Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
File:                     DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft (raw, json)
Hash identifier:          se6zs9pNZkYtL8amXgNOluHE/AXxyKtee4Zur/qf7YI=
Subject key identifier:   BE:0F:94:6A:EA:D7:72:11:40:81:06:7B:8D:9A:85:A4:32:18:4D:71
Authority key identifier: 0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9
Certificate issuer:       /CN=F3639A71AR/serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
Certificate serial:       01F9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
Manifest number:          01F8
Signing time:             Sat 10 May 2025 04:15:01 +0000
Manifest this update:     Sat 10 May 2025 04:15:00 +0000
Manifest next update:     Mon 12 May 2025 04:15:00 +0000
Files and hashes:         1: DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl (hash: EmyR9E5DX8KsuaRnYxqkUYisJOq95cBjhsPDsWJBipg=)
                          2: CE2F2690AD5311EE8E27B3B1775412E6.roa (hash: 8IJ5uu88BzDrvRLts60KNKjSTABo8XS/43EbjaMJPDo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                          rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AR, serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
        Validity
            Not Before: May 10 04:15:00 2025 GMT
            Not After : May 12 04:15:00 2025 GMT
        Subject: CN=681ed2c5-8fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:59:d5:d8:c8:31:a9:75:60:b6:4b:80:4e:65:
                    01:60:2b:50:35:b1:6d:8a:56:98:b1:a7:69:31:8d:
                    1d:f4:6c:bc:7b:73:e3:57:8c:5b:d2:30:1c:55:4d:
                    e7:3c:56:cd:6d:c9:4c:6f:a6:ff:c7:95:0c:aa:6a:
                    db:04:23:10:58:c7:cb:98:29:2e:61:43:b6:bf:da:
                    0e:13:d4:11:c4:92:20:cb:18:e5:74:9e:78:5d:a2:
                    ce:2f:7f:2a:dc:3c:25:8d:48:7b:7a:23:c9:da:c9:
                    06:e7:ce:e4:00:43:3d:32:57:dc:69:b9:3e:ba:0e:
                    c2:c6:29:fc:72:cb:71:ef:34:be:60:31:aa:1f:71:
                    76:7a:14:bf:88:5b:c8:93:66:fe:66:5a:4e:2a:b7:
                    42:15:87:81:60:ce:6a:3d:4b:a8:f5:24:15:ab:2a:
                    ff:4f:5d:26:0a:dc:94:d3:af:15:39:5d:17:2b:33:
                    1e:c5:1f:23:3f:d2:1d:7a:83:5d:2b:69:87:9b:28:
                    06:f0:5b:e0:d8:e8:2b:9d:ca:17:73:ee:7f:d1:73:
                    35:77:ed:de:67:15:e8:94:ef:a2:f7:74:44:4b:37:
                    f9:29:fd:2a:f2:8e:c2:1d:5f:51:dc:f1:b4:82:51:
                    40:a6:de:09:39:ae:fc:96:03:5a:d4:00:73:fb:8a:
                    60:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0F:94:6A:EA:D7:72:11:40:81:06:7B:8D:9A:85:A4:32:18:4D:71
            X509v3 Authority Key Identifier:
                keyid:0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b8:71:54:60:b5:d4:0b:82:32:87:c2:50:9f:92:cd:46:98:
         ed:67:93:5b:07:c9:c4:c3:4a:db:41:a7:23:58:86:eb:75:ce:
         40:ea:d6:55:c1:b6:41:5a:58:0e:91:b7:3a:ab:14:56:e8:31:
         a3:47:cf:35:29:df:30:7a:e1:4e:01:f6:b0:9e:66:47:69:0c:
         91:10:e4:59:7d:75:82:3f:f0:33:3f:bf:80:db:cb:20:32:98:
         39:77:c4:15:d0:3f:8f:34:53:a9:43:b0:0b:f7:26:1f:bf:44:
         2c:07:89:09:3f:13:3f:fc:2b:b1:09:66:eb:1d:83:4c:a3:d9:
         85:13:a9:87:16:98:90:71:44:13:05:22:4c:70:1e:89:43:68:
         22:21:2a:d5:f4:b2:35:e7:04:6a:af:74:24:06:46:2d:88:63:
         02:86:fc:2c:1e:19:1f:e9:65:39:a5:63:48:5a:08:6c:5f:fb:
         96:e4:67:9b:88:84:c2:f4:5e:b6:10:91:7f:ab:9e:19:ba:b0:
         bb:c4:61:e3:dc:e1:37:70:f3:5d:49:c4:66:b6:4d:95:19:1d:
         00:6d:1c:cd:ab:5e:1c:e0:7b:99:29:83:d7:3a:88:c3:57:fd:
         31:0c:df:a3:eb:6f:bc:2a:4e:74:ac:e9:ef:00:dd:0d:9a:8c:
         32:ac:73:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:29:36 2025 by rpki-client