Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
File:                     ytp6EgVTRDeaE65t57onjrxRalg.mft (raw, json)
Hash identifier:          gwfQlFMJNGCR0MFLiyxNyWneLvYeo5GSefoNFidgHVo=
Subject key identifier:   9A:2F:BC:17:BD:86:3E:3A:F7:EA:04:C4:E5:CB:BD:01:2E:62:62:C2
Authority key identifier: CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58
Certificate issuer:       /CN=F36C5A07AR/serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
Certificate serial:       0549
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
Manifest number:          0548
Signing time:             Sun 11 May 2025 02:37:50 +0000
Manifest this update:     Sun 11 May 2025 02:37:49 +0000
Manifest next update:     Tue 13 May 2025 02:37:49 +0000
Files and hashes:         1: ytp6EgVTRDeaE65t57onjrxRalg.crl (hash: 7tZb96VMrxatdyzAzkqSfrXEQubn8mRXWKNZrAJ4oDo=)
                          2: D463691425AA11EC929C1A5AD8A014CE.roa (hash: zOn0KCR3WUQ3sl7nvMO+r6apzohvakNE95t03lLWHiA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                          rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5A07AR, serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
        Validity
            Not Before: May 11 02:37:49 2025 GMT
            Not After : May 13 02:37:49 2025 GMT
        Subject: CN=68200d7e-3033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:74:55:29:c5:47:f5:0e:ea:10:a0:9a:98:8f:
                    1d:2b:f3:8c:61:6b:b0:ec:be:86:fd:2a:5f:01:cd:
                    c8:0f:ad:0f:4d:71:d4:70:26:62:16:94:43:68:64:
                    50:94:94:39:d9:9a:3e:7a:a6:f1:e5:da:83:dc:4b:
                    ef:14:a1:7c:d8:79:df:6e:40:d0:b9:1d:d6:99:5c:
                    30:f7:bc:87:f4:f9:63:ea:95:25:44:a9:a4:1e:61:
                    f3:c4:98:e6:0a:4e:b6:bd:7b:2b:83:dd:69:ef:fb:
                    39:0a:a9:c1:6e:9f:38:0c:74:a4:b8:9d:99:92:f1:
                    42:75:dd:d3:08:bd:d6:87:fc:e4:16:0e:f2:b0:92:
                    df:4e:59:30:59:11:2a:87:f3:88:39:72:f6:6b:06:
                    8a:d0:54:0a:59:6c:3e:43:ba:34:88:5a:45:d1:ff:
                    cd:a9:f9:9d:23:ae:fb:b6:a0:3d:e5:bb:89:10:bf:
                    c8:32:bf:f7:a8:dc:b9:59:ec:7b:99:c1:7f:9b:f8:
                    de:5b:04:1a:08:6c:f9:79:00:b8:35:ca:25:67:fc:
                    d8:ba:d0:c7:81:bb:16:24:7f:c1:c3:5a:a3:39:fa:
                    9c:b8:1a:dd:c5:f6:5d:ea:72:dc:5a:74:68:54:ff:
                    24:bf:5d:e9:d8:2e:34:7b:6c:5f:39:3d:73:da:f8:
                    d8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2F:BC:17:BD:86:3E:3A:F7:EA:04:C4:E5:CB:BD:01:2E:62:62:C2
            X509v3 Authority Key Identifier:
                keyid:CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:76:47:63:98:b8:25:db:13:78:c5:ad:5a:56:d8:18:a6:61:
         9d:a9:6c:01:e7:7a:8d:7f:8e:f4:a6:e5:bd:9c:90:79:20:41:
         c2:6b:32:22:87:07:d0:cb:24:bb:de:e1:d4:c4:35:32:a8:69:
         0b:ca:ba:4e:34:8d:65:11:ec:b5:1d:e7:bb:05:fd:0b:e8:44:
         47:ba:bb:e8:87:2a:95:24:8c:5d:a0:62:dc:9e:f4:ec:57:91:
         5d:dc:13:b3:fa:5b:6f:4e:20:af:c9:0c:54:d6:df:8c:44:16:
         02:9a:d0:59:a1:1f:e3:b2:1f:26:95:83:6c:04:2f:3c:30:3a:
         80:0d:4c:70:da:b9:a2:79:95:83:f9:80:87:fe:22:8e:71:ef:
         ac:a1:90:c5:ea:15:0d:4d:d6:84:b3:58:e5:52:61:14:45:0a:
         6f:29:ab:f7:bc:fb:d8:b2:89:76:33:1b:13:a1:fd:72:3a:a3:
         b0:c6:19:7c:6e:e0:31:87:b1:b0:43:b5:2b:79:d8:71:23:18:
         28:ce:51:08:12:5b:79:af:c6:9f:52:c4:1f:d4:05:8e:89:19:
         05:03:e4:85:4e:3a:a3:dd:d2:44:1d:04:86:d7:e6:06:96:f5:
         19:46:3c:a0:1b:46:c5:8d:6b:9a:51:e1:a5:50:ef:8e:ee:6c:
         3e:9c:2e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:13:55 2025 by rpki-client