Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
File:                     HScudZNWWso9tIbvvdAfGXRUyYM.mft (raw, json)
Hash identifier:          b+ykZ+O6snDfIi2A8JJmlTQkY1sF7eqpEBEV9wgBPOE=
Subject key identifier:   E3:41:64:FD:5C:DC:8A:87:5A:00:B7:4B:37:CB:36:DB:85:76:B2:66
Authority key identifier: 1D:27:2E:75:93:56:5A:CA:3D:B4:86:EF:BD:D0:1F:19:74:54:C9:83
Certificate issuer:       /CN=F36C11E4AR/serialNumber=1D272E7593565ACA3DB486EFBDD01F197454C983
Certificate serial:       0239
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HScudZNWWso9tIbvvdAfGXRUyYM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
Manifest number:          0238
Signing time:             Sat 17 May 2025 04:09:06 +0000
Manifest this update:     Sat 17 May 2025 04:09:05 +0000
Manifest next update:     Mon 19 May 2025 04:09:05 +0000
Files and hashes:         1: HScudZNWWso9tIbvvdAfGXRUyYM.crl (hash: SiRv57pUwLS1NkXEw3NFqZI7hXAnAMCxiIIJMUqmUVM=)
                          2: DCA06BE083AE11EE861B88374AD9E6FC.roa (hash: 9vkj+XPNGesFwVW815jiX1HMcnZSf46ECccXSGVK764=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
                          rsync://rpki.afrinic.net/repository/arin/HScudZNWWso9tIbvvdAfGXRUyYM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 569 (0x239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C11E4AR, serialNumber=1D272E7593565ACA3DB486EFBDD01F197454C983
        Validity
            Not Before: May 17 04:09:05 2025 GMT
            Not After : May 19 04:09:05 2025 GMT
        Subject: CN=68280be2-d952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:86:08:60:c1:6d:04:18:c8:54:2e:56:93:67:
                    57:67:b4:c1:7d:89:30:c1:2f:c2:a7:ef:c8:68:c6:
                    5f:d5:16:8c:3f:5a:d4:43:60:04:61:73:19:ad:4c:
                    3f:a2:d9:a0:4b:2e:41:3e:aa:5c:c6:96:a3:8a:f0:
                    16:eb:49:ad:b0:f3:35:9b:84:3a:9e:bc:07:3a:ed:
                    90:3c:10:e0:66:7c:1d:12:a9:4f:99:ec:65:fd:d9:
                    78:64:88:45:2f:ae:f9:7b:cc:16:75:cf:03:b0:3f:
                    d4:ff:f8:6a:58:e2:60:f1:60:b3:1b:7c:b3:68:38:
                    15:3a:c8:cf:fd:e3:96:d3:be:64:a2:2d:d5:37:75:
                    2c:ab:52:36:89:5e:83:44:69:5e:ea:af:53:a6:14:
                    ae:77:4b:71:4d:f3:0f:67:49:7f:ad:4b:24:97:f4:
                    bc:49:5f:98:04:65:16:f2:88:82:71:e8:b6:b2:dc:
                    20:e2:e4:6c:19:7c:da:99:4e:91:d5:47:4d:7d:91:
                    a9:c6:f5:89:d5:81:57:b1:36:2b:b4:dc:b9:de:37:
                    c4:98:c7:1c:f4:dc:1b:d5:18:2d:84:8b:8a:93:10:
                    73:b3:29:c0:0e:d1:8d:60:a3:e7:98:1e:a4:d0:5c:
                    51:5f:e2:3f:c4:e9:a3:2e:b2:da:8d:89:fb:9a:e2:
                    28:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:41:64:FD:5C:DC:8A:87:5A:00:B7:4B:37:CB:36:DB:85:76:B2:66
            X509v3 Authority Key Identifier:
                keyid:1D:27:2E:75:93:56:5A:CA:3D:B4:86:EF:BD:D0:1F:19:74:54:C9:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HScudZNWWso9tIbvvdAfGXRUyYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C11E4/27C53A0883AD11EE98E566324AD9E6FC/HScudZNWWso9tIbvvdAfGXRUyYM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:8b:05:75:8f:13:c8:7d:be:af:95:0c:2a:d5:90:84:20:c8:
         4b:96:9a:f6:60:03:7a:78:ff:d5:99:52:c1:e7:fe:87:0c:bb:
         c5:10:d7:6a:45:cd:e4:22:c6:b3:92:a9:35:d4:bb:6a:38:07:
         bd:f3:f8:a5:5e:52:65:13:c6:46:90:d3:6a:5d:a4:5f:8e:d1:
         96:6a:2c:94:5d:4d:11:0b:1d:bd:e5:17:ba:dc:a5:74:e4:33:
         3e:a0:96:ca:5c:0c:f0:82:5b:fe:6d:d1:d1:11:63:f4:73:37:
         c5:d5:a1:1d:32:14:9a:54:44:0f:68:f8:e4:ce:6e:be:27:4f:
         40:ce:3b:9f:40:9d:4f:a9:f0:07:db:da:73:b9:17:2c:55:20:
         41:57:d2:cc:01:ef:71:09:17:ca:1a:ef:59:29:94:97:59:3f:
         ab:3a:59:b2:89:e4:64:54:fd:23:ff:d5:7b:a8:1a:40:bf:15:
         00:1a:b0:89:56:14:dd:7b:8c:94:22:62:de:9b:1e:a0:98:37:
         53:91:d2:3b:ce:9c:7a:1e:f4:dc:71:6c:26:43:69:cb:0c:03:
         f4:77:77:5e:15:0c:1a:68:42:fd:a5:b1:44:65:31:ae:64:68:
         25:67:ea:d3:77:50:ea:10:04:3e:29:29:b3:75:66:53:66:77:
         ad:15:70:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:42:46 2025 by rpki-client