Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft
File:                     PuGjQpUbwSAiYnHzC4UKh356oZs.mft (raw, json)
Hash identifier:          tqOpCNPS1wj5i7Rw2rO2INQJdq4CaaJGIAuhPfhU/ts=
Subject key identifier:   3B:0E:94:FA:09:38:9E:A3:7B:00:76:00:A9:C6:09:03:9C:E3:3D:AB
Authority key identifier: 3E:E1:A3:42:95:1B:C1:20:22:62:71:F3:0B:85:0A:87:7E:7A:A1:9B
Certificate issuer:       /CN=F36B95DEAR/serialNumber=3EE1A342951BC120226271F30B850A877E7AA19B
Certificate serial:       0748
Authority info access:    rsync://rpki.afrinic.net/repository/arin/PuGjQpUbwSAiYnHzC4UKh356oZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft
Manifest number:          0745
Signing time:             Thu 03 Jul 2025 01:59:17 +0000
Manifest this update:     Thu 03 Jul 2025 01:59:17 +0000
Manifest next update:     Sat 05 Jul 2025 01:59:17 +0000
Files and hashes:         1: PuGjQpUbwSAiYnHzC4UKh356oZs.crl (hash: HmTo39SrnVLgdtC4FIfIwpbYSnYTyHUcSCqXYU0WhMk=)
                          2: 2AAAA51ACA5F11EAB07F4086F8AEA228.roa (hash: 9lpPgbRATZcc3ZHLRlyfVXyO2KMqQ5Z59ZWuFR9owTA=)
                          3: D0C0ABF8CA5E11EAB567CE85F8AEA228.roa (hash: ynXcFOQd3R7EbSd50GZihRiiSJvK2sTmwunIuzMYoks=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft
                          rsync://rpki.afrinic.net/repository/arin/PuGjQpUbwSAiYnHzC4UKh356oZs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1864 (0x748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B95DEAR, serialNumber=3EE1A342951BC120226271F30B850A877E7AA19B
        Validity
            Not Before: Jul  3 01:59:17 2025 GMT
            Not After : Jul  5 01:59:17 2025 GMT
        Subject: CN=6865e3f5-18cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f3:c5:b1:59:da:a9:d5:3b:77:57:6d:5e:3f:
                    6d:dc:72:58:ac:e2:94:33:b1:d2:65:4b:5e:7e:25:
                    65:3d:73:98:9a:7a:5c:1a:6a:9e:5d:c4:96:df:1e:
                    30:7b:40:3f:df:92:5b:50:0d:af:e0:20:45:cf:da:
                    39:98:5c:c7:48:ff:a2:84:4b:34:3c:8c:19:56:d0:
                    08:b4:f4:17:14:aa:4f:94:41:66:e1:c6:b2:d0:51:
                    8f:7c:66:0c:bc:78:65:d4:cb:dc:38:24:3d:4a:48:
                    94:f0:f5:ce:8d:0e:7e:29:50:d5:04:0e:8a:0e:24:
                    e8:25:18:6d:bc:4b:0a:6a:de:8b:02:f1:33:20:07:
                    ae:3e:f3:51:03:c3:d4:b3:b7:88:61:9b:c2:e9:c1:
                    fb:e3:1e:a6:2a:0f:c8:dc:b1:66:7c:14:61:81:e4:
                    4c:fa:34:b0:40:58:b1:f0:6d:6a:e5:a8:b3:7f:91:
                    ba:55:0f:93:f8:e7:05:21:59:71:86:5f:0a:2b:2e:
                    c3:69:a1:98:6f:17:22:b1:a5:f9:cc:e7:53:51:62:
                    09:a9:37:72:ed:61:58:73:de:2d:10:0c:33:56:2b:
                    c3:85:47:40:16:e4:5a:73:ff:19:51:bf:9b:eb:29:
                    d5:0c:9b:cb:1c:9f:5a:8f:41:ef:47:c6:43:98:75:
                    68:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0E:94:FA:09:38:9E:A3:7B:00:76:00:A9:C6:09:03:9C:E3:3D:AB
