Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
File:                     s4rg2ENn30CCL75YUHD2mDzRgFk.mft (raw, json)
Hash identifier:          u3kOQPNmF/DhtelEYM0aAD0GdZGjzw8XHdfzNVJkP2E=
Subject key identifier:   1B:20:76:6C:28:21:F7:D1:5B:99:5B:E2:62:51:7D:F4:23:67:D4:DA
Authority key identifier: B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59
Certificate issuer:       /CN=F3645590AR/serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
Certificate serial:       0193
Authority info access:    rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
Manifest number:          0192
Signing time:             Sun 06 Jul 2025 04:38:51 +0000
Manifest this update:     Sun 06 Jul 2025 04:38:50 +0000
Manifest next update:     Tue 08 Jul 2025 04:38:50 +0000
Files and hashes:         1: s4rg2ENn30CCL75YUHD2mDzRgFk.crl (hash: 92ZnIYoYu1XHvCn43/G2LmdBZvEOR5Ya6nH/umWfc8A=)
                          2: 0630E34C27F911EF99C5B7167DDC24C2.roa (hash: u1Kgum9/rIa3gu9tEpPcpHBCjsDs7Hpw84FU4EIS7uY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                          rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 08 Jul 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AR, serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
        Validity
            Not Before: Jul  6 04:38:50 2025 GMT
            Not After : Jul  8 04:38:50 2025 GMT
        Subject: CN=6869fdda-49d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0f:3a:0e:6d:66:59:df:14:c9:0a:1c:a0:fc:
                    66:dd:22:55:dd:ad:c5:a2:bc:e7:ab:ce:43:ce:2d:
                    f9:9f:b1:a3:29:63:ac:43:08:b7:e1:11:b9:17:65:
                    a3:62:a6:fe:36:37:61:9f:b1:be:15:46:1f:d2:a0:
                    7f:ea:5b:87:ab:56:d3:31:6c:d6:59:35:47:94:01:
                    02:27:af:e2:75:3f:16:8b:dd:ee:a9:0f:6a:d9:76:
                    9a:b2:47:a8:e7:f5:b4:71:61:c5:91:2b:82:03:8c:
                    c0:31:ea:ce:8a:4b:3b:31:ff:2e:c3:8a:1d:df:1c:
                    73:23:bf:00:14:0f:0f:ca:de:6e:a1:58:be:eb:18:
                    0e:e8:09:b1:84:31:88:1a:cf:36:46:2a:0f:8d:53:
                    c3:1b:ef:5d:58:fe:10:78:16:44:52:15:d0:5c:5b:
                    81:d1:1f:0b:47:ae:97:dd:8e:8b:18:16:a9:c8:b1:
                    27:1c:d3:f1:38:31:eb:7c:a4:ba:2c:d5:71:3c:b9:
                    0a:5b:8c:4f:9c:4e:ea:cc:76:15:00:82:b0:21:f7:
                    60:00:1e:2a:23:77:70:17:70:8d:b2:ba:4e:fd:08:
                    f5:2f:ee:a0:56:bb:ac:f2:2c:67:01:4c:1a:1d:3a:
                    0d:5b:90:a7:9f:93:4a:8a:eb:33:a7:17:f0:cd:e4:
                    ca:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:20:76:6C:28:21:F7:D1:5B:99:5B:E2:62:51:7D:F4:23:67:D4:DA
            X509v3 Authority Key Identifier:
                keyid:B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:1a:fd:e3:6c:65:3a:05:48:c8:b7:e4:4b:53:31:9d:47:b0:
         1a:6f:6d:31:45:0f:7e:cf:67:a3:48:a1:8c:9b:c7:de:7a:14:
         25:60:9f:97:bf:bc:c3:14:92:f4:91:c1:31:5b:fe:27:38:88:
         af:b4:47:4b:5c:29:16:21:3d:eb:5a:5a:26:c1:38:60:a5:36:
         8b:56:02:bd:8b:da:79:bd:80:16:29:d8:77:b3:f9:12:a2:d5:
         22:ff:cf:fa:16:90:be:13:a7:84:45:0b:ef:12:c8:8d:a6:7b:
         4a:be:1f:84:87:5f:36:23:53:83:9d:d8:88:0a:c0:05:cb:2f:
         ae:63:70:55:03:70:1e:c5:ce:93:8f:67:87:2e:f9:2b:56:32:
         07:53:11:f8:1c:3d:c4:52:54:e1:7d:8f:d2:36:6a:cf:c6:37:
         51:cc:20:57:fe:f7:08:05:cb:9f:1a:8c:06:9e:11:f1:f7:f8:
         8a:a2:33:97:ee:68:37:ec:f7:bb:0f:af:47:45:aa:6e:91:d2:
         a4:ba:22:82:7e:b5:58:ac:e8:c3:ea:24:b5:22:62:64:f8:a7:
         26:40:85:87:24:d2:73:53:19:0d:8a:2a:3c:94:cf:ea:b2:2e:
         8a:a1:da:7f:a2:6f:b9:a4:16:60:1e:7d:ab:dc:b2:86:56:8a:
         35:e5:fd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 06:04:16 2025 by rpki-client