Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
File:                     Ijb_q094oHoZuC6P3m3C2wZK278.mft (raw, json)
Hash identifier:          xyDvu9Xse+p8tXJTqBseY3T0W+jUucRGADKCGIUVUuE=
Subject key identifier:   C4:29:BA:A5:C7:63:38:E5:AD:DE:1C:35:22:75:84:ED:26:49:AB:A9
Authority key identifier: 22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF
Certificate issuer:       /CN=F36C2BF2AR/serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
Certificate serial:       01A0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
Manifest number:          019F
Signing time:             Tue 01 Jul 2025 04:35:56 +0000
Manifest this update:     Tue 01 Jul 2025 04:35:55 +0000
Manifest next update:     Thu 03 Jul 2025 04:35:55 +0000
Files and hashes:         1: Ijb_q094oHoZuC6P3m3C2wZK278.crl (hash: zwpLSY4wJDoAzccX9KwOowvyIM3y7MOjfPmTNgBeISQ=)
                          2: 5E52EDD81C4911EFA98F9E317DDC24C2.roa (hash: Zixh/aFPuo2zs0C1hGvWJdvczTuAhUvvaA1FyHi6zv8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                          rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 04:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2BF2AR, serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
        Validity
            Not Before: Jul  1 04:35:55 2025 GMT
            Not After : Jul  3 04:35:55 2025 GMT
        Subject: CN=686365ac-6706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:61:86:09:c5:30:cf:91:cc:c9:79:67:1f:
                    1d:9c:a8:74:5f:ee:28:0c:e9:f7:e8:c4:86:13:89:
                    b6:58:dd:82:08:71:89:e9:92:7b:1d:0e:b0:85:ca:
                    75:96:90:52:de:e2:86:87:5e:66:05:aa:27:3e:bf:
                    79:86:92:96:0f:17:88:e7:0b:a1:c9:d0:61:bc:af:
                    53:b3:5f:83:c2:6a:05:e8:e0:c2:4c:05:24:d0:fa:
                    36:a6:6e:35:6d:cf:bd:3a:99:83:82:35:64:c9:10:
                    44:5d:1b:17:26:91:97:fc:e7:b1:8b:42:10:c5:13:
                    93:ba:78:aa:ae:8c:62:e1:e2:a8:31:80:98:29:32:
                    e2:22:52:15:23:b7:16:b8:ae:38:22:97:d5:48:c3:
                    e7:0e:e7:c9:90:93:0d:f0:82:80:3b:38:64:59:23:
                    29:5e:22:9f:e7:e4:71:3d:01:fb:44:60:b6:2b:e4:
                    74:e9:4c:22:3c:36:f7:87:85:b9:08:fe:b6:7d:ae:
                    95:c6:b0:af:c5:70:d2:4d:68:06:63:aa:62:64:f5:
                    da:a5:78:88:d9:80:01:c0:7f:a1:c7:8f:40:e8:36:
                    e3:27:42:e3:73:1e:2b:35:04:2b:b8:0f:92:d1:04:
                    aa:ec:0e:a9:ec:93:66:a2:9d:ec:3f:ba:a2:e6:76:
                    0e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:29:BA:A5:C7:63:38:E5:AD:DE:1C:35:22:75:84:ED:26:49:AB:A9
            X509v3 Authority Key Identifier:
                keyid:22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:6e:31:a2:fc:c2:fc:73:86:c9:52:2a:ff:5f:6a:9d:ae:5e:
         52:22:9e:0e:6e:3b:a4:16:89:38:47:e2:17:98:34:24:f9:ce:
         18:f7:5b:fc:51:21:8d:74:42:5c:21:66:47:19:8f:9c:b9:3c:
         d4:ff:55:b7:94:aa:bf:e1:db:b3:43:8b:04:00:bc:47:87:97:
         e4:ff:41:d5:f2:4a:f2:b6:45:d9:c4:4b:66:14:6c:27:05:c1:
         17:e7:eb:33:f0:15:7a:49:8d:b9:69:86:11:09:54:71:ab:40:
         61:df:a5:33:ec:d9:5b:04:74:3d:25:b7:37:4d:98:3f:ff:39:
         22:bc:f3:a7:d6:82:a2:83:31:91:ac:14:46:65:1e:26:67:9e:
         ed:e0:73:8a:57:62:0c:1e:84:0d:41:93:06:bb:09:9a:fd:20:
         41:ff:c4:cc:fb:21:a1:5e:72:34:ed:f3:19:ac:b3:3c:38:08:
         77:56:a4:5d:86:26:b7:d7:f7:b3:27:8e:d8:de:63:e6:1d:aa:
         a6:a6:a1:6d:fe:06:8b:2c:f9:40:15:6a:02:a9:6f:bd:be:ae:
         13:8b:e3:b0:c7:59:ff:95:bb:b7:08:18:65:4c:3b:13:db:f2:
         f7:22:3c:e7:0d:b1:ef:45:36:ae:83:06:9f:0a:1f:0e:bc:8b:
         52:1b:12:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 11:44:22 2025 by rpki-client