Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
File:                     itr_GHci3uuw3c4Fe_PCmNAsfM4.mft (raw, json)
Hash identifier:          pdFqxTXOb2Hjn0IusnfyIp7yBhqprWLpZtbQ+PN0YDs=
Subject key identifier:   AD:22:FD:E9:88:C8:82:80:5D:C1:E7:A7:5A:94:21:24:A4:83:B8:72
Authority key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Certificate issuer:       /CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
Certificate serial:       037C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
Manifest number:          037B
Signing time:             Sun 06 Jul 2025 03:33:08 +0000
Manifest this update:     Sun 06 Jul 2025 03:33:08 +0000
Manifest next update:     Tue 08 Jul 2025 03:33:07 +0000
Files and hashes:         1: itr_GHci3uuw3c4Fe_PCmNAsfM4.crl (hash: H0aQBCqHagz+19p9Lf7Kwl90um7pjYTxaWVJzRt0xiI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                          rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 08 Jul 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 892 (0x37c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36939A6AR, serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
        Validity
            Not Before: Jul  6 03:33:08 2025 GMT
            Not After : Jul  8 03:33:07 2025 GMT
        Subject: CN=6869ee74-425d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:35:d6:77:45:fc:f8:0f:50:ce:0a:8a:80:00:
                    18:69:98:f2:ee:f4:64:92:27:3b:b6:61:d9:5d:4e:
                    bd:91:b0:9d:23:bc:62:f7:ee:a2:03:de:43:a6:ad:
                    22:84:0e:c2:dd:27:a3:9d:29:02:9b:02:de:ad:ff:
                    7b:55:f0:43:e9:ca:4e:33:ff:0e:94:a8:40:d4:36:
                    1f:88:92:9b:9a:7a:bc:1b:17:73:28:71:2b:c9:21:
                    a9:e4:15:b4:f3:1b:23:17:ed:79:de:b6:9c:9a:38:
                    c6:5e:e9:28:0a:9a:f5:48:80:c2:11:49:58:e8:18:
                    44:f6:40:00:63:c6:bb:08:0e:0d:d2:d8:18:28:55:
                    a0:c5:e7:7d:1b:d2:27:54:a7:2f:58:46:e2:a4:bc:
                    3d:26:59:eb:6f:fb:81:02:ea:e8:e6:68:fc:af:6a:
                    76:67:c8:a6:33:a7:9c:0c:52:31:2f:24:6d:14:e7:
                    5b:09:d6:3c:a0:6d:e0:c6:66:73:14:80:1d:42:aa:
                    5d:67:30:28:85:8a:dd:1a:45:28:2c:66:00:80:6e:
                    bd:a2:92:da:43:ab:9b:4e:9b:12:4a:f4:2a:0d:35:
                    e7:be:81:0c:ee:fa:78:2e:d8:82:c1:87:16:be:32:
                    f3:e3:c0:e6:1b:53:c9:fe:bc:4e:b0:f6:7c:31:e0:
                    30:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:22:FD:E9:88:C8:82:80:5D:C1:E7:A7:5A:94:21:24:A4:83:B8:72
            X509v3 Authority Key Identifier:
                keyid:8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:19:0a:33:a6:2b:60:f5:77:df:40:9f:7f:88:53:69:df:d9:
         0a:96:24:e2:54:8d:66:92:57:f7:62:c8:0e:de:cd:6a:1a:65:
         8c:58:3a:50:8f:c5:fd:3d:69:57:5e:63:04:3c:46:ee:89:85:
         89:92:5b:35:0f:a0:98:99:9e:d5:4a:b3:46:80:16:a4:de:e7:
         c5:70:c4:66:7f:2d:4c:15:15:ee:4b:05:27:18:e4:68:43:52:
         00:4b:fe:8b:15:72:ef:a5:58:cf:64:58:20:60:be:69:8f:cb:
         a1:02:5e:c8:90:9d:bb:28:b1:30:f3:00:eb:0f:81:3c:a9:ae:
         33:23:c1:ab:99:46:4e:51:26:10:fb:4d:e1:5e:ec:ae:49:57:
         82:8c:36:e8:28:8b:55:1d:94:3d:0c:0f:51:11:71:5b:0a:b1:
         57:cc:5c:2b:10:70:ba:22:2d:de:b8:88:e2:b7:cd:90:20:cc:
         8a:55:9a:39:47:07:bb:49:d8:83:dd:e9:44:27:1c:4e:c1:44:
         0b:62:db:92:aa:25:dd:e4:aa:2c:6c:1b:82:93:7c:c8:2d:eb:
         03:ec:1e:88:c6:f2:b1:7d:63:80:87:c8:30:58:37:89:ef:6b:
         50:21:cb:58:48:52:0f:94:b4:4d:5b:86:ea:bf:bc:7a:22:46:
         05:29:92:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 11:41:40 2025 by rpki-client