Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
File:                     ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft (raw, json)
Hash identifier:          dKHBy+Rl6dABN/SJEjPTqywUuWqbvV0XDKNHAZ4bSRY=
Subject key identifier:   4D:EB:3A:7E:AE:E8:47:BE:D4:2A:89:19:CE:CF:CF:85:09:92:2C:6E
Authority key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
Certificate issuer:       /CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Certificate serial:       0DE8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
Manifest number:          0DDE
Signing time:             Thu 03 Jul 2025 01:01:16 +0000
Manifest this update:     Thu 03 Jul 2025 01:01:15 +0000
Manifest next update:     Sat 05 Jul 2025 01:01:15 +0000
Files and hashes:         1: ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl (hash: 6HUOnSL/VEMGiie+sIahkIltPC1I742fNAPrtFFkD/U=)
                          2: 8378B942986E11EBA9B2860AF8AEA228.roa (hash: DCXxXlW0spouErSs20DWzGFXGGBNaPXmr93oX+0glto=)
                          3: 90FDB810980F11EBAB14840FF8AEA228.roa (hash: ds3qrAkDtscjN+f/zFO0WydLzwA1BWtOcz3cojiECQw=)
                          4: 256DF7EC042E11EB8295AC11F8AEA228.roa (hash: oTPzm4i8uNZ00YlCZDea9uUazbu6kMoUCNcJkTTMdGU=)
                          5: B13DE26C980F11EBBA26A90FF8AEA228.roa (hash: yCbUwKaqaW0f/0Vl+tcwN9G6XJ8wrDKMmp+woAIv4Rg=)
                          6: 86F1AB563B6911EEA5032D7A4AD9E6FC.roa (hash: tXTkl36K5XLn7WgTr9rni780MBAg7Xu71NqmtnAIntU=)
                          7: 3FEDB4D43B6911EEA1EC28794AD9E6FC.roa (hash: Urr1+RPeSWBQ633dZAK+HE5qMEPCK2i7hu69WdCyFmE=)
                          8: 54554C04042E11EB814EE311F8AEA228.roa (hash: onUIXvOiTLaHtKeCxm3b6uqCM95dsnBo0FQxUaZDWI4=)
                          9: 159996B2082511ED8BA38C86F1222468.roa (hash: EKcGWQb8zxFfpKmxxPcqFEC27AcHuQOygLKxgR7xr7c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
                          rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3560 (0xde8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAR, serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
        Validity
            Not Before: Jul  3 01:01:15 2025 GMT
            Not After : Jul  5 01:01:15 2025 GMT
        Subject: CN=6865d65c-8e7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fe:71:51:ee:e8:29:f4:42:43:21:d2:fe:1c:
                    72:4a:28:d7:f0:eb:3e:19:13:bc:00:65:9a:e7:79:
                    9a:77:18:fa:25:7a:de:b7:51:75:df:68:30:02:7e:
                    c7:4e:2b:d0:41:13:c0:7c:17:50:6c:6e:57:4b:72:
                    cf:ca:e0:f7:41:b2:29:27:00:7f:11:9b:c4:a7:1e:
                    18:1b:3f:30:04:47:22:87:63:e6:8c:61:1a:be:89:
                    58:dd:02:ed:fc:33:c2:ab:2c:0c:65:63:26:da:9d:
                    0b:4d:ce:ee:13:a1:04:63:02:00:5f:f9:2b:2b:dc:
                    d7:44:4a:b5:c8:60:31:1a:b0:e5:b0:02:c5:ab:e7:
                    74:ab:41:5c:25:dc:ca:f2:36:55:d3:93:68:58:d5:
                    db:51:5d:88:44:6d:42:3f:79:9e:6b:b3:5f:a5:b4:
                    ec:76:04:78:25:cc:c2:15:57:0a:5f:fb:6f:bd:da:
                    1e:4d:c7:10:d5:3c:8d:fc:b3:8a:1d:fb:3d:81:9a:
                    e9:84:53:e6:56:51:dd:6e:38:40:c1:ad:d8:bc:9e:
                    f1:45:6f:47:a1:14:f4:e2:44:0c:5d:10:65:01:b5:
                    5a:5f:74:76:f0:e1:04:29:90:ad:dd:08:95:3f:4c:
                    95:89:cf:00:ae:93:a9:47:51:eb:d5:ea:43:65:3a:
                    15:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EB:3A:7E:AE:E8:47:BE:D4:2A:89:19:CE:CF:CF:85:09:92:2C:6E
            X509v3 Authority Key Identifier:
                keyid:8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:f1:60:5a:76:78:e3:dc:14:62:bb:21:f4:a3:2b:b5:3c:2c:
         3f:88:d6:68:da:8a:56:35:21:ec:9a:63:d4:6f:cc:fe:a7:0e:
         2d:6a:cd:31:e9:00:d6:0e:4c:7d:de:fb:14:46:de:4c:24:fc:
         8e:ac:83:9e:2d:d6:a9:b5:20:15:6d:b5:b1:8f:f3:13:c2:ab:
         11:11:87:44:50:d9:b5:a3:72:8d:b8:13:80:f8:ea:31:c6:7b:
         98:1a:21:65:5f:96:86:26:c1:9d:b8:7e:14:8e:87:cd:c4:a6:
         ff:37:79:84:fd:a3:e7:67:e3:33:9c:4f:59:c7:5c:88:f3:8c:
         88:49:0f:64:34:32:1e:1e:73:eb:a6:29:4d:73:64:b1:f6:78:
         d0:bb:ef:75:10:94:44:e7:97:fc:d8:b0:d6:ce:a8:28:bd:18:
         6e:09:15:e1:7e:e5:9d:f8:01:6a:10:c0:47:f7:e2:c2:18:8b:
         14:38:45:59:90:69:95:66:85:9c:1e:13:28:57:0c:46:55:5f:
         d7:1c:ed:f6:49:bc:6d:5a:87:15:ea:25:47:13:c3:71:17:20:
         66:65:a7:c1:97:8c:34:b0:d1:88:1a:dc:a5:a2:fa:cd:69:67:
         b3:a9:c7:68:d6:70:04:ad:61:e2:7c:c3:a4:fc:11:c4:90:c2:
         fa:26:ea:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 10:15:15 2025 by rpki-client