Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
File:                     Ijb_q094oHoZuC6P3m3C2wZK278.mft (raw, json)
Hash identifier:          +OcCdwOGrh7fdaz1dCTTSkYVw7XT/C+UXz/wIca7xxY=
Subject key identifier:   02:88:87:E4:D2:3F:80:CD:10:20:D3:DC:9B:43:62:7B:F4:DE:B3:27
Authority key identifier: 22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF
Certificate issuer:       /CN=F36C2BF2AR/serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
Certificate serial:       01D5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
Manifest number:          01D4
Signing time:             Sat 23 Aug 2025 04:31:27 +0000
Manifest this update:     Sat 23 Aug 2025 04:31:26 +0000
Manifest next update:     Mon 25 Aug 2025 04:31:26 +0000
Files and hashes:         1: Ijb_q094oHoZuC6P3m3C2wZK278.crl (hash: oP7CYQpBv0SXvjW3Zql43C3DL+fwgvow3IaonzcqIrE=)
                          2: 5E52EDD81C4911EFA98F9E317DDC24C2.roa (hash: Zixh/aFPuo2zs0C1hGvWJdvczTuAhUvvaA1FyHi6zv8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                          rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 469 (0x1d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2BF2AR, serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
        Validity
            Not Before: Aug 23 04:31:26 2025 GMT
            Not After : Aug 25 04:31:26 2025 GMT
        Subject: CN=68a9441f-6eef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:06:ff:3e:e3:29:8b:08:a8:3f:f9:cb:4d:8c:
                    27:bb:c4:dd:2e:41:c7:e0:16:5e:5c:f1:bb:39:b1:
                    17:e5:69:33:29:4b:2e:93:c6:80:c7:6b:18:64:94:
                    13:0f:db:5e:0e:6d:54:0b:dd:6c:cb:32:aa:04:f5:
                    f1:50:2c:7f:2b:39:ac:92:35:08:84:85:b0:d5:68:
                    22:f3:9e:c0:22:5f:29:f4:a1:d6:85:7f:f0:59:cf:
                    cc:c0:7b:dd:e1:92:f4:e8:f0:9f:08:96:f0:41:57:
                    0d:75:3f:99:45:5a:a8:84:2a:50:ea:42:94:f5:22:
                    db:69:b7:f9:80:cb:87:12:ff:7d:56:b1:e5:d9:f8:
                    c5:55:a4:62:73:d7:c2:a1:f2:d6:dc:60:ba:33:d5:
                    74:a9:3f:e0:2e:2c:02:04:96:7e:50:75:dd:11:d3:
                    c7:3f:36:32:0c:ac:d9:e7:75:4d:26:cb:06:c5:4c:
                    69:43:df:1c:66:d2:67:1e:8a:01:cd:c8:99:03:d8:
                    23:5b:84:cc:22:e4:67:65:1f:9c:f9:83:0e:ae:42:
                    37:66:16:28:e7:de:a6:7c:1b:61:e4:51:c8:a1:47:
                    39:5e:63:06:17:5e:0e:bc:a9:9f:81:cc:d8:47:4d:
                    6b:99:b6:15:37:8f:81:f6:95:78:a1:d1:f4:90:89:
                    5b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:88:87:E4:D2:3F:80:CD:10:20:D3:DC:9B:43:62:7B:F4:DE:B3:27
            X509v3 Authority Key Identifier:
                keyid:22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:40:1e:7b:16:65:e9:73:7c:f4:19:b9:55:f9:55:30:0f:94:
         f8:09:7e:4e:32:49:0f:e3:35:af:3f:a5:54:e8:8e:c5:71:16:
         4d:cc:4f:89:90:62:56:d3:35:d6:1b:30:ce:14:bd:1f:04:bb:
         85:2b:4b:71:74:71:80:70:8d:fe:61:8b:5e:76:41:94:1f:34:
         d1:2d:ba:3c:a6:74:0d:b8:ef:87:e9:df:d3:56:75:ce:79:60:
         1e:7f:a6:89:03:2a:a2:15:16:76:2f:2e:db:d9:6c:2b:a1:e0:
         cc:1c:55:de:4a:ca:8d:80:06:37:3a:a3:16:f8:7a:0d:5a:88:
         81:fa:16:f6:7c:64:5e:bc:7f:d3:d1:e1:69:96:5a:0d:cc:e0:
         d1:c7:37:89:31:fa:e6:40:c8:34:fd:78:30:63:c2:1a:f7:18:
         8e:d0:0d:3e:9f:29:24:5b:e5:62:19:e5:4a:b2:51:56:de:38:
         ed:1e:36:82:79:6b:18:5f:4e:cf:e6:f0:58:c2:60:ef:d3:bb:
         69:a5:fd:a3:44:ee:84:88:e3:e1:55:af:9f:b1:5c:5d:54:25:
         23:85:17:3a:10:de:a9:93:9c:70:86:20:ce:49:8b:a3:9b:55:
         a5:67:9f:58:76:73:5e:01:b1:7f:22:a1:f4:06:88:7d:9d:6e:
         eb:a1:72:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:18:45 2025 by rpki-client