Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
File:                     hgwk5dUBPSMjsLq0BphmwNwK7m0.mft (raw, json)
Hash identifier:          EPxnYQ+BkO8HjiSVXEczrEzlOlgcaH23non2VLgJLhE=
Subject key identifier:   51:C7:EC:1A:6D:47:19:30:76:7D:21:C7:6F:9B:DD:BE:19:06:15:1B
Authority key identifier: 86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D
Certificate issuer:       /CN=F361F1DAAR/serialNumber=860C24E5D5013D2323B0BAB4069866C0DC0AEE6D
Certificate serial:       0249
Authority info access:    rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
Manifest number:          0248
Signing time:             Sat 17 May 2025 04:05:13 +0000
Manifest this update:     Sat 17 May 2025 04:05:13 +0000
Manifest next update:     Mon 19 May 2025 04:05:13 +0000
Files and hashes:         1: hgwk5dUBPSMjsLq0BphmwNwK7m0.crl (hash: 9CuXTwgYDgLwTMUJUKSaepl/nhm98F0KymQhbP8ndq8=)
                          2: B2B100A8960311EE9DAC9C0ED25BE465.roa (hash: oJ8IY/etJV+KmOnt6rOLNi+N6bGbXrWs5HWdSZ42ZyE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
                          rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F1DAAR, serialNumber=860C24E5D5013D2323B0BAB4069866C0DC0AEE6D
        Validity
            Not Before: May 17 04:05:13 2025 GMT
            Not After : May 19 04:05:13 2025 GMT
        Subject: CN=68280af9-bd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8a:a0:60:6f:60:42:69:67:a5:ac:ae:a6:d8:
                    55:86:bd:11:ad:aa:2c:38:7b:ae:90:06:9a:72:4a:
                    0c:24:b3:8d:c9:00:5b:7b:99:62:92:52:60:e5:01:
                    c6:ba:b0:b2:0f:1d:c0:a0:5c:69:30:22:08:46:a8:
                    89:4c:d5:7e:68:90:14:de:90:6e:0b:51:c4:da:03:
                    3b:f5:78:cf:92:88:07:07:5d:42:1b:a4:09:cc:c4:
                    9c:0c:c8:74:7e:f8:e8:b9:28:ff:f5:c1:59:90:43:
                    aa:f4:47:57:a1:8b:b2:8a:7f:21:be:ee:2d:5a:93:
                    70:97:35:93:86:8e:08:dd:76:37:67:d4:bc:a1:ae:
                    48:56:6f:17:e2:01:7a:de:e7:15:8f:9f:5f:9c:a9:
                    b3:86:69:84:5f:b9:2a:f0:fd:9f:3a:40:45:14:53:
                    30:d2:f2:c4:c8:78:01:05:0e:bb:72:cb:36:e1:cf:
                    a8:3c:70:c7:93:f6:39:a9:be:04:fc:d8:2b:b0:b1:
                    29:37:4d:99:81:21:de:7a:a6:da:30:53:b6:38:55:
                    48:d7:21:97:67:5a:c4:10:05:8f:6e:50:18:f3:cc:
                    9b:96:4d:89:2f:6f:63:6e:4d:cf:e3:0b:18:c2:76:
                    01:9b:ac:2d:b5:54:eb:ac:c5:ec:0a:6a:29:8f:21:
                    80:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C7:EC:1A:6D:47:19:30:76:7D:21:C7:6F:9B:DD:BE:19:06:15:1B
            X509v3 Authority Key Identifier:
                keyid:86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:a6:f5:11:52:5d:fc:47:6c:c8:da:a8:6b:5d:29:75:45:3a:
         df:f7:dd:9c:ba:1a:25:e1:0c:5e:d6:a2:09:da:bc:81:0f:c3:
         a1:c2:c3:37:31:f8:86:87:7d:78:03:3d:e4:3c:ff:e1:a6:15:
         c6:fd:52:58:f6:d6:71:1e:86:1f:d3:c6:99:d3:56:b1:23:68:
         e5:9f:00:cf:9d:79:fe:b1:ff:4b:6d:d7:3f:42:6e:b6:1d:91:
         cb:b2:d7:b9:fa:30:36:0c:95:1b:ca:c7:d2:50:a4:7a:05:0d:
         f0:ea:5e:fb:05:21:a6:2b:ce:df:dd:05:af:c0:8c:c4:2b:34:
         69:0c:f9:1c:06:b7:6f:70:9b:36:6b:ee:91:93:e0:95:d2:6a:
         6b:53:d3:65:ec:01:ea:aa:28:99:19:22:d7:e1:23:7a:9f:e9:
         e6:02:9b:cf:e9:d9:4c:a8:1b:54:f3:b9:49:07:0a:a9:dd:bc:
         3b:b7:df:30:8e:52:c4:6f:c6:da:b5:92:8b:bb:21:78:cf:ad:
         4b:0d:e3:0b:96:3e:ec:eb:49:d4:c0:aa:d2:a9:5c:b1:87:38:
         4d:6c:4e:68:03:a1:01:5f:57:53:c2:b0:42:00:f9:0b:27:5f:
         e2:26:74:74:8f:a2:18:7c:50:79:62:d3:91:89:15:b4:4e:ca:
         f0:6f:26:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:30:43 2025 by rpki-client