Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
File:                     dF3XcQDluqV1XTuTwPQnTCebbdc.mft (raw, json)
Hash identifier:          SCakU19aiVVVWYZ7W4tLMez1OpHqEYoHhsB22/Ddp10=
Subject key identifier:   15:90:91:BD:2F:44:3E:DC:67:28:6A:B2:78:5E:9B:18:41:9B:CB:D8
Authority key identifier: 74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7
Certificate issuer:       /CN=F36A39CEAR/serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
Certificate serial:       02D0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
Manifest number:          02CF
Signing time:             Sun 11 May 2025 03:46:42 +0000
Manifest this update:     Sun 11 May 2025 03:46:41 +0000
Manifest next update:     Tue 13 May 2025 03:46:41 +0000
Files and hashes:         1: dF3XcQDluqV1XTuTwPQnTCebbdc.crl (hash: m3Bt2mHRzYdTBzRv+CL4EOWLNxw/QaiX9JeKvc1C6Bg=)
                          2: 9D1F1EF4403611EF977FF944762E951A.roa (hash: hLeObmsi90Fg8VBqFqxqwLqUBn1VTFF0SZa65WhAxQ4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
                          rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 03:46:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A39CEAR, serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
        Validity
            Not Before: May 11 03:46:41 2025 GMT
            Not After : May 13 03:46:41 2025 GMT
        Subject: CN=68201da2-5d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4d:10:70:c7:0b:02:7d:1b:fc:27:35:00:c6:
                    55:2c:7d:15:29:97:31:83:68:33:3e:ef:9b:65:9b:
                    c5:4f:55:95:de:2b:0a:7f:54:d8:d0:12:64:77:c3:
                    9b:f1:04:45:7c:54:26:5f:0a:20:2a:03:17:ee:ad:
                    0e:14:cc:82:33:2e:1c:eb:70:fe:de:a8:10:3a:0a:
                    a7:41:56:5a:f5:2c:b5:8b:47:da:c2:0a:75:4c:46:
                    63:c3:14:fd:ed:20:59:74:f5:98:3e:8b:13:95:56:
                    33:56:8e:e4:47:b9:f8:d2:d7:ae:fa:5d:e9:ee:97:
                    4d:09:f5:cf:20:77:31:08:29:5d:28:a8:15:de:15:
                    12:a1:e6:67:ad:0c:08:cc:c1:aa:29:15:5d:22:2f:
                    8c:93:c9:28:96:94:ee:42:27:78:5b:09:a4:ae:53:
                    e1:2d:97:47:0e:cf:c4:cd:bf:4a:3f:06:78:45:ca:
                    3c:b6:46:26:fb:0a:03:74:bf:25:20:23:b0:e3:4c:
                    07:82:1e:e2:33:3a:89:dd:e1:68:c0:72:da:da:e2:
                    13:4d:8c:5f:a0:99:f7:8e:9d:41:89:38:9e:c6:55:
                    32:6f:ea:36:50:1a:ac:a7:3a:a7:9b:1b:a1:60:e0:
                    28:d5:6a:5c:9f:77:07:04:a9:b0:d4:1d:05:58:fb:
                    fd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:90:91:BD:2F:44:3E:DC:67:28:6A:B2:78:5E:9B:18:41:9B:CB:D8
            X509v3 Authority Key Identifier:
                keyid:74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:c4:00:92:c8:90:02:f4:91:73:6f:de:0e:6d:05:d8:b6:a1:
         e0:73:fc:ee:c8:f8:8e:5b:7e:8a:c7:c6:99:18:9e:1f:ef:15:
         1c:9a:9f:46:ba:96:cf:0d:fd:c9:b4:75:35:c1:70:ea:88:51:
         7a:5f:6d:43:07:57:82:f0:27:cd:4a:ce:f2:eb:81:e0:08:1e:
         a3:e7:61:3b:c9:e4:91:0c:8c:01:e1:b8:15:1e:6d:6a:f4:75:
         e0:4e:5f:9b:ad:c5:53:53:1e:0e:82:c0:24:65:10:b4:ff:a1:
         71:71:2d:3d:64:18:77:61:af:ce:db:db:6c:b7:75:3e:c6:93:
         36:4e:98:c6:99:da:15:5e:c5:b4:6a:15:03:c5:98:8b:0f:2e:
         c7:14:cd:31:af:96:27:7b:34:94:fb:e4:95:a7:2f:24:c4:d3:
         82:36:82:29:ba:82:89:7e:f5:16:78:8c:2f:e9:ef:c0:fd:a0:
         33:74:00:12:a5:d3:7e:dc:54:04:f4:55:38:a8:cf:ba:2d:12:
         3c:45:12:69:8f:e2:d4:2b:3a:21:cd:08:19:50:f6:20:a7:4e:
         01:15:df:92:e1:ee:93:91:07:6c:3e:dc:58:e3:51:03:6f:66:
         fb:3a:a2:50:66:35:24:81:2d:54:9e:c6:de:fb:34:42:ea:ce:
         c0:94:07:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:55:34 2025 by rpki-client