Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
File:                     oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft (raw, json)
Hash identifier:          CQlsbKJWKcb/lFXLqPQiRWboBt04L2SNGY4QM+PVLtM=
Subject key identifier:   9E:E8:50:B6:06:D0:CD:D0:DC:EE:26:51:A4:10:87:FD:FF:C8:B6:CF
Authority key identifier: A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C
Certificate issuer:       /CN=F36776F1AR/serialNumber=A0F7897F67587CA645B35141010A5AA1A3057F6C
Certificate serial:       BC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
Manifest number:          B1
Signing time:             Sun 11 May 2025 05:05:06 +0000
Manifest this update:     Sun 11 May 2025 05:05:05 +0000
Manifest next update:     Tue 13 May 2025 05:05:05 +0000
Files and hashes:         1: oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl (hash: PFMEaqn3Hlt+zLAIk7ikXeIinMDqTmrsMArkUdGLyeU=)
                          2: F891118CBE3711EF94207A53762E951A.roa (hash: /BSsoHmVYWT3uZmtUs29hLyCS4VFjhVXegvsldImsTY=)
                          3: F4E3CCE6C2FB11EFB2921875762E951A.roa (hash: em5+W6hV5wb4UsoaGm9yNPcphUOmzIzRc/FvZi8E2vQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
                          rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36776F1AR, serialNumber=A0F7897F67587CA645B35141010A5AA1A3057F6C
        Validity
            Not Before: May 11 05:05:05 2025 GMT
            Not After : May 13 05:05:05 2025 GMT
        Subject: CN=68203002-7a72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4e:41:4c:e6:be:c3:b4:93:0a:fb:19:e1:e9:
                    d0:1c:a3:99:0d:9a:50:b7:73:1f:e2:95:0a:7d:bb:
                    8a:63:23:43:a0:b6:5e:5c:82:ce:44:a3:3d:1f:69:
                    5a:39:e9:8a:37:cb:b2:10:ff:95:c9:17:d2:d1:2f:
                    35:41:9d:ac:59:d8:64:be:11:c1:d2:ab:37:a8:09:
                    e7:c7:6e:87:56:55:72:78:9b:3a:55:74:a2:58:ea:
                    81:1e:5f:72:28:27:c9:6c:6a:41:19:10:6f:d8:12:
                    90:7a:5f:c2:47:b9:a9:43:d7:c4:f2:bf:1c:4e:ae:
                    db:c6:c9:d3:33:50:c9:ab:34:78:4a:a6:cb:8b:e8:
                    96:21:93:32:df:d6:76:01:cf:51:ce:d4:21:ad:13:
                    50:e7:b2:99:35:e1:52:d7:20:3a:a7:8e:57:62:54:
                    95:3c:0d:5c:6f:bb:3f:88:cf:83:6b:2b:08:23:b9:
                    36:75:ce:40:38:72:73:82:2b:c1:db:78:0c:28:d1:
                    47:16:f4:3d:45:e6:b3:f8:32:77:65:02:9d:e3:e8:
                    44:25:db:03:d9:45:2c:99:89:52:71:93:b7:52:8f:
                    7c:d2:ec:9d:80:e9:5a:cf:dd:cc:70:04:45:25:37:
                    20:9e:4a:07:ec:88:5e:82:7c:1c:cc:f3:2c:32:c8:
                    07:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:E8:50:B6:06:D0:CD:D0:DC:EE:26:51:A4:10:87:FD:FF:C8:B6:CF
