Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
File:                     -sDqJCqAq1tZab-mHdXZlLIVbrU.mft (raw, json)
Hash identifier:          AqZNc9ZZOFK2okHbvaLFq5L5ggBgqrxU24O7QAPZ/d8=
Subject key identifier:   B3:2D:1F:FD:E6:3F:15:FC:5F:12:90:5D:90:2C:2E:00:F0:18:5C:CD
Authority key identifier: FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5
Certificate issuer:       /CN=F364379DAR/serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
Certificate serial:       0338
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
Manifest number:          0337
Signing time:             Tue 13 May 2025 03:39:11 +0000
Manifest this update:     Tue 13 May 2025 03:39:10 +0000
Manifest next update:     Thu 15 May 2025 03:39:10 +0000
Files and hashes:         1: -sDqJCqAq1tZab-mHdXZlLIVbrU.crl (hash: c5GhatP5eY8syFH/jMkBFUXBmGLG8VxU9P+FmuhivAY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
                          rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 May 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 824 (0x338)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364379DAR, serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
        Validity
            Not Before: May 13 03:39:10 2025 GMT
            Not After : May 15 03:39:10 2025 GMT
        Subject: CN=6822bedf-d6fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:09:d1:5b:4a:19:78:d3:46:c1:66:0d:31:71:
                    9d:75:72:4f:05:9f:43:07:9d:8c:3a:7a:97:b7:0d:
                    53:c8:6b:58:49:40:96:06:4a:a9:00:9c:bf:0c:84:
                    f3:57:56:38:5b:8a:3d:78:64:b4:cd:18:78:d3:69:
                    1e:e0:6e:f6:48:a4:8a:53:18:5b:52:10:8a:e7:45:
                    21:e2:75:b6:4e:d3:74:0d:0e:d4:f7:b1:fb:38:f3:
                    69:06:ca:15:28:ba:84:c3:1b:66:5a:71:dd:c6:3d:
                    cb:22:66:ad:76:dd:2a:94:37:cb:38:61:9e:97:3e:
                    f3:61:c6:1b:32:ea:7a:48:68:d0:fd:c9:14:98:b4:
                    08:c4:97:19:04:e5:87:44:86:10:b8:69:15:cb:a7:
                    b6:b2:cf:cb:69:31:b3:37:81:4c:98:c1:89:e3:bf:
                    bc:36:b5:53:76:ee:a9:48:3c:a7:47:3b:d6:a6:d0:
                    4a:1b:a0:e0:7e:8c:0e:c3:97:ec:52:2f:d5:d6:ce:
                    06:72:e6:a5:5b:7a:a8:06:c3:39:23:44:18:91:cc:
                    77:95:4b:10:ff:20:92:2e:f3:34:af:50:c5:74:f4:
                    14:96:cd:b1:de:8a:cc:2b:6b:03:22:69:68:37:7d:
                    bc:4e:3d:4d:59:ac:ed:e3:44:14:20:6f:75:73:ba:
                    35:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:2D:1F:FD:E6:3F:15:FC:5F:12:90:5D:90:2C:2E:00:F0:18:5C:CD
            X509v3 Authority Key Identifier:
                keyid:FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:3b:49:f4:d4:c7:da:70:a1:1e:46:65:78:f1:cf:c1:27:bf:
         05:10:9d:2e:17:f0:58:0f:0d:92:8e:20:ac:de:1c:47:7c:1a:
         93:30:e0:3c:d2:5f:d1:04:66:ab:d1:86:94:7f:b0:8d:db:fe:
         df:86:75:35:90:78:4e:2a:90:60:0e:22:2d:c2:3f:4b:50:6b:
         19:d6:9f:f4:5f:05:e9:19:6d:5b:ea:72:ca:46:37:82:6d:bd:
         56:b9:58:bf:ed:a8:8e:97:f5:38:13:41:80:45:9d:41:9d:ac:
         1c:78:42:c7:e6:46:72:d7:37:ed:46:86:0a:9e:35:17:1c:92:
         e7:61:9b:a1:1b:37:60:a3:dd:20:f4:fc:b1:25:17:5e:e4:a2:
         89:7e:cd:bf:ca:6b:e8:88:47:4f:b0:af:04:a8:f3:eb:a5:5b:
         f0:cd:65:d6:83:88:de:74:96:5c:2d:65:83:09:ff:b3:58:ef:
         4f:0d:ba:a4:64:6d:a3:c2:fe:78:69:33:1a:ba:85:0b:37:c5:
         a7:62:a1:0c:00:ef:e1:97:64:9f:0f:a8:ed:79:87:c9:7b:8f:
         5d:23:38:1c:3d:21:9b:30:c3:f4:da:81:d6:34:94:4d:e1:a1:
         25:17:c1:61:60:5b:32:2c:17:df:67:5e:8f:40:a8:c2:16:62:
         05:d7:d5:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:58:11 2025 by rpki-client