Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
File:                     nLoUINchzAMCPFAG0iUcILr0yII.mft (raw, json)
Hash identifier:          U4VyojI5kaJqRMQPuwyStCRy/tQeeHEUDJ5U6KEJTwg=
Subject key identifier:   09:3C:9D:CD:2F:50:AF:F8:88:1D:7F:87:AD:CC:E6:A2:E0:08:7F:C7
Authority key identifier: 9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82
Certificate issuer:       /CN=F3651E73AR/serialNumber=9CBA1420D721CC03023C5006D2251C20BAF4C882
Certificate serial:       0CBF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
Manifest number:          0CB9
Signing time:             Sun 11 May 2025 01:05:29 +0000
Manifest this update:     Sun 11 May 2025 01:05:29 +0000
Manifest next update:     Tue 13 May 2025 01:05:29 +0000
Files and hashes:         1: nLoUINchzAMCPFAG0iUcILr0yII.crl (hash: YPFEZNW3bIV4SyZejOqdhnwncniUZjZLj/H5WD//8yI=)
                          2: D365A0ACF80D11EFBEB14452762E951A.roa (hash: Am6JfmXKv4DHhKvXRKWcitTRJPjjXl+0+2dzYYkuDLU=)
                          3: 35AAF9269B8511EC9C57BEA05A40D577.roa (hash: IkRiEA4+pjihvXLHrg2ngxaBC/GnITy6qHEusBSCBlo=)
                          4: FE7EF4DEA9A011EA8E58EF35F8AEA228.roa (hash: N7Iw9MeumlpaJ1CJWOcoOBYQ72/5ZVnOPL/BKPNdyjA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
                          rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3263 (0xcbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651E73AR, serialNumber=9CBA1420D721CC03023C5006D2251C20BAF4C882
        Validity
            Not Before: May 11 01:05:29 2025 GMT
            Not After : May 13 01:05:29 2025 GMT
        Subject: CN=681ff7d9-39d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b7:ef:37:4a:6c:1c:04:cd:3d:35:2a:09:e4:
                    4e:24:b8:65:bb:f6:78:86:1f:78:58:3f:fc:ec:4c:
                    69:56:2d:b6:0c:c3:84:6c:1a:c7:bf:8c:6a:da:21:
                    b5:7f:95:06:39:82:ca:82:cf:67:fa:35:18:3d:36:
                    c9:0e:87:0f:b9:e9:23:52:58:8e:2b:82:80:85:81:
                    5e:d1:64:b0:7f:98:7a:31:e4:39:d3:94:41:7c:ea:
                    76:08:04:ff:6e:8a:f7:14:7c:36:87:e2:34:da:ed:
                    3b:15:34:38:45:16:4c:a8:72:d1:b9:cb:65:e3:a6:
                    e9:be:9e:85:10:6d:a4:57:dc:bd:77:12:16:6f:84:
                    2f:89:4b:17:88:1d:56:ba:57:ba:f1:2b:97:ea:b8:
                    fb:44:4c:4d:b4:70:d8:19:eb:52:dc:e2:6c:5e:8e:
                    9c:eb:05:9a:5f:d3:7a:ca:b2:bb:84:43:b4:02:f3:
                    93:7b:dd:8f:13:50:f9:35:16:9a:fc:8b:cd:f5:2f:
                    a3:34:06:8b:06:3c:f2:28:04:e2:ac:6b:04:82:27:
                    8c:18:62:d0:c9:47:07:5d:c0:34:99:ad:dd:ec:c3:
                    f2:0e:8a:2c:b6:7f:a6:d2:ae:6b:d9:26:c0:93:a5:
                    b0:14:46:6c:16:15:e4:cc:31:d3:68:c4:86:c6:b1:
                    19:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3C:9D:CD:2F:50:AF:F8:88:1D:7F:87:AD:CC:E6:A2:E0:08:7F:C7
            X509v3 Authority Key Identifier:
                keyid:9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:59:5b:e4:5d:8a:5d:08:12:04:b8:13:de:00:ec:ce:99:25:
         07:ab:60:a4:30:11:2c:76:99:a1:54:cd:b1:14:42:16:fc:a3:
         b9:47:40:01:32:a7:9d:72:14:9a:46:b0:20:3f:71:5f:bb:49:
         8d:7e:94:ff:9e:f5:06:42:1d:30:5c:a7:e8:33:ce:c3:89:89:
         93:91:6d:84:60:1c:dd:d6:88:15:13:4c:90:53:39:6b:4a:cb:
         c7:62:06:30:1b:32:f8:e4:4c:4e:34:7a:8b:a4:e7:9c:cb:8d:
         66:68:24:53:2a:c6:43:8d:d3:76:d1:c0:b9:54:e6:de:7b:65:
         2b:01:bd:e7:08:78:09:db:8e:70:29:e0:53:2e:5a:f5:eb:32:
         2a:a9:3b:b6:19:29:c0:7b:9d:40:d7:39:66:73:68:32:14:77:
         56:90:a5:37:e7:88:9c:88:c7:04:0b:3a:79:d9:da:e7:06:00:
         dd:a5:a9:9d:93:d8:f2:68:75:7d:90:04:5e:52:d6:cc:20:13:
         a4:ce:8f:d8:22:da:21:65:d2:72:13:9f:6a:66:d8:38:41:b2:
         1b:2f:f1:15:d5:bd:96:fd:6a:52:fd:e6:c6:41:c9:67:03:7f:
         22:1f:7c:97:b7:1b:f9:9d:d3:c5:ee:17:e6:ff:83:1f:20:c5:
         4e:1c:45:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:29:05 2025 by rpki-client