            X509v3 Authority Key Identifier:
                keyid:A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:7e:64:46:05:74:51:48:68:4f:bc:fa:f9:c8:f9:2b:17:ec:
         16:7b:7e:cb:43:c5:f1:8a:64:8c:a5:7d:fa:89:0b:50:d0:f1:
         5e:cb:a0:c3:74:e2:61:64:a7:e9:06:c9:4d:f6:2f:1a:78:ff:
         54:ef:92:77:05:ac:9e:60:2c:ab:12:73:fa:bc:77:32:e4:d3:
         38:e4:83:af:07:67:d9:85:46:8d:23:ea:52:58:bb:a2:24:40:
         2c:91:05:00:b4:a9:9d:ca:b5:10:76:22:35:3e:80:29:65:0b:
         91:9c:67:3d:86:b0:f3:89:c0:90:d2:7e:15:7e:c5:6a:27:2c:
         a3:90:e3:82:31:68:25:50:7d:fe:dd:f7:c0:65:69:3b:28:b5:
         1a:fd:e8:41:de:55:c8:a8:9f:4f:ca:97:1b:aa:9b:23:99:7d:
         ca:fc:9b:27:ac:46:96:b7:c5:f0:ec:29:37:ae:10:bb:a4:db:
         c5:a4:8b:f2:ef:79:f3:12:bd:32:a3:18:44:49:62:ea:0b:2e:
         d4:d2:dd:84:bc:c7:11:62:73:42:8a:9c:83:58:cc:f8:28:b8:
         25:30:a3:f6:2c:71:8c:53:6e:c3:89:d0:aa:ac:b2:d2:3e:f0:
         c6:13:97:5a:26:9f:fc:d7:39:98:7d:01:e9:88:2f:a7:35:4d:
         10:41:94:6b
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICALwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzc2RjFBUjExMC8GA1UEBRMoQTBGNzg5N0Y2NzU4N0NBNjQ1QjM1MTQxMDEwQTVB
QTFBMzA1N0Y2QzAeFw0yNTA1MTEwNTA1MDVaFw0yNTA1MTMwNTA1MDVaMBgxFjAU
BgNVBAMTDTY4MjAzMDAyLTdhNzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUTkFM5r7DtJMK+xnh6dAco5kNmlC3cx/ilQp9u4pjI0Ogtl5cgs5Eoz0f
aVo56Yo3y7IQ/5XJF9LRLzVBnaxZ2GS+EcHSqzeoCefHbodWVXJ4mzpVdKJY6oEe
X3IoJ8lsakEZEG/YEpB6X8JHualD18TyvxxOrtvGydMzUMmrNHhKpsuL6JYhkzLf
1nYBz1HO1CGtE1Dnspk14VLXIDqnjldiVJU8DVxvuz+Iz4NrKwgjuTZ1zkA4cnOC
K8HbeAwo0UcW9D1F5rP4MndlAp3j6EQl2wPZRSyZiVJxk7dSj3zS7J2A6VrP3cxw
BEUlNyCeSgfsiF6CfBzM8ywyyAelAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUnuhQ
tgbQzdDc7iZRpBCH/f/Its8wHwYDVR0jBBgwFoAUoPeJf2dYfKZFs1FBAQpaoaMF
f2wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc3NkYxLzU5MkRGNkEyQjg5NTExRUY5Mzc1MkQ2Qjc2MkU5NTFBL29QZUpm
MmRZZktaRnMxRkJBUXBhb2FNRmYydy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L29QZUpmMmRZZktaRnMxRkJBUXBhb2FNRmYydy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2Nzc2RjEvNTkyREY2QTJCODk1MTFFRjkzNzUyRDZCNzYyRTk1
MUEvb1BlSmYyZFlmS1pGczFGQkFRcGFvYU1GZjJ3Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBBfmRGBXRRSGhPvPr5yPkrF+wWe37LQ8Xx
imSMpX36iQtQ0PFey6DDdOJhZKfpBslN9i8aeP9U75J3BayeYCyrEnP6vHcy5NM4
5IOvB2fZhUaNI+pSWLuiJEAskQUAtKmdyrUQdiI1PoApZQuRnGc9hrDzicCQ0n4V
fsVqJyyjkOOCMWglUH3+3ffAZWk7KLUa/ehB3lXIqJ9PypcbqpsjmX3K/JsnrEaW
t8Xw7Ck3rhC7pNvFpIvy73nzEr0yoxhESWLqCy7U0t2EvMcRYnNCipyDWMz4KLgl
MKP2LHGMU27DidCqrLLSPvDGE5daJp/81zmYfQHpiC+nNU0QQZRr
-----END CERTIFICATE-----
Generated at Sun May 11 12:24:53 2025 by rpki-client