Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
File:                     hursQpTfunBFqIZC6d_EVRs0wlU.mft (raw, json)
Hash identifier:          /83f1xQgzkZQYeQAsRdJq/v1UUAgNxiJglQuMAkyGFk=
Subject key identifier:   1F:98:91:33:BB:B8:07:A9:E5:E7:ED:2E:A8:93:28:C2:7A:34:53:89
Authority key identifier: 86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
Certificate issuer:       /CN=F368588EAR/serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
Certificate serial:       0875
Authority info access:    rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
Manifest number:          0868
Signing time:             Sat 10 May 2025 01:39:14 +0000
Manifest this update:     Sat 10 May 2025 01:39:13 +0000
Manifest next update:     Mon 12 May 2025 01:39:13 +0000
Files and hashes:         1: hursQpTfunBFqIZC6d_EVRs0wlU.crl (hash: cUNxQ1kAvJVJ0C9lw39b5CcDQIz6GlNE3xQ63/cQQjI=)
                          2: 79F59A648E6611EBBC39876CF8AEA228.roa (hash: 23hasVT7STzhojJmCnzWqlWjP/WJmmjWHiydYYblzCA=)
                          3: E3CC92B2AB1811EF86C7F479762E951A.roa (hash: TFsOPlhZpWRBJYJKBHhEjMZSgDMfyDlwRle6Xdkgtls=)
                          4: D2F1A5928E6411EBBC748B6AF8AEA228.roa (hash: 6qK0G9UDQpIN5VB9HAdPfGyjLR6yeZQoNvVlRbOIFCk=)
                          5: 3F03153416A911EFA217550F017001B1.roa (hash: 9/pgGRkm3NQotfShqK62IqS8JeOjMdrxiB5oVZ+s0Go=)
                          6: D1CB5D328E6611EB8E50DC6CF8AEA228.roa (hash: Uj+iO4kxeUkmUkuThovmvQFW6hvGQ4iYoLoY2th9wkk=)
                          7: 2A782EBC8E6511EBBA24DF6AF8AEA228.roa (hash: yGZ6SnXS1RSRZj/wE1QJtTRTtRj6tcY4vFXhT5iHrl4=)
                          8: 97E367AE8E6611EB8103A46CF8AEA228.roa (hash: e2XQQBe/+KWcM7cIO5S9ibGFcKgcrbxG4dVNAASJpqI=)
                          9: A15549308E6411EBA8883A6AF8AEA228.roa (hash: rMD9Bdkw1CGzfMpgpTrn426f5jHiNnuNNjjZcqe2kgo=)
                          10: 028AE0848E6511EB9F7DB66AF8AEA228.roa (hash: 0qPx7Dwu8RjdR4H81YDiJJ6f5FFJ4STm+gTVCcpfY+w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
                          rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2165 (0x875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368588EAR, serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
        Validity
            Not Before: May 10 01:39:13 2025 GMT
            Not After : May 12 01:39:13 2025 GMT
        Subject: CN=681eae41-1b71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:e9:c1:40:2f:09:43:4e:8c:30:cc:a9:9f:
                    73:7f:8b:7f:49:3e:e7:da:74:7b:b8:55:b8:9a:a9:
                    4b:5f:68:0d:e5:40:52:2f:e9:72:43:e6:1c:3b:82:
                    09:12:4c:90:27:c7:48:42:fe:13:28:b6:9f:68:96:
                    60:15:63:e8:f8:1a:14:33:cf:a1:9b:9e:28:bc:eb:
                    f0:cc:89:46:71:c4:0b:18:f6:bd:45:30:b9:67:41:
                    03:18:4e:24:b9:6e:f9:f3:db:d7:38:01:6f:6a:e5:
                    2c:b0:32:7e:94:bd:73:3e:f0:1d:d9:da:63:4c:3a:
                    4a:05:fc:57:57:6b:29:da:c7:7b:77:36:04:47:c0:
                    4e:a0:8a:b6:da:23:f1:41:96:de:1d:2b:79:e3:47:
                    9e:90:8a:60:49:14:fc:94:6a:51:e7:45:91:22:eb:
                    f2:23:75:fc:3e:c8:d1:79:57:87:d1:cf:cc:4f:4b:
