Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
File:                     fitobmq6qC0Tpu6fS-fmmmuN_3k.mft (raw, json)
Hash identifier:          KhJdElorHHgvCLjd+0wN6NtykUI2p+JJlBT9IoRg3ck=
Subject key identifier:   2C:14:64:EF:1C:BA:CB:DC:C0:DC:5C:3F:3B:04:83:4C:92:CE:8D:F0
Authority key identifier: 7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79
Certificate issuer:       /CN=F366AE59AR/serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
Certificate serial:       0198
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
Manifest number:          0197
Signing time:             Tue 06 May 2025 04:28:34 +0000
Manifest this update:     Tue 06 May 2025 04:28:34 +0000
Manifest next update:     Thu 08 May 2025 04:28:33 +0000
Files and hashes:         1: fitobmq6qC0Tpu6fS-fmmmuN_3k.crl (hash: nJi3EiL2XVl8iKjv32+2ccXpJfGgDj75VYj5ntQY4Jo=)
                          2: D55071E2F57711EE9C79B75F775412E6.roa (hash: JwIZwppDkh7nSLuQ5FmIaDKSeTXhtwFxqvQi4jhkWJQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                          rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 May 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 408 (0x198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366AE59AR, serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
        Validity
            Not Before: May  6 04:28:34 2025 GMT
            Not After : May  8 04:28:33 2025 GMT
        Subject: CN=68198ff2-8a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c3:ad:28:db:01:8e:f4:5a:43:3c:f9:f3:cc:
                    02:2a:bd:d1:72:ad:8e:dc:db:81:95:73:33:02:fd:
                    41:43:3a:f1:b4:61:2a:bf:24:be:67:06:23:df:12:
                    9e:cc:db:dc:28:70:00:7d:2a:31:89:02:f4:90:56:
                    90:85:e2:6b:e8:72:cd:e7:a4:bc:be:c0:e8:01:be:
                    70:92:09:86:fd:e9:45:ac:74:76:0a:57:f1:bc:7d:
                    46:8f:eb:f9:ea:ef:51:a6:f1:5f:2e:bc:f5:c1:83:
                    bb:60:29:21:3d:ce:66:60:d4:b5:63:36:b5:ee:72:
                    00:f1:d8:c5:07:b0:0a:ab:1c:83:8b:76:4a:da:63:
                    03:4e:0c:32:33:c6:54:c0:66:32:ba:65:47:06:67:
                    a6:83:15:23:25:1f:41:85:98:84:66:b4:f0:a6:a0:
                    3e:e2:2b:54:98:1c:59:2a:d5:97:1e:40:78:42:c4:
                    69:b1:bd:ca:d4:a2:3e:ec:5d:28:b3:72:13:31:8e:
                    16:a9:41:6e:0a:f6:d5:f3:05:eb:21:63:11:14:36:
                    d6:27:bf:80:6a:62:2f:64:25:fa:42:8d:aa:c3:fe:
                    9d:30:3d:12:92:3e:97:81:da:c5:1b:02:be:7d:31:
                    74:cb:7a:66:69:e6:e5:cd:c5:6b:e8:7c:29:ab:22:
                    69:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:14:64:EF:1C:BA:CB:DC:C0:DC:5C:3F:3B:04:83:4C:92:CE:8D:F0
            X509v3 Authority Key Identifier:
                keyid:7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:9b:01:89:ad:d8:de:46:d1:38:09:d8:e2:a6:92:36:09:93:
         06:23:ed:b8:b4:aa:68:51:91:ae:63:0f:c3:4e:37:fe:46:e3:
         39:9a:c7:2a:87:c3:73:01:4b:87:bc:0c:9c:0a:d5:b0:d5:a6:
         87:2e:63:fa:e6:73:38:4f:45:2b:33:61:ab:3e:3a:c0:2d:ad:
         6b:e3:6a:22:ba:42:27:bd:67:d7:64:d8:52:23:cc:1d:cb:eb:
         0c:a3:be:d2:f5:55:c8:0a:cb:a0:c2:9c:22:4f:50:f3:f5:ca:
         92:4c:64:46:82:81:68:82:c4:ba:c7:99:72:c3:b6:c1:89:b3:
         bd:2e:db:cf:4c:a9:19:67:54:ee:78:b3:03:e4:6a:19:e2:d6:
         70:06:da:96:bd:e5:92:f8:a8:de:99:ef:33:68:47:b9:35:75:
         47:84:1f:c1:ac:b6:8c:fc:d6:22:64:5a:5e:70:d4:90:09:97:
         44:bf:d2:d3:72:62:0d:91:e2:c4:67:a0:b7:88:ff:cc:8c:7f:
         59:36:8c:60:ac:6f:08:24:d0:47:e4:e5:16:17:bf:85:fd:99:
         a6:f2:49:f3:95:f2:f2:43:9e:8b:06:37:92:78:c8:f1:f8:ba:
         6c:56:4f:66:a8:f1:80:0b:c4:9d:3f:11:e5:86:c3:66:fc:ba:
         32:5d:8a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:39:26 2025 by rpki-client