Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File:                     tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier:          pjWjD+d5Pmp26bVLMtiVcBwr4+AEWWUVc2gaTJ+o2qA=
Subject key identifier:   43:93:48:75:B4:CA:95:F9:58:97:E5:73:4D:B9:E5:D7:1A:60:30:4F
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer:       /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial:       08B6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number:          08B5
Signing time:             Tue 13 May 2025 01:28:47 +0000
Manifest this update:     Tue 13 May 2025 01:28:46 +0000
Manifest next update:     Thu 15 May 2025 01:28:46 +0000
Files and hashes:         1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: t2HJvfwqSvG3gmGZNFMZ1ocKL/tRGfbKyjJu3ZgzZcU=)
                          2: A57BAB36864511E9B11DB357F8AEA228.roa (hash: UZHeW38R1/Nd92sqBo1918z/ZA9yifdIrMDF+uNRLVM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                          rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 May 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2230 (0x8b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670C40AR, serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
        Validity
            Not Before: May 13 01:28:46 2025 GMT
            Not After : May 15 01:28:46 2025 GMT
        Subject: CN=6822a04f-2cfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c6:37:c5:1c:d8:5d:03:18:2c:ab:e9:14:5a:
                    fe:a2:0e:c4:b6:9a:53:55:86:43:a4:b2:dd:93:dd:
                    d3:e4:a2:45:aa:42:fb:db:b1:c4:23:b7:40:1f:ea:
                    ef:dd:1a:70:04:c8:fe:1b:b7:a2:78:7e:3a:b0:c7:
                    44:c2:e4:30:57:f2:f6:2a:5e:c9:d1:47:22:51:48:
                    87:98:56:15:db:f2:21:e2:04:c8:6a:ce:ee:8a:82:
                    af:79:4d:6f:05:4c:43:b8:0d:d1:4f:74:2f:4e:1c:
                    f9:7c:48:ab:13:28:eb:d6:6e:47:e3:3e:90:a9:2a:
                    41:5c:74:dd:1f:fe:21:37:74:27:7d:8e:2f:c3:b3:
                    33:4e:3b:8a:57:61:26:ae:78:bf:0f:f9:30:7b:4d:
                    72:e7:20:23:7b:e3:03:7a:fc:7f:fc:64:e0:09:61:
                    16:37:f8:48:49:12:91:d4:16:5a:c5:43:2c:03:f8:
                    f9:7d:84:4d:09:2e:b6:e1:b0:4b:ce:0b:21:25:03:
                    ad:36:eb:05:5c:43:a0:84:df:e2:08:ab:66:61:ee:
                    9f:a3:ca:08:ad:d4:72:4a:1e:ce:9f:39:52:8f:f2:
                    4f:f3:ad:ee:3f:04:de:0b:5b:a0:75:80:85:fb:9e:
                    1f:8b:32:50:26:c8:c4:04:1a:e8:b9:42:cc:20:6d:
                    93:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:93:48:75:B4:CA:95:F9:58:97:E5:73:4D:B9:E5:D7:1A:60:30:4F
            X509v3 Authority Key Identifier:
                keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:b6:20:c2:25:81:ea:cc:34:87:29:e9:a9:87:4a:65:a9:6b:
         40:7c:bd:2d:bb:d6:06:f7:b2:d0:41:09:7f:ab:3d:b7:dd:95:
         dc:34:7b:8a:84:b8:fc:82:15:71:44:77:3a:d6:e0:a0:a4:a5:
         16:e5:21:d8:61:19:e7:2f:60:e2:0e:ab:86:18:d5:99:c2:1f:
         65:d6:2d:5b:1b:25:2d:b5:06:c9:8a:03:e2:24:b7:72:83:35:
         81:38:3b:bb:ad:17:0c:0c:1a:83:ab:84:88:95:45:fa:c4:71:
         5f:bd:2d:f5:26:b0:d6:bc:6f:89:4a:a7:93:b3:26:ea:5f:9b:
         5d:7b:6d:e9:5c:ca:e5:5e:f4:bd:15:9f:58:af:de:d5:3a:2e:
         7e:f0:9a:9f:e0:bb:7b:57:85:f4:c0:01:5f:de:7b:c5:9f:ef:
         f6:b7:13:b1:f8:4c:a7:d9:66:3a:20:48:45:26:e5:bc:f7:ff:
         4b:68:d5:a3:79:ec:fb:0d:dc:88:04:53:5f:e7:34:86:ac:86:
         5f:14:48:09:5d:3d:43:75:f1:68:6b:92:33:3a:cc:c0:e1:ff:
         a3:10:d2:bb:86:d4:5c:99:c8:e0:1f:2d:8c:8f:a0:85:cf:9e:
         6d:a4:24:b9:55:58:ea:d2:99:3d:b9:6b:d6:01:11:30:ff:3d:
         73:f2:2b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 03:00:10 2025 by rpki-client