                    81:67:22:78:26:83:f2:15:d9:9a:7f:91:83:14:13:
                    15:68:15:16:b8:11:4f:fd:56:45:e2:b0:27:ba:37:
                    85:17:ef:ac:8e:0b:cb:1a:83:a5:ec:a7:4f:ff:e1:
                    ef:83:dc:1a:98:02:b7:d7:70:ba:ed:a0:05:be:d3:
                    4b:3d:11:40:7c:5e:9f:e0:3f:e2:b3:26:24:79:fe:
                    6d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:98:91:33:BB:B8:07:A9:E5:E7:ED:2E:A8:93:28:C2:7A:34:53:89
            X509v3 Authority Key Identifier:
                keyid:86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:e9:2d:92:da:fd:b3:94:05:77:2f:f5:c0:7e:03:0d:a3:aa:
         89:4b:c4:fe:eb:09:a8:99:41:86:ff:68:b0:52:81:70:aa:c9:
         f0:0e:23:77:69:4f:b6:01:53:49:58:c9:42:bd:2e:5e:46:e3:
         86:a2:10:b4:22:ef:1b:c3:12:c0:84:8b:48:db:4a:89:e6:0c:
         4d:46:26:47:0f:5a:ef:7a:e2:4a:4b:ea:b4:4b:f5:13:ad:8e:
         a5:52:af:72:2f:0e:9c:57:3d:d2:e2:14:50:67:48:e8:99:3a:
         16:93:46:8a:b7:bd:cf:72:c2:5f:f0:84:66:ca:5b:e3:5f:be:
         3d:94:36:21:3a:ef:31:1b:65:bd:82:1d:f3:85:f6:f8:6b:58:
         0f:8a:18:ef:56:bb:58:5e:b9:c8:82:4b:38:4e:91:27:94:6f:
         5c:be:a3:82:65:a1:90:bb:d4:75:93:a0:1f:bc:c9:54:a0:6a:
         56:31:68:d7:68:b4:8f:fd:9f:0e:d9:f8:cc:93:22:cb:3a:a4:
         30:75:b0:39:a9:cb:f1:26:6b:a0:50:06:c6:11:6c:89:56:00:
         bc:e0:27:3d:f8:92:56:a5:53:08:a0:54:db:6d:38:b7:b0:cf:
         28:fc:55:d4:3b:08:46:ca:43:bc:5c:8c:39:5b:ee:34:65:89:
         17:75:df:5a
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCHUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODU4OEVBUjExMC8GA1UEBRMoODZFQUVDNDI5NERGQkE3MDQ1QTg4NjQyRTlERkM0
NTUxQjM0QzI1NTAeFw0yNTA1MTAwMTM5MTNaFw0yNTA1MTIwMTM5MTNaMBgxFjAU
BgNVBAMTDTY4MWVhZTQxLTFiNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGjOnBQC8JQ06MMMypn3N/i39JPufadHu4VbiaqUtfaA3lQFIv6XJD5hw7
ggkSTJAnx0hC/hMotp9olmAVY+j4GhQzz6Gbnii86/DMiUZxxAsY9r1FMLlnQQMY
TiS5bvnz29c4AW9q5SywMn6UvXM+8B3Z2mNMOkoF/FdXaynax3t3NgRHwE6girba
I/FBlt4dK3njR56QimBJFPyUalHnRZEi6/Ijdfw+yNF5V4fRz8xPS4FnIngmg/IV
2Zp/kYMUExVoFRa4EU/9VkXisCe6N4UX76yOC8sag6Xsp0//4e+D3BqYArfXcLrt
oAW+00s9EUB8Xp/gP+KzJiR5/m1rAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUH5iR
M7u4B6nl5+0uqJMowno0U4kwHwYDVR0jBBgwFoAUhursQpTfunBFqIZC6d/EVRs0
wlUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg1ODhFL0I1RjQyNTQwQ0IyRjExRTlBNjI5MjkyN0Y4QUVBMjI4L2h1cnNR
cFRmdW5CRnFJWkM2ZF9FVlJzMHdsVS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2h1cnNRcFRmdW5CRnFJWkM2ZF9FVlJzMHdsVS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODU4OEUvQjVGNDI1NDBDQjJGMTFFOUE2MjkyOTI3RjhBRUEy
MjgvaHVyc1FwVGZ1bkJGcUlaQzZkX0VWUnMwd2xVLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBS6S2S2v2zlAV3L/XAfgMNo6qJS8T+6wmo
mUGG/2iwUoFwqsnwDiN3aU+2AVNJWMlCvS5eRuOGohC0Iu8bwxLAhItI20qJ5gxN
RiZHD1rveuJKS+q0S/UTrY6lUq9yLw6cVz3S4hRQZ0jomToWk0aKt73PcsJf8IRm
ylvjX749lDYhOu8xG2W9gh3zhfb4a1gPihjvVrtYXrnIgks4TpEnlG9cvqOCZaGQ
u9R1k6AfvMlUoGpWMWjXaLSP/Z8O2fjMkyLLOqQwdbA5qcvxJmugUAbGEWyJVgC8
4Cc9+JJWpVMIoFTbbTi3sM8o/FXUOwhGykO8XIw5W+40ZYkXdd9a
-----END CERTIFICATE-----
Generated at Sun May 11 01:02:28 2025 by rpki-client