Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
File:                     cIjstS9EHLVBKRrSDIupB7vUQFI.mft (raw, json)
Hash identifier:          98g1srlRcVgYfiXndVFpo1cudm9u77p595mIC+kP//E=
Subject key identifier:   31:CF:00:D1:F8:44:EC:30:85:38:CF:B9:41:E9:DB:A6:18:33:A3:16
Authority key identifier: 70:88:EC:B5:2F:44:1C:B5:41:29:1A:D2:0C:8B:A9:07:BB:D4:40:52
Certificate issuer:       /CN=F367FECCAR/serialNumber=7088ECB52F441CB541291AD20C8BA907BBD44052
Certificate serial:       05CD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cIjstS9EHLVBKRrSDIupB7vUQFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
Manifest number:          05CB
Signing time:             Tue 01 Jul 2025 02:27:37 +0000
Manifest this update:     Tue 01 Jul 2025 02:27:36 +0000
Manifest next update:     Thu 03 Jul 2025 02:27:36 +0000
Files and hashes:         1: cIjstS9EHLVBKRrSDIupB7vUQFI.crl (hash: h5hQx4xSpSyzrQZOSt+psJ1GUw3IB/9IJa26O4Ce96E=)
                          2: EBAB53E0EA3E11EB96CC7D3AD8A014CE.roa (hash: 8ccVEiAliBiH1WhFkoVeVW9p7ZDUf8PeWahrlb8I6+s=)
                          3: B9EDE330EA3F11EB9BDDAB3BD8A014CE.roa (hash: UpWRiY04Rhit9Uj9Y+xZz3ZrxHoCtYC3IGMvoMbSZgE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
                          rsync://rpki.afrinic.net/repository/arin/cIjstS9EHLVBKRrSDIupB7vUQFI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 00:27:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1485 (0x5cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FECCAR, serialNumber=7088ECB52F441CB541291AD20C8BA907BBD44052
        Validity
            Not Before: Jul  1 02:27:36 2025 GMT
            Not After : Jul  3 02:27:36 2025 GMT
        Subject: CN=68634799-4537
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fe:7a:19:54:67:74:af:05:d2:ea:4b:be:07:
                    93:3c:87:5d:28:09:87:50:11:19:20:3b:80:f5:bb:
                    bd:eb:ab:14:1c:24:e9:e7:72:f1:32:d5:04:92:ef:
                    bd:d2:95:b8:b5:b0:7a:43:40:5e:19:f4:b6:c1:7b:
                    f0:ba:96:9a:fa:81:d4:00:3e:19:03:5d:56:56:f7:
                    ad:9a:33:fb:b2:15:5d:a3:86:26:48:04:68:da:ab:
                    22:25:3e:99:89:d5:4a:22:96:0c:d1:6f:98:a1:59:
                    48:14:53:b7:37:89:f3:15:25:42:9b:30:93:28:1d:
                    a7:c1:70:81:9c:09:48:d5:13:71:16:cc:85:43:f0:
                    1d:47:f0:c8:03:63:f2:f8:5d:bb:f9:ab:14:46:ae:
                    42:50:a6:7a:6d:af:3a:7a:00:10:1f:08:ad:ad:68:
                    d4:f3:41:8b:55:90:bd:d6:33:5d:9c:12:af:bb:e2:
                    5b:75:75:69:4b:b2:51:08:b6:e2:39:14:66:3c:fd:
                    86:82:e2:61:b8:72:cc:4e:bc:97:76:86:6d:a6:d3:
                    9b:bc:49:14:72:dc:11:59:a4:bd:cd:e8:b1:00:e4:
                    d6:66:ab:b7:a4:64:fd:42:3a:e3:73:77:ca:0f:67:
                    1c:d4:94:dc:83:b4:6c:6d:a0:61:ac:fb:84:65:2b:
                    7b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:CF:00:D1:F8:44:EC:30:85:38:CF:B9:41:E9:DB:A6:18:33:A3:16
