Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
File:                     IirjAYKHNx04yuMYdAoctSsF2bo.mft (raw, json)
Hash identifier:          rPb4c+EimU8fBpqbDMBWeDC0ayjsqnzsCCaUbn0j4SI=
Subject key identifier:   FD:D5:3A:FD:88:52:7E:CC:0B:7F:A2:62:25:4E:C4:AE:36:D0:31:C8
Authority key identifier: 22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA
Certificate issuer:       /CN=F36999E0AR/serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
Certificate serial:       05C7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
Manifest number:          05C7
Signing time:             Sat 23 Aug 2025 02:30:28 +0000
Manifest this update:     Sat 23 Aug 2025 02:30:27 +0000
Manifest next update:     Mon 25 Aug 2025 02:30:27 +0000
Files and hashes:         1: IirjAYKHNx04yuMYdAoctSsF2bo.crl (hash: 1AVf1IaSkALX16M/LP8rUIbr/LWtjeEWoFp3IDawZto=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                          rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1479 (0x5c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36999E0AR, serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
        Validity
            Not Before: Aug 23 02:30:27 2025 GMT
            Not After : Aug 25 02:30:27 2025 GMT
        Subject: CN=68a927c3-9567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:0e:c4:a5:27:e9:1b:41:48:3e:38:6b:7e:5b:
                    63:f4:e6:26:11:24:26:96:d4:6d:87:0e:bb:7a:d5:
                    18:58:58:af:dc:1b:9c:1a:04:3b:86:89:93:03:cc:
                    65:b9:95:15:fb:c2:c0:2f:5e:6d:8a:9e:49:14:56:
                    8c:9b:f0:c8:a9:d8:3c:08:ab:47:99:dd:8e:cc:09:
                    fd:94:96:24:93:0c:42:6a:24:cf:00:e9:c0:7f:fc:
                    cf:df:8e:8b:00:99:b1:5e:43:8e:72:91:57:6a:d5:
                    06:84:7e:5b:d8:87:36:0f:cd:48:c5:5c:d9:ad:22:
                    75:cc:22:96:00:b7:c8:8a:a3:93:d8:e9:fc:3a:fb:
                    8e:41:c0:cb:14:c7:86:22:eb:03:d8:da:c0:d6:fe:
                    fa:f2:39:9c:ac:6e:d3:68:eb:b4:4e:b1:2b:c6:e8:
                    3b:92:f4:37:54:ca:fc:e6:4e:68:2a:cf:a6:10:3f:
                    fc:9a:d4:6d:20:db:42:7e:f3:5b:3f:44:3d:21:91:
                    af:55:de:1c:04:5f:24:7c:43:7b:c6:66:f7:e9:b2:
                    bb:4c:6d:71:5a:49:c9:29:b9:33:2b:ae:29:f4:fa:
                    4c:33:67:e1:42:44:02:5b:c4:9d:af:b9:5c:64:a3:
                    4c:32:38:0a:1b:27:ee:5c:31:83:f8:0a:42:92:93:
                    1e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D5:3A:FD:88:52:7E:CC:0B:7F:A2:62:25:4E:C4:AE:36:D0:31:C8
            X509v3 Authority Key Identifier:
                keyid:22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:50:c5:b2:a5:c5:be:7a:3b:a3:48:73:c7:20:25:b2:42:ae:
         65:9c:93:0a:27:72:c6:fb:55:1d:2e:be:39:72:79:c5:79:30:
         b3:3d:c0:a2:6a:92:ee:cb:8c:89:90:48:55:bd:6c:ba:6b:bc:
         54:4a:d3:66:5a:4b:a6:44:34:ca:1c:21:6c:a0:ee:12:70:d1:
         08:60:2c:a6:01:1f:f8:a6:2b:33:0b:33:22:ea:32:b4:e1:98:
         c4:a7:32:2c:e8:1d:31:90:ad:d4:f5:61:93:ab:41:f3:84:93:
         fb:3d:fe:30:48:e0:9c:a8:c2:b6:fb:5e:82:22:cf:70:83:bd:
         5f:98:84:32:1a:9f:fa:b2:19:29:7a:06:2e:31:5d:ce:0f:b5:
         bf:a2:e0:06:38:51:10:47:93:51:03:68:ee:57:e6:17:de:ff:
         b7:f5:0a:33:e9:42:17:86:b4:72:18:4f:bc:28:76:af:8b:7c:
         75:db:e7:4e:74:ef:7e:fd:51:75:6b:e4:b5:f2:6e:4f:0c:2a:
         42:18:9e:33:be:f2:0b:f6:1c:02:34:75:66:69:d2:77:66:d8:
         45:03:c3:8a:92:f3:b7:ee:0f:40:46:77:a9:c7:39:c3:23:c9:
         0c:c4:e2:56:da:e8:98:d8:51:b0:21:e7:ff:a8:d8:bd:53:90:
         ca:3f:3f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:43:59 2025 by rpki-client