Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.mft
File:                     iP6Ne9O33D1UQluMc20s7Dh_c3w.mft (raw, json)
Hash identifier:          CkxsAyjqAfOIH/IdQl2FPmt+d9dOLdWptvXkmq9oxoY=
Subject key identifier:   49:C0:9D:41:D5:87:08:6F:0C:F0:73:A7:26:76:87:5F:40:F3:16:AA
Authority key identifier: 88:FE:8D:7B:D3:B7:DC:3D:54:42:5B:8C:73:6D:2C:EC:38:7F:73:7C
Certificate issuer:       /CN=F3644FCCAR/serialNumber=88FE8D7BD3B7DC3D54425B8C736D2CEC387F737C
Certificate serial:       04D6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iP6Ne9O33D1UQluMc20s7Dh_c3w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.mft
Manifest number:          04D5
Signing time:             Sat 23 Aug 2025 02:53:19 +0000
Manifest this update:     Sat 23 Aug 2025 02:53:19 +0000
Manifest next update:     Mon 25 Aug 2025 02:53:19 +0000
Files and hashes:         1: iP6Ne9O33D1UQluMc20s7Dh_c3w.crl (hash: 5sokBU+d4rlTWSecF45/DUkMOPQrQ+Q2j3+aI9kB5+Y=)
                          2: 33698F34D12B11ECA93204ECF1222468.roa (hash: hag20uRl3/i6kvsUjp3dDDisdoIlpZDsNJowq7IAf4U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.mft
                          rsync://rpki.afrinic.net/repository/arin/iP6Ne9O33D1UQluMc20s7Dh_c3w.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1238 (0x4d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644FCCAR, serialNumber=88FE8D7BD3B7DC3D54425B8C736D2CEC387F737C
        Validity
            Not Before: Aug 23 02:53:19 2025 GMT
            Not After : Aug 25 02:53:19 2025 GMT
        Subject: CN=68a92d1f-93b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e0:79:26:e5:ab:6c:c6:86:7e:f0:cf:50:5e:
                    ac:fe:cc:a1:7a:01:be:fc:66:3e:49:4d:2a:85:cc:
                    ae:1e:26:5e:5c:91:2a:a4:64:76:e6:b1:e0:33:ea:
                    59:8d:29:66:c7:21:25:c1:4f:f8:41:88:aa:c9:e4:
                    52:e1:8a:47:bf:e1:f3:e0:8d:fe:61:19:05:13:43:
                    b1:d4:24:71:56:9c:57:23:df:98:4c:96:50:70:80:
                    e3:34:88:38:9a:53:eb:85:c1:2c:bf:48:e2:02:da:
                    44:1f:9a:58:80:20:82:9b:d9:fb:cd:51:4e:47:ae:
                    ce:d6:3a:b3:8d:4c:cb:5e:76:1e:c2:d5:41:aa:8d:
                    44:6d:07:0e:2e:cf:c6:cd:4c:ce:69:43:60:bd:2e:
                    d9:40:4d:c2:43:af:cf:fd:0a:b7:02:c5:46:9b:66:
                    24:4c:7d:e6:9a:ed:2a:48:34:6f:b4:fc:4a:16:24:
                    bb:48:63:5c:26:ab:6b:a5:ab:8e:c9:de:59:c2:ce:
                    15:d5:ef:2a:d0:31:73:cf:ad:09:42:aa:21:a6:23:
                    8d:49:0c:f6:19:91:54:77:47:17:a4:76:84:cb:ff:
                    83:a1:d8:29:de:47:2c:b0:31:3a:89:58:96:50:9d:
                    97:18:e3:77:87:9a:ea:c0:b4:f1:3e:47:c6:da:f7:
                    2d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C0:9D:41:D5:87:08:6F:0C:F0:73:A7:26:76:87:5F:40:F3:16:AA
            X509v3 Authority Key Identifier:
                keyid:88:FE:8D:7B:D3:B7:DC:3D:54:42:5B:8C:73:6D:2C:EC:38:7F:73:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iP6Ne9O33D1UQluMc20s7Dh_c3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:d1:50:43:ea:35:ba:5d:ca:bb:3d:36:ff:d1:5e:d8:4f:73:
         ad:ea:aa:14:31:f4:66:b9:12:1d:6c:c3:25:3f:d2:15:e8:a8:
         5f:47:74:54:86:67:1f:83:b3:b4:61:c3:2b:f9:59:89:97:ea:
         24:07:95:a6:97:e4:4c:24:f4:63:dc:56:4e:73:7c:62:ab:df:
         67:71:6f:83:c9:37:5d:29:e2:f5:1c:5a:58:76:c3:30:4e:0c:
         27:05:e5:7e:8f:a2:71:14:7d:ee:01:e1:f4:9a:2b:b3:68:33:
         f2:c3:e1:fc:d0:69:bb:24:35:5f:38:91:08:19:97:9b:ec:3d:
         e4:f2:46:fc:8d:00:b1:74:a0:6e:17:cb:0c:b6:90:c1:72:bf:
         38:3d:ef:f2:be:51:6e:ae:fc:d5:5f:d7:6e:e1:2b:62:09:ce:
         9b:cc:6d:ea:91:be:8b:27:2f:25:5e:e2:02:be:23:4a:fa:0b:
         3e:5a:37:f4:79:bf:05:f4:d2:2a:e6:a9:36:c2:ae:f4:ec:b6:
         6f:4d:52:ae:e3:6c:b5:6f:7a:b4:cf:35:7d:85:c3:50:c4:3f:
         34:74:13:29:6b:a2:9e:e5:a5:76:46:f4:ac:89:9c:bd:f4:67:
         95:4b:d0:11:24:9c:f1:08:70:a0:00:a5:93:c6:d2:67:f6:6a:
         db:c4:04:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:37:25 2025 by rpki-client