Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
File:                     ARf_NlB776Kb324d58jVMKSepOM.mft (raw, json)
Hash identifier:          wGt2ybpB+DyszOTjtJOb7wyxFG+dgBbFfR/DIYSG2q8=
Subject key identifier:   4D:2A:33:7A:93:34:B6:84:99:85:D4:54:BA:13:96:84:94:1F:7F:FC
Authority key identifier: 01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3
Certificate issuer:       /CN=F3656177AF/serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
Certificate serial:       0CCC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
Manifest number:          0CCA
Signing time:             Mon 30 Jun 2025 01:07:21 +0000
Manifest this update:     Mon 30 Jun 2025 01:07:20 +0000
Manifest next update:     Wed 02 Jul 2025 01:07:20 +0000
Files and hashes:         1: ARf_NlB776Kb324d58jVMKSepOM.crl (hash: htvqsrbcRqnaYdn50RSQrjecwUzAt8rb+t1Xo2kJcjo=)
                          2: B638C7E6C8C711E997C29757F8AEA228.roa (hash: EisbOpC1Y+D87WQCpz01JdeRv1C7VPmD55bEQs7AK5Y=)
                          3: 7DB93F0EC8C711E9BC304257F8AEA228.roa (hash: UV0937nnVyRu+QQ+Af7r5v4ImK92QTguDEzt+VyalNw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Jul 2025 01:07:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3276 (0xccc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656177AF, serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
        Validity
            Not Before: Jun 30 01:07:20 2025 GMT
            Not After : Jul  2 01:07:20 2025 GMT
        Subject: CN=6861e349-d006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7e:79:fb:d7:da:0a:95:40:dc:a4:47:e5:18:
                    98:50:85:4e:98:31:91:86:53:6b:52:97:69:3c:e5:
                    8f:ce:b2:09:e5:af:8b:5a:29:38:fc:bd:f6:3e:b8:
                    94:0a:f4:3f:3a:97:3a:d1:ff:be:b1:56:c6:28:7d:
                    a9:24:55:3d:21:62:4e:35:de:a9:84:52:f0:e2:32:
                    e8:98:f3:c6:94:53:71:d5:54:1b:17:6c:02:0a:95:
                    0f:33:42:80:fd:9c:38:37:0c:05:ff:e6:0e:df:58:
                    c3:b3:09:47:86:5c:95:a4:a6:a4:92:67:4b:9e:08:
                    37:d2:01:bb:ce:91:cd:e4:c8:91:e3:c2:59:7f:f4:
                    f4:d1:6f:67:93:b4:6b:3b:66:fe:87:f2:87:7d:d6:
                    77:52:3b:b4:3f:7d:2c:3f:bd:39:8e:c3:93:e6:57:
                    e8:2b:94:7f:b4:76:7f:55:53:27:fc:8d:ad:99:46:
                    e4:09:c3:50:a6:2d:87:40:1c:c5:f5:11:26:43:e2:
                    88:bd:bd:d8:48:95:21:3d:ac:1e:fb:ae:0e:31:15:
                    58:59:d8:37:6e:ae:89:72:98:d9:73:58:e5:2d:8d:
                    68:44:9d:6f:c4:b2:b2:d8:ac:35:55:c4:66:2d:b9:
                    c5:be:b0:f7:21:4a:ae:f7:f7:2e:40:b0:2f:79:83:
                    10:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2A:33:7A:93:34:B6:84:99:85:D4:54:BA:13:96:84:94:1F:7F:FC
            X509v3 Authority Key Identifier:
                keyid:01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:11:e0:a8:d5:ed:bd:a4:a0:c5:4f:9b:ce:4b:22:07:11:eb:
         eb:63:08:f2:f0:1a:0d:a3:36:e6:df:cb:b4:6f:ac:fd:34:c6:
         f2:1e:1c:96:5a:2c:73:a7:b4:73:cc:0b:4d:9d:8f:26:68:ae:
         7d:f9:91:e6:f4:75:6e:9a:5c:ca:4c:b7:f5:eb:88:29:31:cd:
         3b:45:b0:51:9c:64:a5:e3:65:e6:3d:6e:05:7c:02:4b:b4:02:
         05:00:f9:d5:47:b5:24:0e:aa:c7:02:d4:c2:70:c0:9d:2c:b5:
         02:fa:b3:9c:24:9b:b4:0a:63:07:08:bb:45:73:f0:bc:7c:bb:
         eb:7c:52:7d:15:17:54:c2:38:70:02:6b:19:e4:8d:1c:ec:b6:
         e9:a9:b3:96:de:5b:2a:a1:d5:5f:71:36:29:2b:ef:d5:6c:14:
         57:63:f1:39:19:17:fc:52:f9:2a:61:20:15:15:b5:4b:16:c6:
         5d:4d:18:a5:d4:8c:c9:4a:37:a7:a2:22:e3:4e:8d:1a:63:f7:
         93:3a:0d:e1:35:00:28:b2:2d:24:37:6e:27:ba:94:87:d1:38:
         97:16:76:3e:d3:ca:70:2a:ce:fa:c1:f2:54:b3:e4:69:52:b3:
         55:2f:2a:a2:01:a3:72:3f:3c:72:0c:9a:be:bf:bf:3d:28:dd:
         6f:b4:d1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:47:35 2025 by rpki-client