Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
File:                     ogtTm8eSX3rsKacM9qGEeJGpsxI.mft (raw, json)
Hash identifier:          UoxWc3nrokxQDIGnhmZgAjNGtMGkj6vwsqOCNV5/m6k=
Subject key identifier:   CD:03:37:FA:84:01:8A:A4:23:EF:FC:42:0A:67:F3:19:41:B8:75:14
Authority key identifier: A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12
Certificate issuer:       /CN=F3642C0FAR/serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
Certificate serial:       04EA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
Manifest number:          04E9
Signing time:             Sat 23 Aug 2025 02:51:21 +0000
Manifest this update:     Sat 23 Aug 2025 02:51:20 +0000
Manifest next update:     Mon 25 Aug 2025 02:51:20 +0000
Files and hashes:         1: ogtTm8eSX3rsKacM9qGEeJGpsxI.crl (hash: LRHxj7BvDB9KW/4SjCZ3xKHjABzN2pCXh1qJOLRXRSs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
                          rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1258 (0x4ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642C0FAR, serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
        Validity
            Not Before: Aug 23 02:51:20 2025 GMT
            Not After : Aug 25 02:51:20 2025 GMT
        Subject: CN=68a92ca8-ed45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:58:28:29:bc:16:bd:5d:36:45:6e:de:a8:9c:
                    7a:a5:c8:c2:51:14:be:8a:9d:8d:56:48:d7:f8:37:
                    61:af:3a:68:22:ff:c6:16:41:7f:69:95:91:a1:ff:
                    71:31:28:da:8b:47:22:eb:68:07:dc:29:5b:ab:5b:
                    5d:ae:4e:50:1b:33:e0:da:e7:d6:ae:60:82:92:5a:
                    18:a2:4c:65:95:75:46:18:63:31:8c:b9:0e:a2:1f:
                    a5:f5:b9:75:12:4f:29:53:64:03:4c:d5:a1:a5:9f:
                    ef:a7:f0:16:96:23:e8:99:3c:d5:7d:0f:eb:18:d4:
                    59:f4:1d:70:76:20:9e:d1:f3:b0:f0:b0:33:a7:27:
                    a8:16:e7:d1:f4:9b:e2:7b:7e:d4:bc:27:61:f1:c3:
                    34:4b:7f:8c:2c:2b:c3:a5:93:71:93:82:27:f7:b0:
                    81:af:04:36:44:4c:d8:9e:ae:f9:fe:56:14:f9:93:
                    4f:9e:69:17:e8:a9:76:7f:e4:5d:d2:d5:14:b6:e9:
                    11:00:37:cf:e2:37:49:9e:6d:42:49:87:2a:65:b2:
                    a2:de:87:86:5e:08:36:27:86:22:98:1f:2e:14:49:
                    32:56:fd:66:9a:f4:62:49:04:ca:c8:04:95:ef:df:
                    33:17:90:dc:04:11:56:76:c3:ea:6b:90:a8:92:d1:
                    8e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:03:37:FA:84:01:8A:A4:23:EF:FC:42:0A:67:F3:19:41:B8:75:14
            X509v3 Authority Key Identifier:
