Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
File:                     oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft (raw, json)
Hash identifier:          WC35ke3cwXHemP7ayuPofW5x08gumGRVn+8l7Wpr12o=
Subject key identifier:   22:C5:27:A5:85:17:3E:94:C6:22:A1:0C:51:DA:00:F4:69:BD:B0:B1
Authority key identifier: A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C
Certificate issuer:       /CN=F36776F1AR/serialNumber=A0F7897F67587CA645B35141010A5AA1A3057F6C
Certificate serial:       F2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
Manifest number:          E7
Signing time:             Thu 03 Jul 2025 05:06:51 +0000
Manifest this update:     Thu 03 Jul 2025 05:06:50 +0000
Manifest next update:     Sat 05 Jul 2025 05:06:50 +0000
Files and hashes:         1: oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl (hash: n66hK0apinIq8UwIkfcJvZhtCHdKLz+3jXyeUbyU8Vc=)
                          2: F891118CBE3711EF94207A53762E951A.roa (hash: /BSsoHmVYWT3uZmtUs29hLyCS4VFjhVXegvsldImsTY=)
                          3: F4E3CCE6C2FB11EFB2921875762E951A.roa (hash: em5+W6hV5wb4UsoaGm9yNPcphUOmzIzRc/FvZi8E2vQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
                          rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36776F1AR, serialNumber=A0F7897F67587CA645B35141010A5AA1A3057F6C
        Validity
            Not Before: Jul  3 05:06:50 2025 GMT
            Not After : Jul  5 05:06:50 2025 GMT
        Subject: CN=68660feb-037c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:bb:82:26:2e:4e:61:32:e2:ae:9f:9b:77:
                    5f:b5:1d:0e:28:42:37:87:fa:e2:08:45:75:79:9e:
                    95:ec:f3:23:e3:2d:52:a2:42:b8:60:38:00:3d:4a:
                    1d:74:09:7f:3d:45:d1:6b:30:32:42:db:27:3d:8f:
                    9d:a3:1d:f2:6a:83:c3:67:95:ef:1d:3c:d3:ed:07:
                    55:ae:bc:51:ec:04:58:7e:40:85:37:fa:23:e6:3f:
                    6e:e6:7b:d0:7c:58:2d:cc:8d:f4:3c:55:cb:8a:39:
                    4e:bb:63:ca:c9:bf:ee:51:18:5f:3e:94:04:5e:c2:
                    51:13:2f:3e:f5:65:bd:5a:2f:fa:21:40:4b:c9:07:
                    18:22:0b:cf:c6:43:6f:ae:e2:6c:dc:a6:b3:83:d0:
                    c6:22:d3:a3:03:df:52:29:2a:07:8c:fa:5d:4a:55:
                    88:38:fe:be:34:4e:24:33:2c:fe:0f:e9:a6:92:25:
                    a3:d8:9b:85:a3:db:ba:07:f9:9b:db:39:12:dd:17:
                    47:74:f7:e4:7d:50:80:61:69:f8:94:bb:a0:79:6a:
                    6c:67:40:ed:d8:fd:8f:a5:14:96:f7:88:d1:f4:66:
                    a7:c7:a4:4d:f2:54:49:c4:04:3b:a8:e6:e3:14:65:
                    ff:5b:47:73:00:9f:1f:e2:89:4b:cc:cc:92:41:bd:
                    2d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:C5:27:A5:85:17:3E:94:C6:22:A1:0C:51:DA:00:F4:69:BD:B0:B1
            X509v3 Authority Key Identifier:
                keyid:A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:a6:c1:9e:ac:bb:7a:fd:52:6b:c9:f5:7f:b6:5d:5d:98:61:
         d2:dc:94:41:c4:54:33:11:4e:64:73:7d:7b:8f:5b:b0:9a:35:
         aa:34:50:7c:e2:a7:43:af:93:79:d3:4b:af:b9:2e:e2:50:44:
         7d:ac:75:55:7d:37:1f:49:f4:d2:f9:7b:e1:a9:3b:4d:a8:ad:
         e2:3c:48:06:b0:5d:8d:ac:ab:84:35:74:55:ab:fd:93:3d:42:
         b4:67:bb:e1:64:4a:38:bb:13:3b:4c:0f:07:12:e6:17:74:a2:
         03:51:0b:c8:24:6a:1d:be:20:3d:44:d0:bb:41:c3:a7:a7:44:
         ff:e8:26:8a:85:36:0f:d0:e0:ce:35:07:60:b0:ef:07:25:97:
         8f:52:40:f6:92:79:2e:f4:4f:21:84:f0:65:0d:c5:db:6c:9f:
         f4:5e:0e:51:b5:42:2c:16:91:c5:9a:58:cd:fc:10:9d:b4:11:
         d7:92:42:0f:c3:50:fb:ea:c8:29:70:13:80:9a:18:49:4a:74:
         5c:7a:e7:83:64:be:7a:1a:c3:73:92:b1:45:6c:79:23:43:e5:
         9a:5e:c0:0f:56:79:21:0e:6e:dd:41:c8:c5:0e:2a:70:1f:d9:
         e3:29:75:44:e6:94:1c:64:fe:5e:fe:77:31:db:17:bd:73:e7:
         74:95:11:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 16:43:46 2025 by rpki-client