Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
File:                     QVvN73HfdO_cZVY4QJM9lPIraRM.mft (raw, json)
Hash identifier:          c1Aks0GWBMOlz/DjvcLGu2A93d4vcaO2cjps87I8Hq8=
Subject key identifier:   C1:8D:C8:71:4A:E6:4D:F1:C9:F1:94:EE:F5:2D:12:E8:F6:70:4D:C3
Authority key identifier: 41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13
Certificate issuer:       /CN=F36374C9AR/serialNumber=415BCDEF71DF74EFDC65563840933D94F22B6913
Certificate serial:       0CD0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
Manifest number:          0CCF
Signing time:             Mon 12 May 2025 01:04:01 +0000
Manifest this update:     Mon 12 May 2025 01:04:00 +0000
Manifest next update:     Wed 14 May 2025 01:04:00 +0000
Files and hashes:         1: QVvN73HfdO_cZVY4QJM9lPIraRM.crl (hash: AiwfdMoAvUJV0eBOB6WprNC/ClSJ07RHmZXqdr87lwE=)
                          2: A3321ED8542E11E6BE4E521EF8AEA228.roa (hash: sJ9cmmKEMJXtaW4GTF37G3rJicRaTpT/POSsPQBapsQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
                          rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3280 (0xcd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36374C9AR, serialNumber=415BCDEF71DF74EFDC65563840933D94F22B6913
        Validity
            Not Before: May 12 01:04:00 2025 GMT
            Not After : May 14 01:04:00 2025 GMT
        Subject: CN=68214901-5637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0f:8b:87:23:f9:83:5e:f0:34:17:67:5f:7f:
                    dd:89:cf:54:dc:48:14:2e:fe:d4:0c:1f:a7:92:2d:
                    32:70:20:c5:34:e9:06:aa:dc:b4:71:07:ac:0c:28:
                    58:0f:49:62:48:34:ac:43:65:a6:5c:3b:c4:7f:87:
                    a8:dd:da:e4:2e:dd:b8:7c:33:1a:6a:66:d9:92:d9:
                    06:d2:e9:7d:51:fa:c9:2c:95:a3:69:08:a0:d2:d3:
                    d9:bc:d3:ce:e5:8e:11:20:f1:ec:11:89:40:c0:17:
                    08:fc:8a:82:16:0d:9e:98:f7:28:6b:c9:f6:d1:6f:
                    d2:53:ae:88:1d:3f:89:3c:05:30:95:0b:7e:5e:33:
                    65:50:fc:59:4d:16:e8:89:30:e5:c9:03:72:28:51:
                    10:bb:74:8c:c4:82:e8:bf:be:d0:2b:a8:a0:4b:b9:
                    de:30:f2:41:f5:ad:0b:0c:cc:63:be:64:8f:92:ef:
                    20:6b:be:9b:5c:e3:6c:18:2e:81:74:3d:0b:9b:4e:
                    9b:cd:6b:83:c6:3b:21:96:dd:36:a7:df:cf:09:df:
                    cc:b3:35:51:b0:ab:8b:c1:d2:50:23:a1:b5:09:49:
                    04:5a:51:6c:d6:83:99:ef:5e:cc:d9:cb:a6:7e:fa:
                    74:f8:59:1d:aa:00:fe:9f:66:19:7a:67:44:f2:16:
                    63:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8D:C8:71:4A:E6:4D:F1:C9:F1:94:EE:F5:2D:12:E8:F6:70:4D:C3
