Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
File:                     3MPWc23vjmmxdsLjgI6oQGpetKE.mft (raw, json)
Hash identifier:          1Q5L+n9pfEfhcER+F03rIB68pYQ+LXaQAcp4iiBD41o=
Subject key identifier:   60:05:85:B1:29:CC:D4:E4:46:8F:D3:EA:4C:3B:74:D7:98:AD:52:20
Authority key identifier: DC:C3:D6:73:6D:EF:8E:69:B1:76:C2:E3:80:8E:A8:40:6A:5E:B4:A1
Certificate issuer:       /CN=F36A2F84AR/serialNumber=DCC3D6736DEF8E69B176C2E3808EA8406A5EB4A1
Certificate serial:       0595
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
Manifest number:          0592
Signing time:             Sun 11 May 2025 02:26:46 +0000
Manifest this update:     Sun 11 May 2025 02:26:45 +0000
Manifest next update:     Tue 13 May 2025 02:26:45 +0000
Files and hashes:         1: 3MPWc23vjmmxdsLjgI6oQGpetKE.crl (hash: a8GuvjGUBlKugCD2723KvEVGpWF96BqCakDLqoUo5ZE=)
                          2: 5F04C4C62D9B11ECA647564FD8A014CE.roa (hash: zW0DV4hdw90fXmQHrES0qIG730a3Er4NWHsJMqXehd8=)
                          3: 09859B12EEB511EBAC07A132D8A014CE.roa (hash: QJgNFrSSnI5wUL7064SxE7ymTJEcB6oc8kqJd8ZGe2E=)
                          4: D68FB06AEEC011EB8A6E3C44D8A014CE.roa (hash: FZohHGP60efclGdlHNaaNbxSbBTri6OJhgg/NinDFR0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
                          rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1429 (0x595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2F84AR, serialNumber=DCC3D6736DEF8E69B176C2E3808EA8406A5EB4A1
        Validity
            Not Before: May 11 02:26:45 2025 GMT
            Not After : May 13 02:26:45 2025 GMT
        Subject: CN=68200ae5-df5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:d9:8d:8f:b6:49:d0:91:d9:a4:8c:b3:7a:
                    6c:0c:db:e4:4d:9c:7c:cf:2d:01:2c:63:93:fb:06:
                    0b:5d:7d:c9:2e:54:d8:4a:35:32:b9:bb:75:a1:0f:
                    9c:13:ac:a9:b9:58:a3:e4:d4:79:26:5a:d7:95:64:
                    f7:fd:20:57:9c:21:78:ca:9c:9c:61:96:2a:85:ca:
                    46:42:65:83:c3:cc:8a:08:e6:01:d4:38:80:12:a7:
                    6c:be:cd:94:98:83:66:29:a4:32:d1:09:bc:5c:c1:
                    38:fd:16:64:27:99:4f:9e:e3:44:f3:d0:79:6e:9f:
                    4e:f7:a3:18:63:47:7e:1c:98:75:0c:6a:11:a6:80:
                    36:4d:e3:0e:de:10:62:b2:33:06:b5:27:9d:5e:09:
                    e5:fe:d2:66:60:8e:61:45:62:b0:e9:be:7e:f5:87:
                    3c:7f:79:4e:99:f1:ba:68:fd:ba:d9:06:a5:4a:81:
                    22:8b:79:72:88:67:2a:83:24:a1:ed:74:da:c8:00:
                    7a:b1:ca:99:13:a8:55:fb:b8:5c:8a:4c:70:4a:07:
                    a8:3d:62:82:ec:06:f3:7e:7d:8f:0d:56:ac:3b:4e:
                    e7:7b:53:7f:f8:8e:7e:5e:18:b6:91:50:41:cf:c7:
                    76:07:cb:57:65:89:6e:2d:19:cb:60:6f:76:a0:d1:
                    85:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:05:85:B1:29:CC:D4:E4:46:8F:D3:EA:4C:3B:74:D7:98:AD:52:20
            X509v3 Authority Key Identifier:
                keyid:DC:C3:D6:73:6D:EF:8E:69:B1:76:C2:E3:80:8E:A8:40:6A:5E:B4:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:6c:c9:5b:c3:02:07:e7:25:f3:94:33:69:12:e5:a1:08:9b:
         dc:85:86:e7:17:e1:8e:9c:cb:eb:39:dd:38:9d:56:07:33:b0:
         04:d4:f4:c8:b3:73:e5:79:47:a4:59:bc:a1:71:69:6d:d0:b2:
         63:09:86:12:be:5b:77:12:c2:1a:71:6c:51:4a:cb:00:ce:a6:
         b5:62:95:62:94:d7:d9:b1:05:da:2a:d8:b7:26:e2:2e:56:2b:
         9b:36:56:21:10:fe:78:f2:7f:d6:b6:d2:39:db:4c:2f:4d:8d:
         ae:50:44:d9:ea:d5:8c:32:42:17:10:7e:15:9f:ac:66:25:fd:
         2e:cb:2f:9f:ee:f5:d7:9f:b8:a5:02:77:18:91:9b:0d:85:5b:
         0a:18:34:cd:06:81:17:93:91:73:b8:bd:1e:14:62:1c:91:5e:
         3a:8c:50:02:db:86:a4:35:4b:54:52:34:8e:cc:55:2e:89:f6:
         8a:71:de:9c:37:7a:17:89:ac:c1:26:d9:a4:d4:27:a1:fd:11:
         e6:f4:58:bc:88:a4:76:37:54:ff:36:f1:09:b0:9f:67:af:67:
         05:be:9a:68:f6:1e:8d:f4:95:f3:21:23:ad:7e:5e:f8:49:77:
         66:25:a9:fe:19:5a:13:5b:83:3a:5c:2f:b8:f4:88:73:84:94:
         a4:8a:6a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:40:55 2025 by rpki-client