Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
File:                     6y_2M0NFlzp0sAkALjaRcdk48DM.mft (raw, json)
Hash identifier:          +OEJ/sAiB9GkK1ku3QKbntwCzIygA1mnVXvk5L+NM9w=
Subject key identifier:   99:87:45:17:17:E5:17:53:C1:AF:F9:DF:56:82:37:99:C9:B6:6D:18
Authority key identifier: EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33
Certificate issuer:       /CN=F36FDDCFAF/serialNumber=EB2FF6334345973A74B009002E369171D938F033
Certificate serial:       0636
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
Manifest number:          0635
Signing time:             Mon 05 May 2025 02:08:47 +0000
Manifest this update:     Mon 05 May 2025 02:08:47 +0000
Manifest next update:     Wed 07 May 2025 02:08:47 +0000
Files and hashes:         1: 6y_2M0NFlzp0sAkALjaRcdk48DM.crl (hash: jeygsxwjLHRadGeIRTp+X4xt2WwwhOz1oTCF+ulpINg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 07 May 2025 00:06:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1590 (0x636)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDDCFAF, serialNumber=EB2FF6334345973A74B009002E369171D938F033
        Validity
            Not Before: May  5 02:08:47 2025 GMT
            Not After : May  7 02:08:47 2025 GMT
        Subject: CN=68181daf-db4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:49:86:77:0e:fa:08:e7:d8:8f:99:c8:3f:
                    96:fb:85:26:c9:a6:fe:62:32:ff:bf:fe:bd:a1:aa:
                    e1:cb:cb:8c:09:a4:13:06:4a:6e:8f:88:33:33:27:
                    1d:0e:9b:9f:97:c9:03:bd:81:ab:17:21:a0:63:48:
                    ce:9a:88:c6:48:cf:2d:07:e9:f3:4d:d8:1c:f0:27:
                    9b:04:9f:4e:d1:9f:72:55:a9:ea:f2:11:23:12:f8:
                    55:eb:a5:5f:51:91:5b:80:a7:c7:50:e7:8e:42:ff:
                    7a:89:8e:9f:0b:40:4d:f5:ad:0a:29:a7:b4:2c:65:
                    47:80:8c:22:e2:1e:31:57:c4:92:b9:5a:9f:af:da:
                    f2:46:f3:a1:51:11:a1:d0:ce:ed:80:f4:c2:ec:86:
                    e4:b1:62:6e:92:e7:ca:08:62:74:dc:1c:69:96:fc:
                    c0:58:b1:d5:92:a0:d5:b4:38:76:88:8e:5a:99:3c:
                    a5:82:f6:1f:72:7a:ca:67:01:ed:55:9e:ec:72:9c:
                    fc:bf:e2:ab:0b:1f:a3:64:55:c2:0a:82:99:58:c7:
                    10:e7:87:f8:bd:d7:fe:cc:13:93:fe:15:86:f8:48:
                    08:06:0c:c8:1c:11:0d:62:44:70:9e:52:ff:03:d6:
                    d6:df:94:52:8a:27:58:26:c3:9f:56:b3:44:87:2b:
                    55:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:87:45:17:17:E5:17:53:C1:AF:F9:DF:56:82:37:99:C9:B6:6D:18
            X509v3 Authority Key Identifier:
                keyid:EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:4d:12:4a:b3:6e:12:87:a9:1e:f8:1a:60:7a:d5:54:59:28:
         cf:bb:70:b5:9d:be:4b:fb:29:c8:e1:90:04:2f:86:72:0a:7e:
         71:ae:14:c7:ef:a4:66:b5:cd:93:fc:3b:fb:ac:43:2b:5c:fb:
         15:0e:c1:58:77:ac:a1:67:28:18:f2:dc:78:57:22:dc:20:b9:
         4d:82:e7:f2:2e:65:6d:82:c2:e8:ae:38:3c:95:0a:e3:00:cc:
         95:1f:bf:55:fc:ad:0b:a0:69:af:c7:a4:93:84:fc:58:76:a9:
         22:44:f6:87:8b:e1:19:f7:12:70:fe:49:df:4c:d7:69:a4:95:
         f2:fd:f9:b7:b3:bd:b0:fa:94:e5:04:a3:7b:fc:05:12:c4:0b:
         3c:92:4d:9d:40:69:29:ff:c4:5b:17:8b:2a:5e:cc:be:ab:b7:
         40:ad:4b:93:19:b0:89:a7:30:d1:16:6b:51:35:7a:98:07:14:
         3a:ae:6f:33:2b:23:f3:a1:0b:dc:59:0a:d7:d5:67:d6:8f:70:
         51:bb:0b:ca:41:f5:10:4d:65:13:31:e2:65:63:1a:c9:1d:f0:
         38:19:49:75:34:97:4e:7a:fd:36:07:46:6e:c5:ac:26:6f:fc:
         42:09:29:69:bb:7a:7f:e5:8f:5c:85:0c:25:f2:c5:9e:ce:72:
         b8:df:e7:1a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBjYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkREQ0ZBRjExMC8GA1UEBRMoRUIyRkY2MzM0MzQ1OTczQTc0QjAwOTAwMkUzNjkx
NzFEOTM4RjAzMzAeFw0yNTA1MDUwMjA4NDdaFw0yNTA1MDcwMjA4NDdaMBgxFjAU
BgNVBAMTDTY4MTgxZGFmLWRiNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7AUmGdw76COfYj5nIP5b7hSbJpv5iMv+//r2hquHLy4wJpBMGSm6PiDMz
Jx0Om5+XyQO9gasXIaBjSM6aiMZIzy0H6fNN2BzwJ5sEn07Rn3JVqeryESMS+FXr
pV9RkVuAp8dQ545C/3qJjp8LQE31rQopp7QsZUeAjCLiHjFXxJK5Wp+v2vJG86FR
EaHQzu2A9MLshuSxYm6S58oIYnTcHGmW/MBYsdWSoNW0OHaIjlqZPKWC9h9yespn
Ae1VnuxynPy/4qsLH6NkVcIKgplYxxDnh/i91/7ME5P+FYb4SAgGDMgcEQ1iRHCe
Uv8D1tbflFKKJ1gmw59Ws0SHK1UDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUmYdF
FxflF1PBr/nfVoI3mcm2bRgwHwYDVR0jBBgwFoAU6y/2M0NFlzp0sAkALjaRcdk4
8DMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZERENGL0VENDRFOTMwNkExQjExRUJCQTc0NDQxNkY4QUVBMjI4LzZ5XzJN
ME5GbHpwMHNBa0FMamFSY2RrNDhETS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzZ5XzJNME5GbHpwMHNBa0FMamFSY2RrNDhETS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkREQ0YvRUQ0NEU5MzA2QTFCMTFFQkJBNzQ0NDE2RjhB
RUEyMjgvNnlfMk0wTkZsenAwc0FrQUxqYVJjZGs0OERNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAoTRJKs24Sh6ke+BpgetVUWSjPu3C1
nb5L+ynI4ZAEL4ZyCn5xrhTH76Rmtc2T/Dv7rEMrXPsVDsFYd6yhZygY8tx4VyLc
ILlNgufyLmVtgsLorjg8lQrjAMyVH79V/K0LoGmvx6SThPxYdqkiRPaHi+EZ9xJw
/knfTNdppJXy/fm3s72w+pTlBKN7/AUSxAs8kk2dQGkp/8RbF4sqXsy+q7dArUuT
GbCJpzDRFmtRNXqYBxQ6rm8zKyPzoQvcWQrX1WfWj3BRuwvKQfUQTWUTMeJlYxrJ
HfA4GUl1NJdOev02B0Zuxawmb/xCCSlpu3p/5Y9chQwl8sWeznK43+ca
-----END CERTIFICATE-----
Generated at Mon May 5 08:43:18 2025 by rpki-client