            X509v3 Authority Key Identifier:
                keyid:3E:E1:A3:42:95:1B:C1:20:22:62:71:F3:0B:85:0A:87:7E:7A:A1:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/PuGjQpUbwSAiYnHzC4UKh356oZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/1138F8B2CA5E11EA93FAF884F8AEA228/PuGjQpUbwSAiYnHzC4UKh356oZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:f5:e5:83:d1:96:0c:b3:c0:88:60:2f:45:ca:0a:ad:68:3e:
         c7:d0:37:49:f8:08:be:f8:dc:f6:cc:5b:d6:a2:40:af:3f:56:
         7a:21:53:81:36:e5:f5:1c:b5:37:3f:03:56:46:12:d3:46:62:
         d6:fc:78:e7:15:68:ea:a1:e8:44:82:bf:f6:fd:6d:31:81:87:
         99:38:5f:85:30:33:ae:77:ad:88:83:69:32:f8:08:eb:54:78:
         cf:45:2d:cc:77:ab:61:1a:70:28:1b:0b:92:5b:f7:b4:02:f4:
         f1:d5:95:dd:f9:b3:d7:90:9a:d5:e3:7b:bd:2a:1b:ab:00:ac:
         49:09:98:c2:0d:40:69:94:f5:cc:95:88:bb:f1:0f:a0:95:d8:
         49:3c:03:52:eb:42:c5:a9:f0:be:8f:c2:c8:cf:3a:ca:89:bd:
         bd:dd:15:a2:e8:78:22:5f:3c:e6:0b:ad:ff:13:09:0a:03:5c:
         bd:1a:da:2b:4c:f1:ff:91:5b:b7:30:9b:90:fe:cf:0b:d7:5c:
         93:ef:f8:30:87:05:88:44:19:47:3c:c3:9d:17:03:3e:1d:bb:
         8c:8e:ef:a3:5b:c2:ee:89:2d:34:ba:c3:aa:02:6f:d1:bd:ba:
         21:91:2d:f0:3a:b1:9b:65:60:96:42:20:3c:87:08:cb:f1:17:
         b9:f6:6c:95
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICB0gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Qjk1REVBUjExMC8GA1UEBRMoM0VFMUEzNDI5NTFCQzEyMDIyNjI3MUYzMEI4NTBB
ODc3RTdBQTE5QjAeFw0yNTA3MDMwMTU5MTdaFw0yNTA3MDUwMTU5MTdaMBgxFjAU
BgNVBAMTDTY4NjVlM2Y1LTE4Y2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDA88WxWdqp1Tt3V21eP23cclis4pQzsdJlS15+JWU9c5iaelwaap5dxJbf
HjB7QD/fkltQDa/gIEXP2jmYXMdI/6KESzQ8jBlW0Ai09BcUqk+UQWbhxrLQUY98
Zgy8eGXUy9w4JD1KSJTw9c6NDn4pUNUEDooOJOglGG28Swpq3osC8TMgB64+81ED
w9Szt4hhm8LpwfvjHqYqD8jcsWZ8FGGB5Ez6NLBAWLHwbWrlqLN/kbpVD5P45wUh
WXGGXworLsNpoZhvFyKxpfnM51NRYgmpN3LtYVhz3i0QDDNWK8OFR0AW5Fpz/xlR
v5vrKdUMm8scn1qPQe9HxkOYdWinAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUOw6U
+gk4nqN7AHYAqcYJA5zjPaswHwYDVR0jBBgwFoAUPuGjQpUbwSAiYnHzC4UKh356
oZswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI5NURFLzExMzhGOEIyQ0E1RTExRUE5M0ZBRjg4NEY4QUVBMjI4L1B1R2pR
cFVid1NBaVluSHpDNFVLaDM1Nm9acy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1B1R2pRcFVid1NBaVluSHpDNFVLaDM1Nm9acy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2Qjk1REUvMTEzOEY4QjJDQTVFMTFFQTkzRkFGODg0RjhBRUEy
MjgvUHVHalFwVWJ3U0FpWW5IekM0VUtoMzU2b1pzLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDC9eWD0ZYMs8CIYC9FygqtaD7H0DdJ+Ai+
+Nz2zFvWokCvP1Z6IVOBNuX1HLU3PwNWRhLTRmLW/HjnFWjqoehEgr/2/W0xgYeZ
OF+FMDOud62Ig2ky+AjrVHjPRS3Md6thGnAoGwuSW/e0AvTx1ZXd+bPXkJrV43u9
KhurAKxJCZjCDUBplPXMlYi78Q+gldhJPANS60LFqfC+j8LIzzrKib293RWi6Hgi
XzzmC63/EwkKA1y9GtorTPH/kVu3MJuQ/s8L11yT7/gwhwWIRBlHPMOdFwM+HbuM
ju+jW8LuiS00usOqAm/RvbohkS3wOrGbZWCWQiA8hwjL8Re59myV
-----END CERTIFICATE-----
Generated at Thu Jul 3 14:31:20 2025 by rpki-client