                keyid:A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ff:8a:1f:b4:d0:aa:18:de:7c:c3:b2:3d:74:d1:ef:06:f6:
         8f:cf:42:da:a1:f7:f8:e5:fa:b8:b0:4d:7b:47:35:0e:85:89:
         3f:07:a7:b4:15:79:65:e3:6e:25:47:5f:e7:63:10:28:4c:f3:
         a9:6c:ba:e8:ee:c6:0a:43:ea:09:ba:52:61:e1:74:e6:15:67:
         86:20:c7:dd:be:50:46:db:5c:ac:d8:fa:0e:f9:bf:16:08:7f:
         a5:1d:c1:f7:8c:90:e7:59:b4:9f:9d:af:b1:9d:29:22:07:9b:
         24:1f:bb:da:4d:4a:49:a9:14:a3:42:da:70:e3:16:f3:bb:a5:
         7d:a6:fc:b3:f7:09:c9:6e:e7:3c:fc:ea:c2:d9:30:57:88:e1:
         f0:0a:4c:d2:e3:3b:3e:fa:39:3c:f5:55:09:bb:a2:30:e4:7e:
         08:67:0e:16:88:e6:2c:c8:09:e9:17:4a:85:ad:1d:e5:a4:d7:
         c4:1c:b3:d8:7f:c7:7c:da:84:9d:cb:52:c6:d6:c3:e9:c9:e7:
         3d:30:d5:b0:8e:37:a3:db:a4:59:17:dd:40:16:0f:07:e5:5d:
         8a:01:f3:bf:bb:64:4c:a0:e6:b3:ec:31:ee:c5:56:a9:24:7a:
         d6:3f:fd:2d:05:0e:a6:c6:8b:d7:ad:f3:c3:59:dd:b0:d4:09:
         12:3e:12:72
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBOowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDJDMEZBUjExMC8GA1UEBRMoQTIwQjUzOUJDNzkyNUY3QUVDMjlBNzBDRjZBMTg0
Nzg5MUE5QjMxMjAeFw0yNTA4MjMwMjUxMjBaFw0yNTA4MjUwMjUxMjBaMBgxFjAU
BgNVBAMTDTY4YTkyY2E4LWVkNDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDeWCgpvBa9XTZFbt6onHqlyMJRFL6KnY1WSNf4N2GvOmgi/8YWQX9plZGh
/3ExKNqLRyLraAfcKVurW12uTlAbM+Da59auYIKSWhiiTGWVdUYYYzGMuQ6iH6X1
uXUSTylTZANM1aGln++n8BaWI+iZPNV9D+sY1Fn0HXB2IJ7R87DwsDOnJ6gW59H0
m+J7ftS8J2HxwzRLf4wsK8Olk3GTgif3sIGvBDZETNiervn+VhT5k0+eaRfoqXZ/
5F3S1RS26REAN8/iN0mebUJJhyplsqLeh4ZeCDYnhiKYHy4USTJW/Waa9GJJBMrI
BJXv3zMXkNwEEVZ2w+prkKiS0Y6rAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUzQM3
+oQBiqQj7/xCCmfzGUG4dRQwHwYDVR0jBBgwFoAUogtTm8eSX3rsKacM9qGEeJGp
sxIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQyQzBGLzYwOEU3MjI2QzA3OTExRUM5NkE5NjhENTVBNDBENTc3L29ndFRt
OGVTWDNyc0thY005cUdFZUpHcHN4SS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L29ndFRtOGVTWDNyc0thY005cUdFZUpHcHN4SS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NDJDMEYvNjA4RTcyMjZDMDc5MTFFQzk2QTk2OEQ1NUE0MEQ1
Nzcvb2d0VG04ZVNYM3JzS2FjTTlxR0VlSkdwc3hJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCW/4oftNCqGN58w7I9dNHvBvaPz0Laoff4
5fq4sE17RzUOhYk/B6e0FXll424lR1/nYxAoTPOpbLro7sYKQ+oJulJh4XTmFWeG
IMfdvlBG21ys2PoO+b8WCH+lHcH3jJDnWbSfna+xnSkiB5skH7vaTUpJqRSjQtpw
4xbzu6V9pvyz9wnJbuc8/OrC2TBXiOHwCkzS4zs++jk89VUJu6Iw5H4IZw4WiOYs
yAnpF0qFrR3lpNfEHLPYf8d82oSdy1LG1sPpyec9MNWwjjej26RZF91AFg8H5V2K
AfO/u2RMoOaz7DHuxVapJHrWP/0tBQ6mxovXrfPDWd2w1AkSPhJy
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:31:21 2025 by rpki-client