Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
File:                     l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft (raw, json)
Hash identifier:          Ee3QCs2IYwK8u8jnBkozcDsgE4nenCx+yir+l5gZ7mk=
Subject key identifier:   DC:57:B0:FA:62:C5:19:CF:23:81:4E:F6:FB:9A:E6:08:3F:D0:72:C2
Authority key identifier: 97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
Certificate issuer:       /CN=F36882A1AR/serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
Certificate serial:       0603
Authority info access:    rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
Manifest number:          0601
Signing time:             Sun 06 Jul 2025 02:22:46 +0000
Manifest this update:     Sun 06 Jul 2025 02:22:45 +0000
Manifest next update:     Tue 08 Jul 2025 02:22:45 +0000
Files and hashes:         1: l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl (hash: x/QORYsc399oJW7a3oBPI63en27tc2NGxKu8Oy8qbGs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                          rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 08 Jul 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1539 (0x603)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36882A1AR, serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
        Validity
            Not Before: Jul  6 02:22:45 2025 GMT
            Not After : Jul  8 02:22:45 2025 GMT
        Subject: CN=6869ddf6-15c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:79:03:b0:2c:d8:8b:87:72:ef:80:58:70:d0:
                    53:c3:a6:17:51:55:36:53:f5:05:bf:62:cf:6e:73:
                    3d:76:ab:b1:24:cc:ff:da:b6:6a:7f:d6:86:c1:1e:
                    ab:24:c8:8f:ea:5d:22:34:de:51:f9:47:73:9f:fe:
                    f4:38:8e:1b:e2:b0:92:90:3e:e3:58:91:26:5c:0d:
                    1d:32:92:c5:eb:b2:22:fa:a3:af:b1:d4:0f:00:4c:
                    30:c3:48:9b:fc:1f:c2:8e:33:51:74:ef:7a:f1:0d:
                    c4:d5:17:cd:a8:77:bf:a5:c3:d1:07:fb:c3:51:d1:
                    3e:8e:c4:ce:02:e4:18:4c:39:00:d1:20:a4:ed:8a:
                    e8:f5:dd:84:49:99:1e:b0:6c:31:80:d9:e3:6d:1e:
                    c3:8f:82:5f:29:0a:7a:9b:46:3e:45:31:c0:7c:85:
                    4f:8a:02:9e:9d:d0:b5:16:9b:04:a3:c6:dd:e5:3d:
                    19:58:e3:69:7b:8f:01:59:a2:b4:2a:87:bd:d5:84:
                    51:db:6e:6a:ec:20:6d:a6:84:ca:fd:6a:dc:49:27:
                    4f:37:70:eb:e7:83:52:10:ba:67:45:1a:e0:84:07:
                    b6:2d:d1:1f:c9:80:ff:c4:0e:fd:be:8b:9c:a5:c3:
                    44:6e:d0:2a:81:14:e8:8a:2b:76:cb:57:53:61:0f:
                    d9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:57:B0:FA:62:C5:19:CF:23:81:4E:F6:FB:9A:E6:08:3F:D0:72:C2
            X509v3 Authority Key Identifier:
                keyid:97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:2c:bc:b1:7b:9b:27:15:f9:fd:55:47:42:cb:41:cd:58:21:
         60:14:58:ba:e2:fd:a7:01:99:11:7b:a7:83:dc:84:3e:da:f7:
         b1:e4:b4:7f:9e:6e:fb:41:02:f8:7e:3a:9f:ed:e7:ba:95:00:
         61:c4:27:cc:29:2f:52:15:9a:21:05:65:91:27:0a:f9:ea:08:
         c9:67:9c:5b:8a:e3:23:26:c6:99:04:e0:b1:00:20:5f:9f:74:
         b9:06:4e:4e:9d:a0:50:14:41:a2:82:f3:08:b8:ab:1a:ce:30:
         b0:05:19:92:87:4a:69:f7:f4:9b:83:35:a7:d7:d5:f6:ba:00:
         35:9b:5a:eb:19:34:c5:8b:ef:9f:c7:95:8d:9a:d3:f6:5d:52:
         e4:ca:e8:d4:2e:f7:06:44:d1:be:35:72:0b:60:c9:f1:c4:55:
         a1:ee:95:de:c6:ac:aa:56:22:ff:45:ad:53:58:e7:21:28:66:
         e4:57:d5:7d:87:46:36:e1:05:86:9a:77:26:03:9c:a9:19:5a:
         71:57:27:1a:3a:84:98:e1:84:23:c1:13:1d:74:c9:aa:22:5b:
         ed:dc:6c:0b:23:c9:b2:55:ff:36:19:bf:3e:67:8a:84:1d:37:
         ff:9e:10:b7:52:c7:8d:91:c4:c1:55:2c:de:4f:16:2e:54:59:
         a1:5e:63:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 14:36:38 2025 by rpki-client