Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft
File:                     tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft (raw, json)
Hash identifier:          S3GZHxRLkRGhDgPNBgtUCkEXp2kHDz6OjwMx6X2tA1Y=
Subject key identifier:   9A:EA:66:07:F6:3A:9F:B3:DE:C7:04:32:DA:77:63:77:4D:C1:50:9E
Authority key identifier: B6:00:79:6D:C2:50:C8:74:AC:57:1D:32:3D:01:4B:88:76:24:3C:5E
Certificate issuer:       /CN=F361A501AR/serialNumber=B600796DC250C874AC571D323D014B8876243C5E
Certificate serial:       032D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tgB5bcJQyHSsVx0yPQFLiHYkPF4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft
Manifest number:          032D
Signing time:             Sat 23 Aug 2025 03:48:48 +0000
Manifest this update:     Sat 23 Aug 2025 03:48:47 +0000
Manifest next update:     Mon 25 Aug 2025 03:48:47 +0000
Files and hashes:         1: tgB5bcJQyHSsVx0yPQFLiHYkPF4.crl (hash: M2AL9uA4Y2Kvj6Rq7gBH7O0DCIWYA16/lShQuKjm/ZU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft
                          rsync://rpki.afrinic.net/repository/arin/tgB5bcJQyHSsVx0yPQFLiHYkPF4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 813 (0x32d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361A501AR, serialNumber=B600796DC250C874AC571D323D014B8876243C5E
        Validity
            Not Before: Aug 23 03:48:47 2025 GMT
            Not After : Aug 25 03:48:47 2025 GMT
        Subject: CN=68a93a20-646e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:86:dd:60:9b:8e:a2:7b:2f:7f:b6:74:6f:
                    b8:5b:54:fa:01:df:0a:68:80:fc:16:9e:f3:0b:39:
                    6f:25:17:2f:74:92:7e:ac:07:67:83:f2:7a:14:cc:
                    5c:60:f3:13:7b:cc:23:9c:80:e2:c8:da:ff:d1:da:
                    dc:63:9e:49:bd:62:2b:8c:84:23:46:a3:4e:a6:24:
                    20:3a:bf:3f:b0:f9:bd:a0:df:1a:d4:7a:21:ad:3a:
                    98:d8:ec:63:d1:73:e9:6a:eb:07:86:0f:3a:3c:7b:
                    4a:de:a9:fc:ef:0a:65:bc:c1:98:62:0a:12:12:9d:
                    bb:9d:94:40:f9:92:94:08:9c:db:a1:02:34:a1:23:
                    76:b6:ff:b4:5d:10:00:b6:47:03:18:d1:23:86:de:
                    81:83:ed:d9:ac:4c:23:d8:b7:ff:29:20:38:a9:b7:
                    85:3c:9d:5c:60:c3:69:6f:18:03:f1:75:b6:cb:da:
                    21:21:c5:a8:b8:fa:63:1a:6c:3b:01:f0:01:79:d1:
                    23:66:5c:e5:6d:ec:1d:ac:17:e7:cb:69:94:7c:ce:
                    95:23:2b:17:64:30:e9:a1:0a:00:5b:69:c3:0f:2c:
                    a4:e0:25:ba:a0:b9:7b:db:e0:70:90:4b:ec:3a:e2:
                    9a:06:5c:4c:74:54:5a:88:44:ea:33:db:fe:fe:55:
                    9f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EA:66:07:F6:3A:9F:B3:DE:C7:04:32:DA:77:63:77:4D:C1:50:9E
            X509v3 Authority Key Identifier:
                keyid:B6:00:79:6D:C2:50:C8:74:AC:57:1D:32:3D:01:4B:88:76:24:3C:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tgB5bcJQyHSsVx0yPQFLiHYkPF4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361A501/8797D19A13FD11EE94C3DB244AD9E6FC/tgB5bcJQyHSsVx0yPQFLiHYkPF4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f1:ce:a3:da:2f:72:e1:e5:c0:86:8d:0f:2a:17:7a:85:77:bd:
         ee:68:63:17:45:49:da:e5:af:79:a0:fa:7c:39:aa:4d:a4:16:
         f5:9a:e2:bb:39:ad:80:99:f9:c0:54:c1:79:d3:13:e3:e7:4a:
         3e:20:3d:67:4d:b0:5d:e9:3b:16:4e:2d:a2:e7:10:4e:6d:b4:
         fb:ab:18:74:57:14:82:4e:c4:35:b8:90:21:ee:20:68:be:c9:
         4a:7a:bd:30:63:61:f4:37:29:0a:d7:b4:ae:8c:e5:f6:d9:4d:
         54:75:7d:d3:d1:c8:ca:5a:5d:e7:3b:4b:d4:f9:1a:42:ca:90:
         bd:0c:33:85:ac:3b:d1:11:e7:7d:ff:8f:e1:ef:42:fd:1e:ca:
         6d:78:32:7e:2b:58:42:f1:2f:dd:f1:b7:84:9d:be:cb:55:e7:
         03:8f:61:dd:ab:ab:3a:31:07:a2:2d:ba:18:ad:00:11:be:51:
         88:ac:2e:8a:72:40:f1:34:2f:a2:92:83:46:df:5f:d9:51:4b:
         32:ef:5b:d0:ac:d4:0f:78:1a:d5:a6:5e:75:14:b8:d9:5d:c1:
         28:9a:a6:c1:80:e4:a3:cb:18:c0:35:cb:ad:72:38:39:38:88:
         30:18:0a:d8:93:ed:f3:00:ad:dc:0b:0b:27:69:9f:6f:62:12:
         4f:1e:6b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:09:54 2025 by rpki-client