Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
File:                     VcSAIZIjODGCUcva0uggjBsiQyE.mft (raw, json)
Hash identifier:          7T+csNGzV+bEskbiAtyE7PQz56bxwyfCFI0y9p1+Kh8=
Subject key identifier:   E4:EE:2E:F9:01:E9:3F:34:E4:6B:01:AB:07:2F:80:9F:CD:52:FB:71
Authority key identifier: 55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21
Certificate issuer:       /CN=F367DA9BAR/serialNumber=55C48021922338318251CBDAD2E8208C1B224321
Certificate serial:       0376
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
Manifest number:          0375
Signing time:             Sat 17 May 2025 03:24:04 +0000
Manifest this update:     Sat 17 May 2025 03:24:03 +0000
Manifest next update:     Mon 19 May 2025 03:24:03 +0000
Files and hashes:         1: VcSAIZIjODGCUcva0uggjBsiQyE.crl (hash: /jhbO5ZhlztHQ2M8sKkhw/d4sn4Mn66xoayT8yPEvIw=)
                          2: 4CEBE78CABC211ED80A4B483F1222468.roa (hash: RMWNA7CymMg9CNpy2XouqWvp370orj1H39/pzyyz1/Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                          rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886 (0x376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DA9BAR, serialNumber=55C48021922338318251CBDAD2E8208C1B224321
        Validity
            Not Before: May 17 03:24:03 2025 GMT
            Not After : May 19 03:24:03 2025 GMT
        Subject: CN=68280154-c552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e6:3a:b4:85:41:53:d3:e2:0d:7a:9f:5e:fb:
                    0a:ec:39:7f:87:c0:67:96:37:0e:7f:8f:2c:63:a6:
                    ad:df:d8:2f:5e:63:76:33:e8:ea:51:6b:23:2c:cf:
                    8d:de:16:9f:4c:ea:e3:c4:93:01:18:c7:09:25:57:
                    2d:d7:53:4f:fe:33:43:41:f8:95:fb:30:5e:5d:d1:
                    cd:05:b3:db:d9:c5:4f:a5:8b:ae:e5:2a:9e:bf:1b:
                    d0:62:90:c1:b3:e3:4c:22:1a:29:77:84:9f:e9:c6:
                    10:0b:90:9b:67:03:76:47:f0:fe:07:56:fd:11:1e:
                    38:8b:a3:d6:b3:77:e2:4f:43:dc:45:ab:f4:87:e3:
                    d7:65:64:d2:b7:2f:4f:a3:98:5a:b9:ba:d4:cf:58:
                    59:fc:0e:91:35:db:ab:5e:11:13:72:5e:5e:d1:89:
                    15:27:64:21:cd:14:2a:ba:05:55:ef:36:a3:26:43:
                    07:30:aa:fc:3e:08:06:a3:e8:9b:4b:af:05:e5:a6:
                    28:ca:be:6b:f0:1b:da:4e:f4:c0:73:c5:66:0f:d0:
                    6f:c7:8e:18:97:57:a6:f9:2e:52:c9:f3:b6:33:d5:
                    73:9c:49:dd:a7:f1:3b:d3:60:b2:3e:db:ae:1d:5b:
                    d8:7b:d5:a7:1e:ad:32:50:8d:ed:b1:68:dc:af:61:
                    7e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EE:2E:F9:01:E9:3F:34:E4:6B:01:AB:07:2F:80:9F:CD:52:FB:71
            X509v3 Authority Key Identifier:
                keyid:55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:47:9b:e3:6d:5c:84:7d:34:85:e8:f2:8a:ff:0b:26:3e:b7:
         11:18:05:03:a9:10:5b:86:32:4b:6a:07:65:af:ef:dd:a9:6e:
         17:17:f6:24:ca:0b:d1:bc:72:1c:c3:e9:e0:a1:84:34:54:ad:
         02:eb:76:17:09:dd:eb:50:f1:c2:bb:90:ac:0d:a5:ca:c5:fc:
         b2:f2:3f:c8:b7:07:30:94:79:a0:4e:91:33:87:34:5c:0f:9e:
         96:92:59:e2:45:48:22:26:df:cf:43:3f:2b:99:d2:98:8d:66:
         61:2d:68:25:f4:76:d3:33:32:65:60:de:77:ea:18:d2:59:a8:
         fb:21:66:34:68:24:8c:7c:ae:90:73:cf:aa:b3:8d:e4:a3:d1:
         7b:c5:4d:3c:b0:48:72:b7:e8:58:97:35:36:b7:52:52:1f:81:
         fb:c4:30:2c:6d:bf:98:61:b4:49:d4:bd:96:80:8e:d3:db:7a:
         2b:d9:31:3f:b5:a6:8a:19:05:fe:05:db:1f:eb:5b:62:7e:87:
         10:76:11:78:e8:58:45:b1:7a:d2:5f:3f:60:96:35:8a:39:33:
         59:25:f2:8a:03:83:c1:13:11:9e:01:f8:2d:2c:8e:7e:38:fb:
         93:b7:50:9f:e7:03:84:b4:d8:b0:3d:e3:c8:c2:ad:85:d0:60:
         44:5a:b3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 19:32:52 2025 by rpki-client