Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
File:                     IirjAYKHNx04yuMYdAoctSsF2bo.mft (raw, json)
Hash identifier:          +AoyMvtbNwTsTaGqEu9YfiTYTGMp7lQ75d51eNYXUyg=
Subject key identifier:   D4:59:B8:C8:42:14:AD:28:C0:E8:20:DD:8B:57:E7:3B:58:81:61:29
Authority key identifier: 22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA
Certificate issuer:       /CN=F36999E0AR/serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
Certificate serial:       0562
Authority info access:    rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
Manifest number:          0562
Signing time:             Thu 15 May 2025 02:32:31 +0000
Manifest this update:     Thu 15 May 2025 02:32:30 +0000
Manifest next update:     Sat 17 May 2025 02:32:30 +0000
Files and hashes:         1: IirjAYKHNx04yuMYdAoctSsF2bo.crl (hash: s5rP7o7IYO7d0zcMlXX8q0PYTXDDHsVRfQ7Kg9djQ70=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                          rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 May 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1378 (0x562)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36999E0AR, serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
        Validity
            Not Before: May 15 02:32:30 2025 GMT
            Not After : May 17 02:32:30 2025 GMT
        Subject: CN=6825523f-1f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3f:6e:be:8b:1e:ce:cf:37:8b:0c:7c:17:3f:
                    f0:bb:5f:03:1d:b5:9f:85:17:40:9e:09:b1:de:32:
                    58:bb:01:b0:2e:dc:ee:56:71:f3:7c:f8:d4:42:a8:
                    89:50:d0:9a:d7:ba:3b:17:94:01:e7:8d:f0:84:5a:
                    22:c2:77:44:c0:09:b5:4f:e6:ee:51:16:c6:99:4c:
                    f3:64:1f:ff:a2:87:45:3c:0a:b1:6f:dd:89:85:a4:
                    e6:fe:57:e4:20:4c:66:97:b8:0f:f6:07:ed:2a:84:
                    61:b2:34:8e:ac:a7:0f:92:5b:56:f2:da:66:33:ab:
                    50:02:66:dd:91:8b:50:47:9d:23:30:55:e1:fa:af:
                    f9:69:71:ef:0d:2c:6c:2e:c6:a6:b2:0a:ff:2a:a1:
                    50:2e:10:66:63:3a:35:e2:22:20:dc:92:d7:ce:eb:
                    66:d2:b2:d3:37:a4:5d:d8:c9:d9:d5:97:c4:e5:b9:
                    d4:54:7b:12:ac:b6:d2:8c:53:d3:78:be:f3:12:90:
                    ac:3d:fd:08:26:97:0e:92:8f:64:a9:b9:cf:b2:de:
                    bc:47:3b:33:48:22:5e:e3:b0:74:0c:a7:4d:ce:f8:
                    19:45:75:1f:2c:47:87:67:30:cd:65:df:a3:4f:8d:
                    e8:11:53:17:c5:36:b8:8a:11:8c:e9:38:88:ba:d7:
                    ef:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:59:B8:C8:42:14:AD:28:C0:E8:20:DD:8B:57:E7:3B:58:81:61:29
            X509v3 Authority Key Identifier:
                keyid:22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:dd:75:11:26:81:48:2d:71:b4:01:61:20:d3:78:0d:a7:c5:
         d9:1b:77:20:d0:be:b7:79:cc:52:08:56:32:68:3d:30:43:6c:
         a3:2c:c0:30:e9:19:2c:4f:30:bf:8f:a2:f9:07:c7:38:2b:1d:
         80:2f:39:5b:8d:31:39:96:e4:84:4f:7c:98:a9:d9:ee:eb:1a:
         e5:f2:13:67:77:82:15:40:33:ef:c8:3a:e4:1d:8f:27:d8:ac:
         4c:e3:15:1a:fd:ce:cd:c4:df:0a:aa:31:2c:cf:33:7f:33:a1:
         6c:f3:18:00:db:b6:bc:bd:69:cb:f1:72:65:84:8f:d2:39:09:
         9b:b4:ff:59:8f:c0:f5:1d:85:46:48:99:0a:07:31:ed:87:95:
         45:b3:e5:ee:af:67:c4:df:5a:e6:c9:2d:8d:7a:b6:d1:eb:54:
         ea:b2:ce:f9:48:59:cc:b1:d3:0b:3a:f8:ce:99:ec:06:13:46:
         c1:b2:4f:6b:4e:0d:c9:70:90:7e:a4:7e:d2:7d:4b:d5:9d:22:
         dd:fc:0f:8d:3c:06:43:5b:a6:ec:8c:43:55:21:3d:28:50:bc:
         86:91:5d:ea:65:2e:ff:81:a8:32:6e:dd:25:90:33:b7:c4:fe:
         23:7b:12:8b:fd:8b:c5:60:28:8e:70:e7:e2:91:54:7c:93:27:
         d6:97:fa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:53:28 2025 by rpki-client