Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
File:                     YgYKORQeYf1_hIcoAdkqSoCYD2o.mft (raw, json)
Hash identifier:          Nh5fFgtWlDmaZ/Nfehw/E9MecF8u1X+biUtChS+ztS4=
Subject key identifier:   8B:EF:3D:2A:3E:E1:DC:23:CA:C9:04:11:B8:34:1B:E9:37:19:2F:D7
Authority key identifier: 62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A
Certificate issuer:       /CN=F36C4E2CAR/serialNumber=62060A39141E61FD7F84872801D92A4A80980F6A
Certificate serial:       046B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
Manifest number:          046A
Signing time:             Sun 06 Jul 2025 03:04:58 +0000
Manifest this update:     Sun 06 Jul 2025 03:04:57 +0000
Manifest next update:     Tue 08 Jul 2025 03:04:57 +0000
Files and hashes:         1: YgYKORQeYf1_hIcoAdkqSoCYD2o.crl (hash: +Qdt1SLhs54uVgpoIDbTfMU2RZ43d/qqkhXPqViKkik=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
                          rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 08 Jul 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1131 (0x46b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4E2CAR, serialNumber=62060A39141E61FD7F84872801D92A4A80980F6A
        Validity
            Not Before: Jul  6 03:04:57 2025 GMT
            Not After : Jul  8 03:04:57 2025 GMT
        Subject: CN=6869e7da-75e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9b:0f:63:20:96:a9:92:7d:d2:9a:f6:19:6d:
                    10:79:61:0a:a4:59:97:da:06:0e:3c:cc:8d:e6:9b:
                    db:2c:3e:f2:6b:df:25:cf:52:10:58:5e:ec:d5:45:
                    b1:2f:9f:41:03:84:5a:b4:1f:cb:7d:13:be:54:18:
                    5c:8d:45:53:93:ac:59:8c:a8:ec:8d:37:dc:7c:5f:
                    3c:ef:24:9b:d3:ec:04:03:97:1c:d1:2f:7e:39:ae:
                    b6:fb:2d:57:a2:c1:2d:45:d5:b4:71:c1:c6:6e:ea:
                    89:c7:09:cf:fd:45:4b:9b:5b:ab:a2:e9:c3:3c:59:
                    25:ea:5f:e4:fb:28:a4:60:a1:9c:84:89:24:cb:46:
                    85:e3:38:11:08:7c:a2:d3:27:78:36:08:10:b1:d8:
                    d8:b5:ae:7d:8a:7c:e1:db:96:5a:bc:d1:8b:64:a7:
                    dd:bc:0b:41:bf:0d:53:7a:0f:f8:1b:e3:4b:51:f8:
                    95:84:00:7f:95:6d:a4:0b:b0:05:0d:54:6f:1d:4c:
                    43:dc:f1:11:95:76:d7:27:25:e1:b7:27:97:f6:31:
                    3d:d8:98:9c:f9:ed:10:e2:8e:d0:bf:8d:85:69:46:
                    50:3c:f0:9c:96:cd:b8:62:8a:c6:07:13:33:31:c1:
                    19:f1:40:a5:f7:07:bf:21:b1:36:d0:95:4a:f1:24:
                    fc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:EF:3D:2A:3E:E1:DC:23:CA:C9:04:11:B8:34:1B:E9:37:19:2F:D7
            X509v3 Authority Key Identifier:
                keyid:62:06:0A:39:14:1E:61:FD:7F:84:87:28:01:D9:2A:4A:80:98:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/YgYKORQeYf1_hIcoAdkqSoCYD2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/F4B87D38FD6511ECBE1E02E2F1222468/YgYKORQeYf1_hIcoAdkqSoCYD2o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:03:09:49:7d:01:d2:84:fb:84:29:f8:5a:7c:59:a5:94:05:
         e0:7c:c3:57:ca:51:29:45:13:66:8e:af:29:21:80:6e:b0:cd:
         27:88:34:91:6d:4a:cc:1c:9a:20:06:c9:f5:13:93:e3:c2:e0:
         08:39:db:21:82:63:a1:9e:fd:9c:5c:aa:e2:3a:59:11:8a:ee:
         fc:41:26:a1:cf:2b:71:8e:97:09:78:65:8b:9c:1c:2c:47:2b:
         a3:b0:cd:ff:b8:96:46:e5:c0:f8:bf:48:78:4f:40:03:67:3c:
         7f:4e:05:39:f1:68:91:b6:60:8b:03:45:3d:4c:0d:7f:d3:f9:
         3f:73:6f:d3:a9:fe:98:23:3b:46:bc:75:dc:33:a9:f0:c0:ca:
         f5:e0:59:c3:a3:52:49:01:b5:5d:bf:e5:95:ce:7e:da:ec:1a:
         e3:4e:d2:9f:21:ab:35:a3:37:f4:51:ff:50:c2:53:91:7a:b9:
         da:83:b6:ae:81:49:a5:f8:89:c5:7a:c6:56:83:50:56:13:46:
         ee:a0:96:b2:8e:03:77:3a:d8:dd:9a:a6:cc:19:d8:62:ad:75:
         8b:25:dd:3e:6f:08:c2:9b:69:be:7a:f7:c4:3e:49:6b:81:d1:
         9f:46:50:97:87:f5:1b:ef:3d:bd:58:ac:86:af:d1:2e:a2:2a:
         40:7f:ce:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 11:47:23 2025 by rpki-client