Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
File:                     CzGZramPk056KV0rqhPAxHetjyU.mft (raw, json)
Hash identifier:          V9nDc63G+mskMHH7M993vJOv3TJ3EpBqv4xv31ZtF90=
Subject key identifier:   4B:6D:02:9F:35:BE:30:9A:F2:BA:8D:97:43:ED:7B:0D:94:4B:61:CE
Authority key identifier: 0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
Certificate issuer:       /CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Certificate serial:       03A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
Manifest number:          039F
Signing time:             Sat 26 Apr 2025 03:20:22 +0000
Manifest this update:     Sat 26 Apr 2025 03:20:22 +0000
Manifest next update:     Mon 28 Apr 2025 03:20:22 +0000
Files and hashes:         1: CzGZramPk056KV0rqhPAxHetjyU.crl (hash: Aqy5UAsXwXtas532R36xKb9irT0I/+Wzt7g2DJRVnaE=)
                          2: 5A992ACC659811ED9CE9B7C8F1222468.roa (hash: NjQvSWJBVOMZRY/QCKY/uG+2g+UAexC0q1YfjK9ZI0s=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 928 (0x3a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA64DAF, serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
        Validity
            Not Before: Apr 26 03:20:22 2025 GMT
            Not After : Apr 28 03:20:22 2025 GMT
        Subject: CN=680c50f6-6505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:ea:af:ca:7c:fd:14:be:f5:c8:76:b6:8c:
                    d8:47:01:b7:07:9f:3d:6f:8c:3f:94:c8:50:75:16:
                    6a:1c:95:a2:85:0b:5e:51:00:d6:f3:fa:46:58:38:
                    19:a2:fe:4a:0d:88:d5:ea:88:0b:f5:fe:b7:6c:27:
                    f1:d1:9c:48:b0:3d:92:8a:74:0a:7d:6b:b3:3f:73:
                    ad:b2:9c:60:c3:fb:2a:f3:1a:eb:39:f4:f6:8b:e0:
                    ea:5b:dc:39:6a:01:3c:1c:40:0d:5c:63:6e:e3:e6:
                    8e:91:c7:3f:0e:f2:a6:29:e0:b9:45:13:7d:9c:dd:
                    1d:24:04:51:2a:4f:57:1f:d1:d7:56:d9:83:82:d0:
                    6d:3c:04:34:14:bf:74:41:93:03:46:2f:a4:8b:c1:
                    ad:a6:8c:7b:ce:18:b3:fc:e8:c6:77:25:17:0f:69:
                    4d:fa:b4:00:7a:9d:45:5f:e4:9c:a6:c2:2e:56:23:
                    c3:8c:6f:37:18:1f:a6:84:1e:78:d1:24:30:ac:7f:
                    55:17:8c:08:da:6c:a9:b0:e8:c6:de:1c:ab:ba:9e:
                    49:13:85:a9:e6:9c:93:71:9a:74:6b:bf:e8:1d:27:
                    14:ad:0d:60:27:f0:26:97:bc:ef:80:aa:1b:2a:79:
                    82:fa:48:79:0a:5a:b5:64:ba:93:54:de:61:fc:e5:
                    59:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6D:02:9F:35:BE:30:9A:F2:BA:8D:97:43:ED:7B:0D:94:4B:61:CE
            X509v3 Authority Key Identifier:
                keyid:0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:45:7c:3e:f2:54:c7:0b:f9:21:c8:42:ca:a6:77:bf:f0:18:
         25:f5:ed:8b:4d:21:05:53:b2:21:eb:f4:57:76:d6:3e:2c:77:
         fb:51:b9:f6:9e:a1:f5:99:3a:eb:8f:12:04:69:6d:01:39:7f:
         0d:65:70:18:e8:92:5f:9c:e2:69:1b:99:61:85:ed:b0:b7:12:
         64:07:0c:14:ed:93:f4:a6:47:76:15:16:4e:78:6c:4a:81:b8:
         21:47:ce:29:97:10:82:b4:ae:78:40:41:16:fb:11:1d:94:8a:
         f9:bb:6b:f8:cb:27:85:b9:fc:77:b4:ab:26:09:e7:89:8f:c2:
         e1:d9:d7:2b:f9:f5:cd:e6:a8:38:ef:3e:bd:84:ed:64:89:84:
         cb:22:08:85:a4:8a:aa:8c:d5:4d:f7:fd:9a:1b:17:f6:a2:0c:
         82:2c:61:36:21:4b:86:06:5f:f4:f6:0b:a8:44:87:3c:7c:3d:
         bb:51:93:40:02:41:c6:57:66:e1:32:ce:fa:2f:2d:f5:6c:69:
         44:2e:cd:f7:9f:bb:68:30:95:ec:d0:68:5d:91:ce:79:44:ee:
         df:01:c6:1d:50:0d:77:f9:db:6a:9a:78:c5:dd:93:e0:90:0e:
         81:8f:b5:0e:8b:7a:43:38:b9:e3:ad:2d:df:a5:8c:3d:65:d9:
         1f:20:cc:94
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA6AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkE2NERBRjExMC8GA1UEBRMoMEIzMTk5QURBOThGOTM0RTdBMjk1RDJCQUExM0Mw
QzQ3N0FEOEYyNTAeFw0yNTA0MjYwMzIwMjJaFw0yNTA0MjgwMzIwMjJaMBgxFjAU
BgNVBAMTDTY4MGM1MGY2LTY1MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDluqvynz9FL71yHa2jNhHAbcHnz1vjD+UyFB1FmoclaKFC15RANbz+kZY
OBmi/koNiNXqiAv1/rdsJ/HRnEiwPZKKdAp9a7M/c62ynGDD+yrzGus59PaL4Opb
3DlqATwcQA1cY27j5o6Rxz8O8qYp4LlFE32c3R0kBFEqT1cf0ddW2YOC0G08BDQU
v3RBkwNGL6SLwa2mjHvOGLP86MZ3JRcPaU36tAB6nUVf5Jymwi5WI8OMbzcYH6aE
HnjRJDCsf1UXjAjabKmw6MbeHKu6nkkThanmnJNxmnRrv+gdJxStDWAn8CaXvO+A
qhsqeYL6SHkKWrVkupNU3mH85VntAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUS20C
nzW+MJryuo2XQ+17DZRLYc4wHwYDVR0jBBgwFoAUCzGZramPk056KV0rqhPAxHet
jyUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJBNjRELzkzRDI3MjBFNjU5NzExRUQ5QTdDQjhDNkYxMjIyNDY4L0N6R1py
YW1QazA1NktWMHJxaFBBeEhldGp5VS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0N6R1pyYW1QazA1NktWMHJxaFBBeEhldGp5VS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkE2NEQvOTNEMjcyMEU2NTk3MTFFRDlBN0NCOEM2RjEy
MjI0NjgvQ3pHWnJhbVBrMDU2S1YwcnFoUEF4SGV0anlVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB+RXw+8lTHC/khyELKpne/8Bgl9e2L
TSEFU7Ih6/RXdtY+LHf7Ubn2nqH1mTrrjxIEaW0BOX8NZXAY6JJfnOJpG5lhhe2w
txJkBwwU7ZP0pkd2FRZOeGxKgbghR84plxCCtK54QEEW+xEdlIr5u2v4yyeFufx3
tKsmCeeJj8Lh2dcr+fXN5qg47z69hO1kiYTLIgiFpIqqjNVN9/2aGxf2ogyCLGE2
IUuGBl/09guoRIc8fD27UZNAAkHGV2bhMs76Ly31bGlELs33n7toMJXs0Ghdkc55
RO7fAcYdUA13+dtqmnjF3ZPgkA6Bj7UOi3pDOLnjrS3fpYw9ZdkfIMyU
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:21:27 2025 by rpki-client on console.sobornost.net