Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
File:                     6y_2M0NFlzp0sAkALjaRcdk48DM.mft (raw, json)
Hash identifier:          VwYI80le08kQ5Xn3fStveB6/hRTD/KNxzjYR2VQacBY=
Subject key identifier:   DD:20:3C:B8:77:73:EA:FF:BC:2A:8B:6B:1A:E3:F4:D1:10:73:12:D3
Authority key identifier: EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33
Certificate issuer:       /CN=F36FDDCFAF/serialNumber=EB2FF6334345973A74B009002E369171D938F033
Certificate serial:       066E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
Manifest number:          066D
Signing time:             Sun 29 Jun 2025 02:08:20 +0000
Manifest this update:     Sun 29 Jun 2025 02:08:20 +0000
Manifest next update:     Tue 01 Jul 2025 02:08:20 +0000
Files and hashes:         1: 6y_2M0NFlzp0sAkALjaRcdk48DM.crl (hash: 0mc+fBECJtmqdBjwIh/79VqSogtsKhz1duemzNxxJQ4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 01 Jul 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1646 (0x66e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDDCFAF, serialNumber=EB2FF6334345973A74B009002E369171D938F033
        Validity
            Not Before: Jun 29 02:08:20 2025 GMT
            Not After : Jul  1 02:08:20 2025 GMT
        Subject: CN=6860a014-1733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:63:fc:dd:8a:21:3c:af:69:32:91:0d:be:2d:
                    09:99:c4:47:ac:a8:ed:bd:8f:27:6c:2b:65:2f:41:
                    6c:3f:56:79:f7:91:37:27:0b:8e:03:0b:8d:07:7a:
                    4d:45:1b:65:04:0b:85:f3:d6:88:5f:45:40:c2:fb:
                    03:1b:ef:ba:5a:84:ae:40:1f:b3:f1:55:22:ca:34:
                    36:ef:68:d6:a2:66:85:c1:10:d1:5a:8a:34:51:76:
                    23:dd:13:f1:27:c4:6f:78:0f:22:2a:a0:14:f3:11:
                    6c:73:d9:6a:bf:cc:9d:b4:b6:83:d4:c2:95:47:3a:
                    13:40:6d:37:d6:84:dd:ba:97:6a:4e:c5:13:56:c0:
                    c9:42:18:da:4e:a5:a5:7d:95:36:ae:5f:43:2f:6a:
                    12:ce:40:81:48:f5:76:4a:c0:90:0f:eb:b9:94:51:
                    27:18:b8:6e:98:44:19:24:f2:36:f5:86:ac:c3:c1:
                    09:79:78:e9:e8:85:71:79:42:4c:de:e1:a1:ba:93:
                    2d:7f:b0:35:ff:24:7b:bb:d0:8e:1e:db:71:f1:40:
                    3b:55:06:ce:ce:c9:29:fa:6d:ca:f7:79:5d:ff:33:
                    df:29:50:d5:f8:79:a0:42:7e:58:c5:85:51:87:55:
                    d0:6d:67:1d:6e:d6:0f:ce:f0:d8:69:a2:56:2d:f8:
                    ae:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:20:3C:B8:77:73:EA:FF:BC:2A:8B:6B:1A:E3:F4:D1:10:73:12:D3
            X509v3 Authority Key Identifier:
