Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
File:                     HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft (raw, json)
Hash identifier:          XKp+WXJsV6+cGnSRGs7qmiKxURLtqOOy4wjjylFGcDk=
Subject key identifier:   23:F0:9F:E4:00:D3:42:E3:A8:67:97:05:D8:A7:BE:A6:52:C2:62:87
Authority key identifier: 1E:05:22:DE:3C:DA:F6:8D:C7:A7:85:73:43:D2:3C:52:E2:37:B5:A3
Certificate issuer:       /CN=F366BE85AR/serialNumber=1E0522DE3CDAF68DC7A7857343D23C52E237B5A3
Certificate serial:       B1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HgUi3jza9o3Hp4VzQ9I8UuI3taM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
Manifest number:          B0
Signing time:             Fri 04 Jul 2025 05:10:09 +0000
Manifest this update:     Fri 04 Jul 2025 05:10:08 +0000
Manifest next update:     Sun 06 Jul 2025 05:10:08 +0000
Files and hashes:         1: HgUi3jza9o3Hp4VzQ9I8UuI3taM.crl (hash: iH+qkXG5W8ynaObT1S2uHpuOAIPbzynMHdzC52UNbV8=)
                          2: 7C21AA3ED29211EF86EA9485762E951A.roa (hash: 4sdnJ8RVycpCPlFVArT/uPl+lKxeM/KiQs7ThnHwqEM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
                          rsync://rpki.afrinic.net/repository/arin/HgUi3jza9o3Hp4VzQ9I8UuI3taM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 00:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366BE85AR, serialNumber=1E0522DE3CDAF68DC7A7857343D23C52E237B5A3
        Validity
            Not Before: Jul  4 05:10:08 2025 GMT
            Not After : Jul  6 05:10:08 2025 GMT
        Subject: CN=68676231-69fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5d:25:7d:ac:91:04:d9:0b:23:d0:96:c4:05:
                    f5:77:57:f5:b3:d4:a4:31:f2:65:0b:dd:23:a2:4a:
                    a2:89:7c:4e:13:09:fc:64:c0:da:e3:7a:6b:0a:2e:
                    71:e1:27:ae:7d:cd:3d:67:07:77:73:fd:70:1a:60:
                    47:14:f7:e2:78:b9:cc:91:a8:b2:cb:62:b8:42:f5:
                    7e:f2:4c:8d:4d:32:38:b5:b6:38:65:cb:e3:1b:b6:
                    b9:a6:19:65:9a:22:3a:a8:62:e8:bb:53:86:bc:ee:
                    47:92:0d:4c:de:7c:f8:db:14:44:be:04:8c:3a:c6:
                    f7:90:fe:39:8b:7f:c8:56:c9:2d:36:4f:88:31:48:
                    ce:cb:5c:91:80:20:74:a6:17:f6:ed:69:18:29:71:
                    fc:0c:f8:c6:62:2e:e6:db:8f:f7:43:76:16:d9:c3:
                    ac:8c:61:4d:39:1c:1f:08:6b:f2:9f:0a:f6:8d:9b:
                    c1:15:5e:96:85:82:3c:71:4f:88:77:06:04:a2:ba:
                    6c:af:19:c9:4a:e7:4f:42:3d:25:9a:63:0c:3d:f0:
                    4c:75:76:85:bc:d0:c9:9e:c4:ba:8f:a6:cb:0a:46:
                    22:14:20:10:4d:9e:72:e1:3a:ea:a1:a8:bf:26:f6:
                    fc:0a:76:cf:a0:f3:58:bc:a0:c3:1c:13:e3:dc:74:
                    8e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F0:9F:E4:00:D3:42:E3:A8:67:97:05:D8:A7:BE:A6:52:C2:62:87
            X509v3 Authority Key Identifier:
                keyid:1E:05:22:DE:3C:DA:F6:8D:C7:A7:85:73:43:D2:3C:52:E2:37:B5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HgUi3jza9o3Hp4VzQ9I8UuI3taM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366BE85/4DCDBDB4D29011EFB921AF78762E951A/HgUi3jza9o3Hp4VzQ9I8UuI3taM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:9c:53:77:28:51:88:d3:19:80:10:2b:77:99:12:d5:63:17:
         5b:3d:d7:8b:d3:f5:fc:6f:82:ad:ec:e2:41:ee:ae:f7:31:3e:
         20:f2:ad:a2:99:53:36:30:cd:88:9f:f8:3a:89:31:c8:d6:ce:
         c3:df:06:bf:a3:ba:14:53:bf:da:82:22:a4:cc:57:8b:82:19:
         1c:9b:07:c5:d8:87:36:c7:f0:cb:d9:71:af:8a:f9:13:f4:8f:
         22:86:9f:0c:cc:69:c2:1a:34:4c:69:8d:e4:55:57:9b:ea:3d:
         38:0f:e8:91:f3:d8:d6:00:13:6c:7c:6b:cf:89:6c:12:41:71:
         8f:84:0d:e9:51:1c:68:b3:f7:84:c0:b4:73:0d:65:0d:2e:7b:
         b2:23:b0:38:de:a6:21:c4:9c:39:00:a4:79:dc:c4:c9:5d:3a:
         f3:6f:3c:61:b2:00:f7:b6:45:1e:f6:65:f9:da:c9:09:57:eb:
         7b:f9:0c:ac:70:88:0c:74:50:f9:c0:08:35:f2:82:8d:1b:b6:
         5c:ac:83:85:7f:fb:0e:d2:4a:d9:85:d3:1c:20:a7:fb:73:d5:
         a3:d8:e7:c2:3f:32:1d:92:a1:19:b1:60:9b:bd:33:a1:d2:29:
         9c:2c:dd:f1:fa:7d:78:c7:03:b3:ff:a7:4b:5b:b9:b7:1e:a2:
         5b:5b:b7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 17:54:01 2025 by rpki-client