Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
File:                     1qTOslDhuJgjxaxDmHTTUfkMQuY.mft (raw, json)
Hash identifier:          ZkMyOO5ovHs/ndPftjvGBX1QnhIdAJRXbCFVVOxC828=
Subject key identifier:   A8:40:55:7E:C9:61:97:B9:57:41:E9:18:82:82:AA:0D:5B:39:ED:4D
Authority key identifier: D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6
Certificate issuer:       /CN=F3627A02AR/serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
Certificate serial:       09D4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
Manifest number:          09CE
Signing time:             Fri 16 May 2025 01:05:43 +0000
Manifest this update:     Fri 16 May 2025 01:05:42 +0000
Manifest next update:     Sun 18 May 2025 01:05:42 +0000
Files and hashes:         1: 1qTOslDhuJgjxaxDmHTTUfkMQuY.crl (hash: zgc9VRY3QObZN88Gb+7e4R6U6+ydgtc8VtWAZHCJpxc=)
                          2: 673C61B4A88611ED9FE7EDD4F1222468.roa (hash: m91FhF+zJneUBb3UfLyzUzRvHvpK/0b7/Z5lBS15Q2I=)
                          3: B03DD41482B211ED9ACDF2D8F1222468.roa (hash: p4erYRKk741+pc1GTQOQg0ZDNMWUeJrKmmr5PjLZGWc=)
                          4: 9C57BBCA514411E9819FB57FF8AEA228.roa (hash: a2EFqum38j7M+ZpqwnpRi/IEA/fqXEm99Nf0ZysxusA=)
                          5: 1A025986C33311E8AC8D2975F8AEA228.roa (hash: Jl05SvMReaOz3j6YRMEohYjQhYufWTyW+plH8imsl5A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
                          rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 18 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2516 (0x9d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627A02AR, serialNumber=D6A4CEB250E1B89823C5AC439874D351F90C42E6
        Validity
            Not Before: May 16 01:05:42 2025 GMT
            Not After : May 18 01:05:42 2025 GMT
        Subject: CN=68268f67-8834
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:71:46:3c:02:c2:1f:b1:49:3b:10:0f:77:ed:
                    7f:ff:bb:a9:7e:b9:2f:04:14:a8:af:80:6a:c5:e3:
                    37:82:82:47:04:4e:32:f3:29:fe:85:01:fa:5b:a4:
                    08:b3:8f:c2:c4:da:59:1c:86:82:fc:c7:19:51:aa:
                    43:d6:1c:24:aa:8f:86:3a:0c:13:4b:51:93:91:67:
                    6b:11:16:f4:36:cc:20:d4:e5:96:4c:fe:78:f7:ad:
                    97:ec:6a:6d:30:7b:b3:67:ac:60:25:0b:2a:15:ac:
                    e4:03:40:47:c5:9a:d0:f5:7b:c2:40:c9:d6:b4:11:
                    99:0b:99:8b:55:df:b5:40:42:61:61:77:25:76:d0:
                    9c:44:13:53:bb:c1:24:03:4c:a3:a8:d3:9d:fd:06:
                    e7:9d:f4:3a:46:fa:c5:e8:5b:74:88:6d:c5:5b:6f:
                    5f:68:b9:59:7d:6d:76:04:cf:0d:fa:32:0d:24:d8:
                    af:c0:76:21:91:4f:a1:ae:0a:f9:85:f7:5e:67:9b:
                    0d:eb:9a:8e:c8:ef:f7:22:8a:a8:cf:4d:be:d8:16:
                    35:15:a3:0a:8e:16:83:46:d3:9d:2a:f2:31:ac:63:
                    5a:c2:b0:f9:16:8b:a2:82:0d:72:eb:64:fa:d2:9d:
                    44:28:b8:74:25:58:19:f1:70:85:33:6b:e6:d5:9f:
                    66:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:40:55:7E:C9:61:97:B9:57:41:E9:18:82:82:AA:0D:5B:39:ED:4D
            X509v3 Authority Key Identifier:
                keyid:D6:A4:CE:B2:50:E1:B8:98:23:C5:AC:43:98:74:D3:51:F9:0C:42:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/1qTOslDhuJgjxaxDmHTTUfkMQuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627A02/39577B2AB58E11E8B60A4064F8AEA228/1qTOslDhuJgjxaxDmHTTUfkMQuY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c1:52:82:a6:9a:ed:22:81:95:10:8d:e1:8d:b0:bc:57:97:
         f0:5b:de:ed:ac:31:51:c8:82:f1:89:e4:a0:2e:eb:7d:21:93:
         df:9b:c7:99:ce:84:0a:95:28:4d:73:7b:84:0b:2b:22:6c:74:
         69:8b:3a:dd:6f:0c:a3:4c:0b:e8:1f:87:68:93:07:ad:83:4d:
         06:97:89:89:2a:a7:f3:eb:81:81:26:2b:78:f2:b1:ba:2f:e5:
         0d:ae:b1:d9:b1:90:ed:25:7d:88:c6:f3:03:e7:5b:5e:c0:c0:
         f8:67:6a:a1:47:c8:5e:0d:5a:25:10:55:ef:f3:87:88:7b:67:
         b2:80:36:21:96:07:81:22:34:94:4e:19:a1:4e:f9:a3:bf:d2:
         4c:f7:72:cd:da:6b:da:b1:6c:06:8e:06:9f:cc:94:54:e1:ba:
         54:77:d0:62:b1:46:91:61:a7:f8:6e:fb:5f:57:ad:ab:b3:c4:
         8c:ce:80:05:bf:6b:96:f5:ed:c6:dd:0a:74:71:3f:5a:85:ae:
         66:27:c5:67:4b:93:1d:c6:da:2b:8d:d2:96:69:81:23:17:97:
         42:bd:15:1b:ab:42:8e:67:6f:2d:a1:ff:c7:02:b5:b1:b4:73:
         39:7a:96:63:1c:af:18:73:c9:6e:1e:6c:af:d8:76:75:12:01:
         5a:cd:50:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 14:43:47 2025 by rpki-client