Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
File:                     BoarqsOL5_GqLSv8WD8tN9iLpEI.mft (raw, json)
Hash identifier:          D1U+NDzoIWsXPRua0xTq22zZsj6N0OY2DsqXw+GeFHI=
Subject key identifier:   65:A9:44:35:AC:79:10:75:EA:50:4A:7E:BF:5A:41:B1:56:9C:2B:7C
Authority key identifier: 06:86:AB:AA:C3:8B:E7:F1:AA:2D:2B:FC:58:3F:2D:37:D8:8B:A4:42
Certificate issuer:       /CN=F3660C14AR/serialNumber=0686ABAAC38BE7F1AA2D2BFC583F2D37D88BA442
Certificate serial:       0896
Authority info access:    rsync://rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
Manifest number:          0896
Signing time:             Mon 12 May 2025 01:36:18 +0000
Manifest this update:     Mon 12 May 2025 01:36:18 +0000
Manifest next update:     Wed 14 May 2025 01:36:18 +0000
Files and hashes:         1: BoarqsOL5_GqLSv8WD8tN9iLpEI.crl (hash: xsoZlVqt2gwWGygYeYK0ikKjXoW8TZCY9/2x7ZDXht4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
                          rsync://rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 May 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2198 (0x896)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AR, serialNumber=0686ABAAC38BE7F1AA2D2BFC583F2D37D88BA442
        Validity
            Not Before: May 12 01:36:18 2025 GMT
            Not After : May 14 01:36:18 2025 GMT
        Subject: CN=68215092-5490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:54:c3:1d:84:37:f2:19:05:33:56:f6:a6:66:
                    f6:49:14:11:18:f6:67:5e:4b:27:aa:b7:dd:a4:dd:
                    48:55:e6:27:f2:7e:ac:71:0b:a6:35:c4:ca:c3:1d:
                    fe:f7:b9:fc:90:2a:54:0e:56:23:1f:6a:05:bc:26:
                    72:0e:1a:12:f4:5f:44:b2:6f:eb:f2:c7:4a:03:1c:
                    37:04:a6:d1:97:1a:12:9e:aa:b5:af:7e:de:9d:86:
                    1c:0b:44:10:b1:44:46:b4:d6:f8:c3:a6:5e:aa:d0:
                    e9:f9:9c:77:db:4b:d4:34:99:7b:b8:13:eb:30:67:
                    a5:3c:38:8b:5f:9d:e0:70:c0:c9:1d:35:b1:5f:2e:
                    c8:c7:77:79:a0:f4:40:e8:31:92:d2:f2:ba:ca:a2:
                    9b:49:09:93:f0:c8:fc:87:e6:65:cc:0e:72:7f:59:
                    d5:1b:8c:d6:9e:df:24:66:14:ab:85:6f:c5:ee:72:
                    02:42:87:8f:76:7e:1f:75:5a:2b:a7:8f:96:33:8b:
                    a0:2c:34:6b:e8:93:f5:7a:50:52:a8:8e:63:af:c1:
                    66:02:5a:f1:0c:41:92:33:d8:86:ca:f0:7f:8c:37:
                    4e:65:86:c2:e9:56:a0:3c:5b:43:d7:74:c1:e5:3e:
                    32:6e:47:1d:b1:67:d8:51:eb:60:d8:5f:37:c4:de:
                    4a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A9:44:35:AC:79:10:75:EA:50:4A:7E:BF:5A:41:B1:56:9C:2B:7C
            X509v3 Authority Key Identifier:
                keyid:06:86:AB:AA:C3:8B:E7:F1:AA:2D:2B:FC:58:3F:2D:37:D8:8B:A4:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:82:7c:c0:8d:42:ca:9a:c2:2b:ed:13:43:5b:b8:b7:0a:cd:
         59:76:c0:cf:01:96:36:f1:fa:2c:42:87:95:e9:67:98:b1:f7:
         41:94:67:f6:8a:50:6b:d7:1b:a4:24:20:2f:b6:15:0f:b0:8c:
         00:5d:33:29:ee:b3:a5:49:11:21:1a:01:ee:e8:3d:09:4b:d5:
         30:10:f2:af:6b:7f:e3:76:ef:2c:aa:8a:cb:6d:7a:2d:67:b0:
         87:aa:0b:fd:01:aa:ac:30:eb:7a:c3:14:60:a8:20:bc:e7:52:
         c6:c9:fb:02:68:2b:37:67:cf:d3:33:fa:0b:9d:6d:37:34:3a:
         3a:9c:79:d9:43:ec:d9:51:0b:7e:84:c7:be:a3:3d:65:bf:75:
         ac:e2:87:87:52:36:0e:bc:33:9d:91:ed:8a:4d:24:16:11:7b:
         49:ef:eb:88:d7:ef:b6:eb:66:8c:b6:17:3d:bc:a0:ba:c6:46:
         95:74:94:a9:08:c6:fe:e8:7f:ae:a9:1f:97:9f:03:54:39:94:
         58:2f:a1:55:e9:d7:fe:6b:82:9e:63:a0:f1:e6:1d:8e:2c:18:
         5a:4d:d6:03:5f:ca:da:1f:64:4e:78:68:a3:2e:e2:15:88:b9:
         bf:3e:6e:67:fc:12:1e:57:b7:ff:bd:af:d3:98:4e:df:a9:54:
         7b:0d:38:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:30:33 2025 by rpki-client