Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
File:                     otd9qqMurfowwn_FTDYvrBwxtaM.mft (raw, json)
Hash identifier:          BhEFS2feHHXNbFOjj2pQaYfsoiNVaN/ZhHqYZnndOG8=
Subject key identifier:   FB:05:35:49:BD:95:98:CA:E8:5B:53:89:B1:27:FB:E7:F9:7E:23:77
Authority key identifier: A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3
Certificate issuer:       /CN=F36A15D5AR/serialNumber=A2D77DAAA32EADFA30C27FC54C362FAC1C31B5A3
Certificate serial:       0867
Authority info access:    rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
Manifest number:          0865
Signing time:             Sat 10 May 2025 01:37:00 +0000
Manifest this update:     Sat 10 May 2025 01:37:00 +0000
Manifest next update:     Mon 12 May 2025 01:37:00 +0000
Files and hashes:         1: otd9qqMurfowwn_FTDYvrBwxtaM.crl (hash: 7bQVFrrlamJFPpYITeNAfqD5heMdqbIoagstMh8j268=)
                          2: 9965A5A606AE11EA96066744F8AEA228.roa (hash: wIbFP7nt0VapeRtyrT6a4GxS47/3LZ5/NRY7qSwEjUk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
                          rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2151 (0x867)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A15D5AR, serialNumber=A2D77DAAA32EADFA30C27FC54C362FAC1C31B5A3
        Validity
            Not Before: May 10 01:37:00 2025 GMT
            Not After : May 12 01:37:00 2025 GMT
        Subject: CN=681eadbc-31c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ba:33:ac:c4:e2:a6:8d:4a:7f:35:1d:97:67:
                    35:58:db:95:f8:12:3e:5e:aa:75:d7:6d:4f:78:fd:
                    53:19:0c:4a:1c:99:04:01:a4:0d:d8:e3:2f:d4:84:
                    32:ee:ad:89:ce:5f:6e:9d:69:26:e7:63:47:08:f6:
                    f7:65:dc:19:99:5d:cd:7f:21:80:2f:41:96:2c:fc:
                    3c:73:d0:0a:0c:8e:37:28:12:a2:c8:34:81:5c:01:
                    a7:bd:a3:e6:b4:53:62:6d:a9:a5:4c:63:85:ff:24:
                    d4:08:b7:9c:78:53:1b:5d:33:32:ca:01:5c:24:c4:
                    f1:20:3a:08:92:37:06:1a:10:f7:f6:70:00:2f:1f:
                    21:6a:31:f0:7a:cf:32:5b:f7:97:67:7a:e0:82:c2:
                    9c:fc:16:56:ee:90:c5:43:af:46:49:f5:0c:6c:66:
                    92:b7:31:cb:58:60:0b:c2:23:42:ce:23:0a:26:03:
                    1a:e0:6f:8e:f0:4e:86:43:da:2c:a6:35:83:e2:a3:
                    6e:0c:bd:4c:0c:fc:56:ca:aa:11:94:57:c5:65:cf:
                    58:75:6e:33:31:52:4b:34:7a:b9:b6:3c:82:0d:23:
                    8a:25:8b:7f:e1:20:c6:4f:08:96:71:64:8d:39:b1:
                    2c:1a:94:61:fb:d8:f4:71:5b:05:fc:90:31:30:2e:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:05:35:49:BD:95:98:CA:E8:5B:53:89:B1:27:FB:E7:F9:7E:23:77
            X509v3 Authority Key Identifier:
                keyid:A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:86:c0:b9:c4:b5:63:68:3b:37:3b:53:f3:db:ad:ec:15:10:
         ac:cd:64:ae:cb:d9:36:40:0a:9b:17:b1:2a:6c:df:a8:c4:e9:
         c2:6f:9f:b6:33:13:50:3a:35:f8:f5:d2:84:30:8b:10:b7:bb:
         02:3a:4d:34:22:67:82:f4:29:dc:ce:4a:f5:19:4f:74:f5:da:
         4a:29:02:30:cb:93:e8:98:b1:e4:f2:15:1b:a6:30:c1:65:30:
         fc:f3:3e:dd:6d:96:11:e3:f5:96:65:ef:ee:da:98:cf:94:f0:
         77:da:a5:0e:66:13:8a:a7:4d:f3:b8:10:9d:5b:b7:1a:b0:93:
         93:f2:6a:f8:1c:bc:ed:5d:3f:27:44:fc:b2:77:d1:42:8d:59:
         88:7a:45:23:8a:a4:13:35:7e:13:6c:9d:fd:d7:9a:4e:ec:c0:
         83:da:70:29:76:6d:69:b5:9e:22:b5:11:27:13:24:20:3b:c9:
         2c:6c:c8:83:de:e7:39:87:ee:1c:4a:ee:30:df:6e:3a:07:59:
         44:c0:6a:82:5f:7b:63:9f:d8:be:b8:63:e7:a5:98:17:00:01:
         31:ed:d4:e6:32:5b:a9:0c:85:53:aa:73:a0:2d:2b:41:e3:79:
         00:bb:d6:cb:2c:77:1a:24:bd:8b:31:ae:49:01:9a:71:d1:4f:
         5f:f4:83:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 16:48:21 2025 by rpki-client