Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.mft
File:                     oeAWQGNsg8ItBwmSQsz0wmkQK14.mft (raw, json)
Hash identifier:          PTGlV+drUfxhffmriTjiyLW8YjErd2HHEa6/OMPYwDg=
Subject key identifier:   10:41:FC:49:CB:05:34:60:4A:B3:94:71:85:84:A2:B8:33:FE:90:20
Authority key identifier: A1:E0:16:40:63:6C:83:C2:2D:07:09:92:42:CC:F4:C2:69:10:2B:5E
Certificate issuer:       /CN=F36A4459AR/serialNumber=A1E01640636C83C22D07099242CCF4C269102B5E
Certificate serial:       0434
Authority info access:    rsync://rpki.afrinic.net/repository/arin/oeAWQGNsg8ItBwmSQsz0wmkQK14.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.mft
Manifest number:          0430
Signing time:             Wed 02 Jul 2025 03:10:13 +0000
Manifest this update:     Wed 02 Jul 2025 03:10:12 +0000
Manifest next update:     Fri 04 Jul 2025 03:10:12 +0000
Files and hashes:         1: oeAWQGNsg8ItBwmSQsz0wmkQK14.crl (hash: jlxwB5ui8qmQTy1sIVAm81oIYgu/UfO8Hy5qUMyZIxs=)
                          2: 1F08DD5ED16711EEACC86AA3775412E6.roa (hash: Az9hy8W484eMfFVCabnds9LtEfLT4iJCPtwyoHAX59g=)
                          3: 013601FA2D1F11EDB1D2DC93F1222468.roa (hash: yGuY2CCJU8+S6SbKAlGxxoY56hHo78tBwYij9EjfVDE=)
                          4: 3876EB0ED16811EE9C0E66A5775412E6.roa (hash: +yOAS1cNO7QrZSN56ooSffQEaFtdkY96rU9n2WKG4AA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.mft
                          rsync://rpki.afrinic.net/repository/arin/oeAWQGNsg8ItBwmSQsz0wmkQK14.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 11:30:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1076 (0x434)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4459AR, serialNumber=A1E01640636C83C22D07099242CCF4C269102B5E
        Validity
            Not Before: Jul  2 03:10:12 2025 GMT
            Not After : Jul  4 03:10:12 2025 GMT
        Subject: CN=6864a315-0acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:55:04:59:15:a1:da:d4:9f:fe:00:ce:45:a1:
                    11:23:a9:f7:fd:ac:4a:b6:d8:46:e8:e5:b8:d1:b1:
                    9d:ae:17:82:5d:29:2f:10:fa:cb:0f:da:22:88:71:
                    d1:e5:b3:e1:16:91:9f:56:7b:c3:6d:58:5f:0e:ef:
                    ea:9a:ce:c6:c3:13:35:53:cf:d3:95:50:cc:51:50:
                    fc:a7:7c:74:00:a2:89:ed:9e:f7:78:a0:25:b7:59:
                    6a:57:44:aa:48:02:d3:36:a3:83:26:7c:35:bd:c8:
                    61:af:13:69:c1:31:78:ae:8f:96:70:78:d5:e5:64:
                    00:c4:91:52:e9:9d:5a:d8:6d:be:90:e5:f3:bf:9e:
                    d1:c4:d4:79:a9:c1:68:48:d2:a8:a8:3a:36:fb:43:
                    04:68:2b:09:43:6d:65:5a:83:dd:ce:a5:ff:fe:8b:
                    d2:ce:bf:7b:a6:06:61:3e:4b:ba:f2:a4:ae:d7:3a:
                    4d:a8:7b:e5:de:21:63:d8:0a:53:d8:07:d1:df:a1:
                    bc:fe:37:15:39:8c:f9:12:07:35:12:e3:5f:45:be:
                    48:9a:9a:56:ba:73:be:38:40:73:9c:08:45:90:b1:
                    8e:d1:05:b5:b5:4b:b0:2c:bf:75:58:33:0f:07:eb:
                    9b:0f:18:7c:07:97:36:fd:44:49:0e:70:e8:b2:20:
                    4d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:41:FC:49:CB:05:34:60:4A:B3:94:71:85:84:A2:B8:33:FE:90:20
            X509v3 Authority Key Identifier:
                keyid:A1:E0:16:40:63:6C:83:C2:2D:07:09:92:42:CC:F4:C2:69:10:2B:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oeAWQGNsg8ItBwmSQsz0wmkQK14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/E99BCBEA2D1B11EDA54FC78BF1222468/oeAWQGNsg8ItBwmSQsz0wmkQK14.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:22:72:94:a3:9c:65:57:0d:5f:51:7f:76:0d:10:20:7b:54:
         77:2a:10:e5:40:2f:0d:23:ff:9f:22:e9:aa:7d:e0:b2:93:aa:
         67:05:3a:7c:22:e9:38:4a:23:a1:98:04:9b:eb:76:dd:7e:5e:
         74:b3:c3:95:e8:59:02:ca:a6:1e:23:d3:29:75:7e:1f:f4:7c:
         7e:08:d6:fe:48:99:08:2b:cb:97:71:af:e0:2c:54:dc:21:2e:
         23:93:99:ff:57:ef:4f:04:4e:13:49:7e:de:2a:7d:ee:fe:ff:
         65:52:95:14:3d:03:17:67:db:e2:dd:b0:1d:65:48:70:4b:a1:
         26:02:ae:af:2d:ef:2f:54:2c:f5:aa:d2:a2:47:b5:0f:6b:86:
         cb:35:29:f1:70:53:43:f7:d9:dc:35:ca:b6:04:6e:4e:6c:c7:
         73:fe:1a:2d:1e:e3:14:ca:60:11:af:dc:8c:83:ab:dc:a4:94:
         7c:93:88:39:19:6f:3f:cd:0e:a4:3e:26:0d:52:cb:42:d3:68:
         c2:20:2d:b3:c3:25:f3:bc:f7:60:61:5e:f4:ab:16:8f:23:8b:
         f3:d2:b4:8c:d6:9d:3f:e8:1d:bb:b4:f4:1d:c9:78:44:05:5a:
         76:19:cb:e1:8b:39:ec:14:4c:64:f5:93:9a:7b:89:be:45:17:
         cb:57:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:44:13 2025 by rpki-client