Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
File:                     6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft (raw, json)
Hash identifier:          JVZ8VpjnoCPaXyMTNbqSEHHX8mmT4hxKVq9+2Tas8S4=
Subject key identifier:   CA:DF:1B:72:D9:1B:CD:3E:45:6D:C0:68:C8:2B:8A:B5:7A:17:77:35
Authority key identifier: E8:19:C4:CF:0B:8F:3A:F9:3F:7F:11:FF:90:2A:6A:6C:FF:5A:1E:5C
Certificate issuer:       /CN=F36150C1AR/serialNumber=E819C4CF0B8F3AF93F7F11FF902A6A6CFF5A1E5C
Certificate serial:       0CCA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
Manifest number:          0CCA
Signing time:             Sun 06 Jul 2025 01:07:45 +0000
Manifest this update:     Sun 06 Jul 2025 01:07:44 +0000
Manifest next update:     Tue 08 Jul 2025 01:07:44 +0000
Files and hashes:         1: 6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl (hash: E/++ks6kq1HuG/a+S4Adkn/3ASJzHaP48NqWN1xf8mg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
                          rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 08 Jul 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3274 (0xcca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36150C1AR, serialNumber=E819C4CF0B8F3AF93F7F11FF902A6A6CFF5A1E5C
        Validity
            Not Before: Jul  6 01:07:44 2025 GMT
            Not After : Jul  8 01:07:44 2025 GMT
        Subject: CN=6869cc61-3a4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:5a:73:66:b5:d7:dd:c4:12:9e:bb:28:4e:
                    41:b0:18:ab:f6:a5:aa:eb:37:fa:97:6e:b8:c8:26:
                    26:8f:d4:88:01:93:f7:b6:52:0a:ae:9d:25:b9:54:
                    a3:c0:7f:4c:72:03:7d:4b:ab:b9:6c:16:16:4e:5c:
                    ba:ae:f5:d4:a1:f1:59:4e:4f:04:3c:35:30:a8:0b:
                    8f:7c:95:8c:a4:96:b5:d8:d4:00:65:7e:75:1c:d7:
                    c6:05:07:7c:d4:bc:8b:71:16:7c:8d:c4:c9:e5:1f:
                    f8:52:32:64:84:8a:bb:7e:48:94:50:c2:d2:ab:78:
                    af:14:8c:b4:e8:96:f3:5a:65:fd:39:e4:3d:54:99:
                    cc:1a:ad:c5:ce:f3:bb:be:55:52:80:9d:ad:1f:df:
                    37:e9:e8:44:94:50:01:28:40:23:f7:12:98:3a:e4:
                    6f:68:b8:3d:74:8c:40:cf:4e:93:4b:3a:81:05:e0:
                    73:65:6e:39:5a:ee:0c:50:bf:77:9b:b0:f0:a9:eb:
                    6f:4f:02:08:e4:41:db:01:1e:c4:f6:6a:7e:6d:cc:
                    81:3b:66:96:a0:ae:3b:0f:68:88:18:c0:28:b1:43:
                    7b:72:c3:39:16:5c:7b:59:61:a4:a5:70:3d:7b:15:
                    50:61:92:1f:72:23:81:c2:eb:ef:39:2f:89:1f:68:
                    38:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:DF:1B:72:D9:1B:CD:3E:45:6D:C0:68:C8:2B:8A:B5:7A:17:77:35
            X509v3 Authority Key Identifier:
                keyid:E8:19:C4:CF:0B:8F:3A:F9:3F:7F:11:FF:90:2A:6A:6C:FF:5A:1E:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/6BnEzwuPOvk_fxH_kCpqbP9aHlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36150C1/0947D0A4855411E69C2A4A4BF8AEA228/6BnEzwuPOvk_fxH_kCpqbP9aHlw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:ff:e3:6a:81:e7:69:bd:e9:cf:59:aa:2e:ab:aa:58:65:16:
         ea:0e:22:4a:35:97:ae:64:7c:08:a2:53:fe:54:38:a6:9c:6a:
         dc:cf:a5:ae:2c:0e:59:59:5d:7d:39:f2:d7:c1:8d:85:e3:a9:
         29:17:f7:dd:0c:dd:c6:82:98:6e:a7:0f:07:92:0c:24:ce:86:
         d4:cd:ea:8a:54:cf:b3:87:17:9b:78:94:18:f3:61:f4:9c:32:
         a3:9f:3f:59:0c:56:b3:3e:d1:74:67:78:0e:23:78:8b:d5:cb:
         1d:4d:cb:aa:9e:8a:20:93:78:b3:33:de:c7:e6:b0:f8:0e:54:
         09:f6:0c:7a:22:8b:d4:af:46:c6:f1:cc:c2:65:66:de:e2:be:
         d9:5a:18:58:49:b1:04:4c:b8:29:46:d1:34:41:72:da:27:fb:
         2a:fc:6d:13:94:a6:65:2e:22:b5:38:c6:08:af:68:5f:65:3e:
         d5:a4:d9:a2:79:da:a6:e9:4e:af:28:0b:e2:34:08:04:eb:9a:
         10:14:51:95:a5:dc:67:11:89:89:e0:08:03:e9:25:c0:29:d2:
         2a:85:d0:31:fc:7f:cc:90:c6:4c:1b:fa:c6:0c:eb:55:7a:a0:
         e2:ee:c6:b8:30:ac:fd:ad:d2:12:48:f5:40:65:c2:4c:56:47:
         6b:fe:f6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 14:20:35 2025 by rpki-client