                keyid:EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:51:76:6d:10:cd:de:c4:23:d0:dd:77:ea:c2:e2:20:f9:e1:
         4b:1d:5b:ae:70:a9:cd:bc:50:34:a8:2d:35:36:89:61:af:a1:
         04:3f:40:2c:8a:a2:7f:d7:3e:7c:7a:17:10:d6:3d:23:4e:db:
         f6:5d:e7:d4:18:db:c8:39:0e:ff:8c:56:a5:25:2e:3f:2b:50:
         ea:0e:a5:fc:2d:dd:13:36:a6:90:1b:14:dc:52:d3:8f:76:b7:
         1b:c4:ba:c5:a2:a2:15:53:4a:3e:ca:7c:cb:8b:f2:b9:e3:07:
         5d:4c:c0:1c:3d:0c:a4:a4:9d:ab:7b:4d:3e:51:56:83:fc:dc:
         32:9b:6e:c1:44:6b:6a:e7:50:c8:a6:82:70:9b:9c:56:6b:48:
         77:8a:c2:0d:3f:45:9a:68:17:f6:56:f8:ae:4e:b9:e4:70:f0:
         f2:17:ae:1e:ff:c0:db:85:4f:da:9e:8b:36:e8:65:2f:39:34:
         70:e9:d6:a2:63:21:24:92:74:55:62:a8:a6:e8:7b:22:79:3f:
         c2:b3:3a:6d:e4:db:bc:d9:c5:c0:32:7e:ef:48:67:e3:9f:da:
         87:b7:fd:6e:b2:9b:e4:54:a5:a9:0c:4b:29:c4:4c:bd:84:9c:
         64:b6:c2:70:cb:bd:02:c6:bb:ef:47:4e:34:dd:a8:66:95:12:
         de:ec:28:b4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkREQ0ZBRjExMC8GA1UEBRMoRUIyRkY2MzM0MzQ1OTczQTc0QjAwOTAwMkUzNjkx
NzFEOTM4RjAzMzAeFw0yNTA2MjkwMjA4MjBaFw0yNTA3MDEwMjA4MjBaMBgxFjAU
BgNVBAMTDTY4NjBhMDE0LTE3MzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/Y/zdiiE8r2kykQ2+LQmZxEesqO29jydsK2UvQWw/Vnn3kTcnC44DC40H
ek1FG2UEC4Xz1ohfRUDC+wMb77pahK5AH7PxVSLKNDbvaNaiZoXBENFaijRRdiPd
E/EnxG94DyIqoBTzEWxz2Wq/zJ20toPUwpVHOhNAbTfWhN26l2pOxRNWwMlCGNpO
paV9lTauX0MvahLOQIFI9XZKwJAP67mUUScYuG6YRBkk8jb1hqzDwQl5eOnohXF5
Qkze4aG6ky1/sDX/JHu70I4e23HxQDtVBs7OySn6bcr3eV3/M98pUNX4eaBCfljF
hVGHVdBtZx1u1g/O8NhpolYt+K7BAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU3SA8
uHdz6v+8KotrGuP00RBzEtMwHwYDVR0jBBgwFoAU6y/2M0NFlzp0sAkALjaRcdk4
8DMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZERENGL0VENDRFOTMwNkExQjExRUJCQTc0NDQxNkY4QUVBMjI4LzZ5XzJN
ME5GbHpwMHNBa0FMamFSY2RrNDhETS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzZ5XzJNME5GbHpwMHNBa0FMamFSY2RrNDhETS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkREQ0YvRUQ0NEU5MzA2QTFCMTFFQkJBNzQ0NDE2RjhB
RUEyMjgvNnlfMk0wTkZsenAwc0FrQUxqYVJjZGs0OERNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZUXZtEM3exCPQ3XfqwuIg+eFLHVuu
cKnNvFA0qC01Nolhr6EEP0AsiqJ/1z58ehcQ1j0jTtv2XefUGNvIOQ7/jFalJS4/
K1DqDqX8Ld0TNqaQGxTcUtOPdrcbxLrFoqIVU0o+ynzLi/K54wddTMAcPQykpJ2r
e00+UVaD/Nwym27BRGtq51DIpoJwm5xWa0h3isINP0WaaBf2VviuTrnkcPDyF64e
/8DbhU/anos26GUvOTRw6daiYyEkknRVYqim6HsieT/Cszpt5Nu82cXAMn7vSGfj
n9qHt/1uspvkVKWpDEspxEy9hJxktsJwy70CxrvvR0403ahmlRLe7Ci0
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:51:14 2025 by rpki-client