Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.mft
File:                     VdvLWIZ1BvehPgl-PTWa3WJwsXU.mft (raw, json)
Hash identifier:          eKB7OFkMLgTP+6C/c/S7sTyQo1hGKTdk0Hk4ueFgG1M=
Subject key identifier:   C1:33:A3:84:E7:C9:DE:9E:FC:82:07:60:1C:C7:E3:BB:25:36:9F:D4
Authority key identifier: 55:DB:CB:58:86:75:06:F7:A1:3E:09:7E:3D:35:9A:DD:62:70:B1:75
Certificate issuer:       /CN=F3623AE4AR/serialNumber=55DBCB58867506F7A13E097E3D359ADD6270B175
Certificate serial:       DF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VdvLWIZ1BvehPgl-PTWa3WJwsXU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.mft
Manifest number:          DE
Signing time:             Sun 06 Jul 2025 05:09:22 +0000
Manifest this update:     Sun 06 Jul 2025 05:09:21 +0000
Manifest next update:     Tue 08 Jul 2025 05:09:21 +0000
Files and hashes:         1: VdvLWIZ1BvehPgl-PTWa3WJwsXU.crl (hash: 3pj294HiakpYmopH3DxEQchw14hbykPBuJ01M1EvbIM=)
                          2: 0938C110B27111EFB0304D44762E951A.roa (hash: ay75fj6Xo/K8dMqIw1e1aVOA92l5Vt1QYzAgQ5lPJF8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.mft
                          rsync://rpki.afrinic.net/repository/arin/VdvLWIZ1BvehPgl-PTWa3WJwsXU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 08 Jul 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623AE4AR, serialNumber=55DBCB58867506F7A13E097E3D359ADD6270B175
        Validity
            Not Before: Jul  6 05:09:21 2025 GMT
            Not After : Jul  8 05:09:21 2025 GMT
        Subject: CN=686a0502-1178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:86:af:09:0a:fb:c8:ce:60:c1:10:7d:06:ca:
                    99:b1:c1:d7:86:7a:59:d1:fc:60:ce:64:59:54:41:
                    ea:0a:d0:bd:ea:aa:b9:a4:60:2f:c8:5b:22:25:4d:
                    ca:ea:6c:96:e1:33:c6:8f:66:0e:75:8f:d6:ac:72:
                    de:5a:9c:2f:4e:a0:91:2c:5a:26:39:2b:86:e8:a4:
                    a3:a6:84:eb:70:ec:c2:6d:23:52:68:3c:b0:08:0b:
                    01:e7:fd:00:43:19:83:85:fe:16:42:21:5a:8d:df:
                    ce:22:d6:52:77:69:d8:bf:b2:44:f1:2b:be:0f:e0:
                    67:39:c1:be:32:3c:8b:f0:fa:cd:cc:54:33:5d:4b:
                    be:94:f0:1f:58:9c:2a:dc:0c:58:df:de:98:c6:b5:
                    43:34:b2:12:4d:ce:41:85:ed:d9:b4:b8:18:b1:bf:
                    62:14:15:97:d2:83:28:6e:16:36:6c:9d:a2:17:56:
                    c8:2c:55:77:ef:e5:31:9a:39:8a:a6:0a:1c:90:b4:
                    3c:57:14:2f:ec:b3:53:9f:1b:33:cd:5d:7f:62:3d:
                    46:17:45:d2:bf:7b:c1:c5:b0:30:20:48:f5:ea:ef:
                    b0:8f:b5:f1:0f:c8:67:ef:c6:45:2f:01:d2:a2:78:
                    3a:12:9f:3e:15:64:e1:ee:7a:19:82:63:c2:ac:c7:
                    37:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:33:A3:84:E7:C9:DE:9E:FC:82:07:60:1C:C7:E3:BB:25:36:9F:D4
            X509v3 Authority Key Identifier:
                keyid:55:DB:CB:58:86:75:06:F7:A1:3E:09:7E:3D:35:9A:DD:62:70:B1:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VdvLWIZ1BvehPgl-PTWa3WJwsXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c2:bf:ac:8d:0c:f0:10:b2:89:6f:59:3d:84:54:39:f8:9a:
         f9:84:eb:35:4f:43:ee:2d:ea:87:75:6d:a6:dc:76:45:5c:68:
         e0:55:79:11:86:ca:a2:95:e2:4c:5d:68:82:00:96:1f:53:d0:
         81:e4:07:11:12:b0:99:1e:d4:d0:af:fd:b1:6d:dd:32:13:e6:
         8e:b6:9b:07:4b:01:67:d9:6e:ca:0a:69:f0:40:57:43:b4:ab:
         a6:a1:5c:fc:be:b6:c4:a4:ce:36:30:c0:8d:6f:7a:0a:f7:e3:
         1c:04:62:f0:76:b5:1a:f1:91:1a:67:a4:a4:08:0c:66:c3:63:
         9a:72:5b:a0:b9:95:76:5e:e5:0f:8d:aa:99:67:b9:f1:19:1d:
         fc:64:da:e6:a3:a9:57:b7:40:d9:b7:bd:ef:07:80:83:f6:eb:
         af:d8:b0:fd:b0:ee:37:35:af:bc:b5:7c:4f:60:4c:7b:ab:fd:
         45:72:a0:63:18:4c:a4:5c:f4:d4:7b:dd:31:48:11:b8:32:40:
         da:85:07:f7:4b:27:ab:13:a0:18:b2:85:e7:ff:51:8e:47:a2:
         eb:2b:55:c1:38:c9:ec:2a:64:68:3c:82:ad:d2:f6:c3:55:87:
         54:30:ce:a4:2c:e7:59:7d:b0:74:8c:f7:c2:aa:d8:c1:12:4c:
         e7:54:49:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 11:42:41 2025 by rpki-client