Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
File:                     LGcfQllwcCcjdUC_YiZaLZfrlcs.mft (raw, json)
Hash identifier:          f0I4ZHsZO1LvHxAnwtj5X6+3LoUZrnQhYGjP43Jqs/A=
Subject key identifier:   E8:0D:D3:56:4B:C1:81:6E:24:A4:BB:AE:A1:C2:2B:C3:B6:8C:14:CE
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Certificate issuer:       /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial:       0201
Authority info access:    rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
Manifest number:          01FC
Signing time:             Sun 06 Jul 2025 04:28:00 +0000
Manifest this update:     Sun 06 Jul 2025 04:27:59 +0000
Manifest next update:     Tue 08 Jul 2025 04:27:59 +0000
Files and hashes:         1: LGcfQllwcCcjdUC_YiZaLZfrlcs.crl (hash: 6W/4D5ss6X2nyejLFNJWAZhCmYKptPugh7re1Lgd8V8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
                          rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 08 Jul 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A34E4AR, serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
        Validity
            Not Before: Jul  6 04:27:59 2025 GMT
            Not After : Jul  8 04:27:59 2025 GMT
        Subject: CN=6869fb50-6b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:59:c5:3c:3e:6d:32:7a:c1:4f:ed:09:d8:29:
                    6d:36:aa:ac:45:f9:d7:04:55:be:6e:f0:de:c4:d7:
                    3f:48:6d:cb:a5:99:81:9f:d3:dd:14:aa:33:13:75:
                    ef:0a:37:9f:1c:c2:5e:82:e1:00:1b:78:5e:dc:8d:
                    4c:29:fe:17:e1:8c:b1:48:30:07:4f:41:b1:38:26:
                    72:01:46:2d:8a:97:64:f3:4d:41:03:34:6d:af:26:
                    18:8a:f1:3b:b8:ae:1c:e0:41:4c:bc:57:4e:84:75:
                    6f:f3:4a:5b:03:a5:83:f4:94:c6:c2:77:2e:b9:3f:
                    39:f1:18:59:2c:08:65:2b:86:e7:82:32:e0:f0:cc:
                    32:ad:df:4b:ff:38:35:38:9f:0a:b4:5b:fb:da:39:
                    29:d4:26:16:2b:6d:8d:77:c7:c5:ae:14:22:e8:5b:
                    b6:ed:34:f7:92:6e:61:4f:fa:af:e8:2d:60:e1:8a:
                    19:c7:16:de:1a:50:e9:62:75:8e:0f:a3:be:e0:41:
                    85:e4:10:fd:2a:5e:89:0c:29:a7:c2:d7:c3:ec:29:
                    15:84:0d:da:c7:80:f4:94:65:b8:cd:3e:e7:d0:92:
                    a9:56:0e:f1:8e:a9:12:88:44:d7:59:78:d2:bb:17:
                    88:a0:94:4f:1d:af:a3:4e:94:84:0c:30:0f:ca:c3:
                    ce:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0D:D3:56:4B:C1:81:6E:24:A4:BB:AE:A1:C2:2B:C3:B6:8C:14:CE
            X509v3 Authority Key Identifier:
                keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:dd:bd:c9:8d:76:a1:df:5b:7c:d5:5a:99:1b:f1:23:75:57:
         b1:9e:1b:2c:b5:61:a7:a4:46:ce:59:78:03:99:9b:b7:78:72:
         08:56:52:81:0d:65:33:4b:2a:2b:7f:e0:64:77:5e:4f:90:e5:
         24:6c:de:2f:7d:6c:32:4b:1f:9b:4c:7a:92:3a:10:43:e9:2a:
         c5:6e:a7:13:fa:ae:26:87:25:65:d1:ac:2e:00:f1:f0:3c:75:
         3e:a5:86:0f:ad:4a:4a:99:58:cf:10:c3:1b:52:9c:3e:04:c6:
         36:b3:9a:f4:d2:b1:e6:30:8f:eb:a1:8e:7e:0d:b6:d9:72:e2:
         b6:bf:d5:b0:44:60:40:55:12:41:2d:fb:08:aa:cc:a9:21:ed:
         3f:9a:95:26:63:2d:59:98:3a:94:4a:30:2c:68:92:5c:39:89:
         3b:12:0e:40:cb:d6:29:94:f5:04:45:63:06:44:07:93:8c:10:
         2c:ee:19:8c:ea:3a:37:28:32:54:19:be:7b:fa:0b:d3:39:f2:
         5e:1c:ef:f3:08:38:24:63:a7:e2:6a:1e:6e:ab:6d:39:cd:c6:
         30:93:b2:1f:1d:55:ec:66:46:dd:f6:82:49:02:f3:32:f3:74:
         22:d3:e3:d5:dc:19:56:e4:ae:42:02:1c:b5:fe:69:66:5f:54:
         47:7b:03:77
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAgEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTM0RTRBUjExMC8GA1UEBRMoMkM2NzFGNDI1OTcwNzAyNzIzNzU0MEJGNjIyNjVB
MkQ5N0VCOTVDQjAeFw0yNTA3MDYwNDI3NTlaFw0yNTA3MDgwNDI3NTlaMBgxFjAU
BgNVBAMTDTY4NjlmYjUwLTZiNTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0WcU8Pm0yesFP7QnYKW02qqxF+dcEVb5u8N7E1z9IbculmYGf090UqjMT
de8KN58cwl6C4QAbeF7cjUwp/hfhjLFIMAdPQbE4JnIBRi2Kl2TzTUEDNG2vJhiK
8Tu4rhzgQUy8V06EdW/zSlsDpYP0lMbCdy65PznxGFksCGUrhueCMuDwzDKt30v/
ODU4nwq0W/vaOSnUJhYrbY13x8WuFCLoW7btNPeSbmFP+q/oLWDhihnHFt4aUOli
dY4Po77gQYXkEP0qXokMKafC18PsKRWEDdrHgPSUZbjNPufQkqlWDvGOqRKIRNdZ
eNK7F4iglE8dr6NOlIQMMA/Kw863AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU6A3T
VkvBgW4kpLuuocIrw7aMFM4wHwYDVR0jBBgwFoAULGcfQllwcCcjdUC/YiZaLZfr
lcswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzNEU0L0NDOEZDMzZDREEzMDExRUU5RTZDOThBQTc3NTQxMkU2L0xHY2ZR
bGx3Y0NjamRVQ19ZaVphTFpmcmxjcy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0xHY2ZRbGx3Y0NjamRVQ19ZaVphTFpmcmxjcy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QTM0RTQvQ0M4RkMzNkNEQTMwMTFFRTlFNkM5OEFBNzc1NDEy
RTYvTEdjZlFsbHdjQ2NqZFVDX1lpWmFMWmZybGNzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCL3b3JjXah31t81VqZG/EjdVexnhsstWGn
pEbOWXgDmZu3eHIIVlKBDWUzSyorf+Bkd15PkOUkbN4vfWwySx+bTHqSOhBD6SrF
bqcT+q4mhyVl0awuAPHwPHU+pYYPrUpKmVjPEMMbUpw+BMY2s5r00rHmMI/roY5+
DbbZcuK2v9WwRGBAVRJBLfsIqsypIe0/mpUmYy1ZmDqUSjAsaJJcOYk7Eg5Ay9Yp
lPUERWMGRAeTjBAs7hmM6jo3KDJUGb57+gvTOfJeHO/zCDgkY6fiah5uq205zcYw
k7IfHVXsZkbd9oJJAvMy83Qi0+PV3BlW5K5CAhy1/mlmX1RHewN3
-----END CERTIFICATE-----
Generated at Sun Jul 6 12:24:04 2025 by rpki-client