            X509v3 Authority Key Identifier:
                keyid:70:88:EC:B5:2F:44:1C:B5:41:29:1A:D2:0C:8B:A9:07:BB:D4:40:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cIjstS9EHLVBKRrSDIupB7vUQFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FECC/511FD0D0EA3E11EBA62EAE39D8A014CE/cIjstS9EHLVBKRrSDIupB7vUQFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:e3:36:84:6f:b3:7f:3e:f7:48:32:8f:a9:a1:e7:d9:a0:f3:
         37:4d:4d:3c:8c:ca:ae:34:02:11:26:4a:03:86:13:7f:0b:f2:
         45:d9:1d:72:db:91:93:42:8b:1c:19:76:c8:f3:aa:9c:a4:26:
         ae:85:1b:f6:32:f6:16:7e:e6:a6:d1:82:db:7a:9a:1f:53:2c:
         cf:30:bb:4a:10:3d:4d:6e:2e:52:00:c8:00:78:2b:da:41:d5:
         35:3c:7c:26:36:c0:3a:bc:78:39:f2:11:fb:8b:bb:ba:bb:04:
         a2:e3:95:24:23:b8:a7:52:a8:b6:43:dd:db:2f:8d:2c:09:b4:
         fd:94:01:91:f2:04:dd:0c:c4:ea:cb:e5:81:9e:30:2b:de:47:
         04:c0:f3:66:46:90:35:d2:bf:24:96:26:0a:0f:71:3b:9a:7a:
         77:45:0b:b9:04:dd:95:7e:8d:b7:1e:86:17:ad:92:c3:0f:9e:
         28:23:87:39:92:33:05:34:31:13:90:79:c6:cc:cc:f2:bc:b1:
         0f:f9:ff:87:ec:09:ab:47:e5:26:27:98:11:e7:2e:df:ff:ed:
         19:e6:02:cb:61:9e:f1:75:67:87:28:ff:73:6f:ff:64:c9:43:
         4b:e6:9d:55:79:0e:b9:37:53:22:1d:74:03:c9:30:fe:55:c2:
         ac:d4:c3:f6
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBc0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0ZFQ0NBUjExMC8GA1UEBRMoNzA4OEVDQjUyRjQ0MUNCNTQxMjkxQUQyMEM4QkE5
MDdCQkQ0NDA1MjAeFw0yNTA3MDEwMjI3MzZaFw0yNTA3MDMwMjI3MzZaMBgxFjAU
BgNVBAMTDTY4NjM0Nzk5LTQ1MzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCk/noZVGd0rwXS6ku+B5M8h10oCYdQERkgO4D1u73rqxQcJOnncvEy1QSS
773Slbi1sHpDQF4Z9LbBe/C6lpr6gdQAPhkDXVZW962aM/uyFV2jhiZIBGjaqyIl
PpmJ1UoilgzRb5ihWUgUU7c3ifMVJUKbMJMoHafBcIGcCUjVE3EWzIVD8B1H8MgD
Y/L4Xbv5qxRGrkJQpnptrzp6ABAfCK2taNTzQYtVkL3WM12cEq+74lt1dWlLslEI
tuI5FGY8/YaC4mG4csxOvJd2hm2m05u8SRRy3BFZpL3N6LEA5NZmq7ekZP1COuNz
d8oPZxzUlNyDtGxtoGGs+4RlK3u/AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUMc8A
0fhE7DCFOM+5QenbphgzoxYwHwYDVR0jBBgwFoAUcIjstS9EHLVBKRrSDIupB7vU
QFIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdGRUNDLzUxMUZEMEQwRUEzRTExRUJBNjJFQUUzOUQ4QTAxNENFL2NJanN0
UzlFSExWQktSclNESXVwQjd2VVFGSS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2NJanN0UzlFSExWQktSclNESXVwQjd2VVFGSS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2N0ZFQ0MvNTExRkQwRDBFQTNFMTFFQkE2MkVBRTM5RDhBMDE0
Q0UvY0lqc3RTOUVITFZCS1JyU0RJdXBCN3ZVUUZJLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCK4zaEb7N/PvdIMo+poefZoPM3TU08jMqu
NAIRJkoDhhN/C/JF2R1y25GTQoscGXbI86qcpCauhRv2MvYWfuam0YLbepofUyzP
MLtKED1Nbi5SAMgAeCvaQdU1PHwmNsA6vHg58hH7i7u6uwSi45UkI7inUqi2Q93b
L40sCbT9lAGR8gTdDMTqy+WBnjAr3kcEwPNmRpA10r8kliYKD3E7mnp3RQu5BN2V
fo23HoYXrZLDD54oI4c5kjMFNDETkHnGzMzyvLEP+f+H7AmrR+UmJ5gR5y7f/+0Z
5gLLYZ7xdWeHKP9zb/9kyUNL5p1VeQ65N1MiHXQDyTD+VcKs1MP2
-----END CERTIFICATE-----
Generated at Tue Jul 1 05:19:50 2025 by rpki-client