Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
File:                     s4rg2ENn30CCL75YUHD2mDzRgFk.mft (raw, json)
Hash identifier:          yupAOtJWmqc2Q1y4cv3ujTlwAIWhG5bbaHbyZpXC5ac=
Subject key identifier:   21:84:8A:F2:09:22:E0:E1:94:AD:5E:F6:0A:77:C3:AE:1B:C1:FC:18
Authority key identifier: B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59
Certificate issuer:       /CN=F3645590AR/serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
Certificate serial:       0160
Authority info access:    rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
Manifest number:          015F
Signing time:             Sat 17 May 2025 04:35:17 +0000
Manifest this update:     Sat 17 May 2025 04:35:17 +0000
Manifest next update:     Mon 19 May 2025 04:35:16 +0000
Files and hashes:         1: s4rg2ENn30CCL75YUHD2mDzRgFk.crl (hash: THiKgZo/WOYacq8nwId7IKoUPsYoBj2ctf+GtLv+UDA=)
                          2: 0630E34C27F911EF99C5B7167DDC24C2.roa (hash: u1Kgum9/rIa3gu9tEpPcpHBCjsDs7Hpw84FU4EIS7uY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                          rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 352 (0x160)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AR, serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
        Validity
            Not Before: May 17 04:35:17 2025 GMT
            Not After : May 19 04:35:16 2025 GMT
        Subject: CN=68281205-5c97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b4:33:94:9c:26:bc:17:81:50:25:c6:6b:16:
                    8c:42:dc:d8:d5:54:4d:18:a0:4f:fc:dc:ca:c5:d2:
                    12:51:6d:bd:aa:07:d8:17:00:b1:29:58:a8:2e:e1:
                    d5:08:fd:91:0d:3e:83:28:c8:25:27:10:6b:30:9f:
                    9e:98:5e:f6:d1:68:e8:d7:20:07:98:49:cf:fe:dc:
                    4e:55:35:d5:9e:10:b5:8f:98:1b:bd:21:20:bf:f5:
                    94:be:f5:cb:c6:87:92:60:46:5d:87:cc:03:65:08:
                    cb:af:74:a1:b1:6f:a6:cb:8f:09:c4:0b:d9:52:1f:
                    50:d6:3a:1d:ae:4b:44:24:3c:c8:cf:68:8e:31:b1:
                    f5:c2:e6:41:72:57:d4:b6:b7:5e:b7:c1:9d:31:29:
                    00:5b:a3:07:c5:41:51:76:a1:74:a5:dd:25:61:5c:
                    41:72:6c:0a:81:6e:ed:4f:00:d7:99:1d:22:37:66:
                    6a:f6:d5:b1:2f:2a:ac:9c:13:30:42:74:8e:01:d4:
                    a7:70:d7:cc:77:9a:60:84:1f:a5:68:a5:42:49:84:
                    98:4a:bb:c5:7b:ba:a1:65:b3:1c:0f:41:18:01:6e:
                    44:73:08:95:ba:f3:85:4c:3f:9f:95:69:f1:8d:7b:
                    7b:48:12:24:0b:25:ff:85:07:db:93:ff:a1:11:1a:
                    65:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:84:8A:F2:09:22:E0:E1:94:AD:5E:F6:0A:77:C3:AE:1B:C1:FC:18
            X509v3 Authority Key Identifier:
                keyid:B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:ed:62:04:f5:3d:a6:94:a6:67:7b:9c:dd:a3:3b:7b:e4:c2:
         92:89:a3:40:62:c3:61:91:6b:c3:f0:b4:e4:7a:36:7f:7c:97:
         ba:e7:0d:42:2b:d0:2c:ea:32:8d:96:8b:d1:cf:09:23:0f:15:
         13:49:66:82:50:f4:05:30:7c:47:39:21:3c:ed:a3:87:2f:c7:
         25:5b:eb:14:62:da:59:a9:06:77:8a:4a:73:9d:6f:c1:64:7d:
         b3:e7:2e:bf:74:45:58:4b:e2:63:c5:77:7b:60:95:9f:59:43:
         a4:d8:26:11:be:b9:ed:8b:7f:8c:48:74:2b:44:05:4c:68:45:
         f9:8f:2b:8e:ec:21:07:ce:ac:1e:6e:2d:91:ce:da:cc:45:ce:
         ef:ce:21:9b:87:d6:17:f6:a0:9a:5d:2a:67:5f:8b:b9:73:fe:
         d1:3c:38:57:dd:92:8c:49:2d:05:04:71:30:76:c2:28:1f:37:
         ef:fe:ec:2e:56:73:2e:fe:9b:8e:ba:ff:05:fa:dd:ca:f0:4c:
         b1:b1:32:6a:72:95:49:73:c2:64:1a:2e:98:fd:cc:73:a9:67:
         25:82:28:4f:a3:03:e6:a6:32:93:98:ae:2d:49:dd:94:92:ae:
         a4:60:88:fb:cc:db:32:2f:00:89:61:e6:f1:99:ad:3b:98:0a:
         16:3f:00:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:35:34 2025 by rpki-client