            X509v3 Authority Key Identifier:
                keyid:41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:57:2c:b4:fb:70:69:5e:3e:87:5d:e1:a4:b3:e2:f6:e4:6e:
         2c:8f:29:10:2b:4d:0c:9f:6d:40:8d:e2:96:f9:e1:03:c0:48:
         65:9a:0a:ec:c4:14:53:57:06:1d:ff:ff:24:62:f4:6e:72:a6:
         1a:13:65:65:7c:67:87:69:1b:24:96:40:a9:ba:7d:9d:5e:4e:
         84:0c:4e:75:65:fa:c5:62:79:0d:4c:f9:e3:28:b3:97:c8:14:
         98:f3:64:a5:ef:6d:c5:f5:23:0e:4a:ad:a0:ce:d3:af:cf:4d:
         ce:dd:c4:b9:cb:32:5c:be:71:70:c2:7b:57:be:50:82:cb:80:
         0b:6d:f3:a0:2b:4b:f2:6f:20:81:cd:fc:ae:16:c3:74:4d:07:
         a6:ab:3f:b8:71:f5:6b:78:ed:7c:f4:91:ae:90:a9:6d:79:a7:
         62:f9:43:7e:50:45:dc:3b:46:4c:5c:ed:db:ca:df:3a:57:3f:
         14:0f:8b:84:cc:9a:23:6b:34:8d:f1:5b:b2:6f:74:f9:b8:0c:
         11:0f:59:12:46:56:8e:f8:d8:f6:78:a0:e0:aa:0b:4e:3a:d6:
         cd:71:76:99:39:d6:0d:c8:47:c9:1d:57:66:9b:12:55:8c:27:
         59:8e:ef:55:f0:0d:99:f2:c5:2a:c6:e5:1b:b9:e1:a7:b5:7c:
         d5:4a:2e:0e
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDNAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Mzc0QzlBUjExMC8GA1UEBRMoNDE1QkNERUY3MURGNzRFRkRDNjU1NjM4NDA5MzNE
OTRGMjJCNjkxMzAeFw0yNTA1MTIwMTA0MDBaFw0yNTA1MTQwMTA0MDBaMBgxFjAU
BgNVBAMTDTY4MjE0OTAxLTU2MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCoD4uHI/mDXvA0F2dff92Jz1TcSBQu/tQMH6eSLTJwIMU06Qaq3LRxB6wM
KFgPSWJINKxDZaZcO8R/h6jd2uQu3bh8MxpqZtmS2QbS6X1R+skslaNpCKDS09m8
087ljhEg8ewRiUDAFwj8ioIWDZ6Y9yhryfbRb9JTrogdP4k8BTCVC35eM2VQ/FlN
FuiJMOXJA3IoURC7dIzEgui/vtArqKBLud4w8kH1rQsMzGO+ZI+S7yBrvptc42wY
LoF0PQubTpvNa4PGOyGW3Tan388J38yzNVGwq4vB0lAjobUJSQRaUWzWg5nvXszZ
y6Z++nT4WR2qAP6fZhl6Z0TyFmONAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUwY3I
cUrmTfHJ8ZTu9S0S6PZwTcMwHwYDVR0jBBgwFoAUQVvN73HfdO/cZVY4QJM9lPIr
aRMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM3NEM5LzUwMjRERTQyNTQyRTExRTZCOEJFMDcxRUY4QUVBMjI4L1FWdk43
M0hmZE9fY1pWWTRRSk05bFBJcmFSTS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1FWdk43M0hmZE9fY1pWWTRRSk05bFBJcmFSTS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2Mzc0QzkvNTAyNERFNDI1NDJFMTFFNkI4QkUwNzFFRjhBRUEy
MjgvUVZ2TjczSGZkT19jWlZZNFFKTTlsUElyYVJNLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjVyy0+3BpXj6HXeGks+L25G4sjykQK00M
n21AjeKW+eEDwEhlmgrsxBRTVwYd//8kYvRucqYaE2VlfGeHaRsklkCpun2dXk6E
DE51ZfrFYnkNTPnjKLOXyBSY82Sl723F9SMOSq2gztOvz03O3cS5yzJcvnFwwntX
vlCCy4ALbfOgK0vybyCBzfyuFsN0TQemqz+4cfVreO189JGukKlteadi+UN+UEXc
O0ZMXO3byt86Vz8UD4uEzJojazSN8Vuyb3T5uAwRD1kSRlaO+Nj2eKDgqgtOOtbN
cXaZOdYNyEfJHVdmmxJVjCdZju9V8A2Z8sUqxuUbueGntXzVSi4O
-----END CERTIFICATE-----
Generated at Mon May 12 21:34:52 2025 by rpki-client