBvVYhVV4rE
IgDv/DbHUxl8to3+ClvkvBtGZOTPd+a2sO7fXapFsitTx3GNa89FYNJlekhlhp6m
AvtFmJjE/tyPxZEebAovntqhH6hw9ryDrIXBNh3fpZ6pdx3Nu8bQdfmzM4J1dL8t
Qfd4dJclZGkuT5/9mKRss1z8CcFbL3vvpDqmIGvSPNGdvMFXTY/ay5c6AE3kNs4a
RvT5cEsB39JvwP6EaBv7xkZnw4+5YuP2OX/+0fVM4XrA0KTULxfwiopoWYkJWmX7
k5hzH5Vc1EJ8CLFAr3sG4nSWKBoF7k+pRCA7PnsejNLGt8jg+OxvlKxv
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:49:16 2025 by rpki-client