Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
File:                     s4rg2ENn30CCL75YUHD2mDzRgFk.mft (raw, json)
Hash identifier:          x0FPyvi/fz6tBfQ3ghBhp6sUNp+ndvb019MEuUPTvI0=
Subject key identifier:   C1:02:B9:34:ED:FE:89:54:04:40:72:96:32:5B:B3:0F:43:E1:53:6F
Authority key identifier: B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59
Certificate issuer:       /CN=F3645590AR/serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
Certificate serial:       01C3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
Manifest number:          01C2
Signing time:             Sat 23 Aug 2025 04:33:26 +0000
Manifest this update:     Sat 23 Aug 2025 04:33:25 +0000
Manifest next update:     Mon 25 Aug 2025 04:33:25 +0000
Files and hashes:         1: s4rg2ENn30CCL75YUHD2mDzRgFk.crl (hash: JXTYQf0osSK4/rcrX/ZzuCdwbWl2Talhh835HuQ/5KU=)
                          2: 0630E34C27F911EF99C5B7167DDC24C2.roa (hash: u1Kgum9/rIa3gu9tEpPcpHBCjsDs7Hpw84FU4EIS7uY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                          rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AR, serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
        Validity
            Not Before: Aug 23 04:33:25 2025 GMT
            Not After : Aug 25 04:33:25 2025 GMT
        Subject: CN=68a94496-873f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:3e:e8:69:10:36:ba:c0:39:f6:83:5a:f6:
                    cc:e5:4f:95:aa:26:ab:10:d1:eb:bd:43:0d:bc:56:
                    2d:46:ee:fb:70:6f:f4:77:36:ea:f3:e4:aa:0e:dc:
                    0e:c4:4d:86:16:e2:1f:9f:9c:64:2b:3e:ba:61:2b:
                    95:5a:2e:d4:16:07:3a:e0:3c:3e:75:87:da:b0:8e:
                    c4:ee:bf:fe:d1:93:fb:7e:47:7a:5c:69:09:b2:56:
                    af:43:65:5b:f8:d4:83:eb:58:ee:d4:58:33:73:f9:
                    f8:13:02:e2:cf:0c:2b:d5:82:6f:d2:4e:83:34:0b:
                    fd:94:d8:e3:f9:9d:c0:6e:ab:72:8c:b7:87:a4:2b:
                    17:fc:fa:b6:9e:d9:fa:c4:57:6f:bd:e8:99:bf:f5:
                    09:2c:c5:6a:1d:82:48:a0:bd:20:a8:e7:97:b0:b7:
                    cb:9b:f9:27:c6:95:55:3e:63:00:2d:13:59:b9:d2:
                    e6:77:2e:90:3b:21:09:f0:2f:0e:13:ed:ad:4c:6f:
                    33:53:cf:3c:8f:e4:38:7c:a6:94:8c:28:81:db:89:
                    23:77:66:44:17:be:cb:c9:32:2d:97:ea:26:4d:b8:
                    27:1f:b3:55:47:9d:13:04:67:58:d8:cf:7f:17:92:
                    c8:af:6b:24:e2:7c:9b:25:a9:8b:81:d8:91:0e:35:
                    7e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:02:B9:34:ED:FE:89:54:04:40:72:96:32:5B:B3:0F:43:E1:53:6F
            X509v3 Authority Key Identifier:
                keyid:B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:24:75:5d:3d:88:2e:62:a9:d6:67:ae:6d:87:5e:1a:2b:76:
         c1:64:e4:4c:04:fa:d0:b7:69:86:13:ae:be:26:60:96:fd:66:
         c3:9f:2d:ff:48:ce:6c:d0:a5:2a:d8:b4:27:9d:b8:55:6a:23:
         da:29:03:0e:de:20:77:9f:ce:de:e0:26:6c:16:74:a7:78:27:
         3e:ea:f0:95:c4:ef:81:b0:55:34:6c:4e:42:08:c2:4d:a6:e6:
         9f:71:2a:be:5a:67:04:b8:4e:0d:f1:cf:d4:2f:74:d7:fd:0a:
         7a:29:fe:7c:b3:35:af:ff:45:a2:f5:43:87:f0:f6:6e:20:7c:
         e2:c6:ed:05:ef:a4:4e:14:47:7c:ea:07:5b:80:d1:af:5a:b0:
         59:e3:43:cb:c4:fa:4a:0a:c4:4f:ca:2a:fc:3e:d2:4b:bf:8e:
         a4:a3:c2:80:40:8a:33:3a:27:d7:b4:f3:3e:6f:d8:73:3e:06:
         a0:f5:a3:43:0f:d8:82:c0:5e:2c:9a:42:79:0d:be:f6:b5:66:
         f9:44:e5:1f:29:22:4c:58:3c:bd:a9:05:1d:11:e1:f3:29:09:
         53:7e:c2:8e:2c:7a:20:04:0f:c8:57:7f:5f:a6:2a:17:1e:d3:
         ed:0d:83:6a:f8:56:57:ae:e8:f0:27:52:7a:ee:eb:3f:06:ef:
         a0:74:09:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:18:50 2025 by rpki-client