Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
File:                     pqNDsn-fdirkHPfFvGtRFMKIWnc.mft (raw, json)
Hash identifier:          kS6I2f0eZleo7DlPllwZAgONTbj9/gj13ThtuqpjK8s=
Subject key identifier:   9E:83:64:1A:3E:DD:F1:99:3F:F1:3A:C8:80:98:23:0A:59:F6:47:00
Authority key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Certificate issuer:       /CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Certificate serial:       014F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
Manifest number:          014F
Signing time:             Sat 17 May 2025 04:37:30 +0000
Manifest this update:     Sat 17 May 2025 04:37:29 +0000
Manifest next update:     Mon 19 May 2025 04:37:29 +0000
Files and hashes:         1: pqNDsn-fdirkHPfFvGtRFMKIWnc.crl (hash: qE+1EIAogb/kzrGBkBeBNL824XEf1iEuWIDvYYaHjpY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
                          rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642CB1AR, serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
        Validity
            Not Before: May 17 04:37:29 2025 GMT
            Not After : May 19 04:37:29 2025 GMT
        Subject: CN=6828128a-4e85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:c3:7d:5d:e8:98:6e:04:1e:a4:f6:fc:c5:c1:
                    3f:db:aa:4e:ba:70:20:85:23:b2:2c:a5:f0:13:76:
                    c7:5e:f3:d1:23:6a:92:fb:c4:45:51:cd:1a:c9:5d:
                    3b:50:c7:eb:43:4f:b4:2e:be:76:c4:10:e8:6d:12:
                    cf:af:da:08:35:6b:43:79:0f:28:21:08:b8:08:6f:
                    f1:83:1c:c4:01:a7:7b:57:04:f5:4e:61:65:76:ff:
                    4b:7a:34:cb:27:eb:50:f5:c4:58:f7:42:2f:78:a3:
                    a7:a2:c0:5e:09:4b:b2:f7:84:41:4e:32:d6:a5:22:
                    df:7a:ed:89:fa:9c:c4:a9:9b:c4:5d:02:9b:25:02:
                    e2:41:a4:9d:ae:8f:e2:44:1c:22:22:3a:5d:d3:a0:
                    53:58:4e:43:cb:e7:e1:d7:c2:0e:c9:2f:ed:08:4b:
                    ae:fb:de:df:c5:a6:58:84:ad:cd:59:58:b3:be:7a:
                    59:5b:5f:75:f0:09:14:22:ab:61:e6:49:aa:42:94:
                    14:2e:7f:e8:2f:c1:60:c7:7c:15:4f:f8:48:0e:e2:
                    2a:3e:bf:34:59:58:47:15:f0:f6:ff:9c:62:90:3a:
                    41:71:d6:34:cb:f8:99:d5:1b:67:cf:b5:42:a8:d3:
                    0a:e8:0f:3c:e6:c5:d5:5d:98:5a:55:50:1d:6a:11:
                    b9:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:83:64:1A:3E:DD:F1:99:3F:F1:3A:C8:80:98:23:0A:59:F6:47:00
            X509v3 Authority Key Identifier:
                keyid:A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:21:85:9a:6e:02:55:80:40:93:ca:31:8e:d6:6d:2e:93:ea:
         09:9d:4c:40:a1:3e:63:27:5b:66:5e:0f:60:93:ba:79:4d:7f:
         38:2c:9d:8a:de:a7:80:bb:c5:f8:67:4e:15:a3:7a:02:12:d4:
         be:ac:73:4d:03:de:17:e1:7d:08:8a:db:13:6c:f4:ed:b6:c3:
         4f:18:ad:27:2c:0e:78:82:5c:ec:65:96:99:18:09:6e:75:cc:
         eb:b8:55:e6:3e:f6:71:64:9a:7f:4d:24:b6:f1:56:a6:c1:84:
         91:c8:22:24:1d:6d:8b:30:bb:15:4c:41:dc:6b:1d:2c:e4:3e:
         6e:04:9e:f5:5c:5a:c5:d5:5b:fc:3d:e7:ff:d9:55:f5:63:4f:
         40:6b:ed:b6:8a:09:c0:24:22:06:ca:25:0a:49:36:39:5e:b2:
         03:b6:7f:f2:37:52:d7:69:37:d7:cf:a4:f3:0e:86:76:c4:e0:
         46:16:41:6b:58:49:b3:bd:56:e1:c7:2e:78:43:91:ba:74:b3:
         4f:e0:ce:9b:12:11:b4:33:55:05:e9:66:9b:99:aa:49:75:e5:
         2f:1b:0e:9a:4d:18:5d:76:bc:9c:fd:06:ac:5a:ed:20:77:b0:
         1d:bf:e6:a1:ea:34:cd:2a:94:9f:da:ad:ca:16:2c:b9:58:7c:
         e9:e0:4d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:35:31 2025 by rpki-client