Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
File:                     xcFCD1BxamsUb136joK_0eTdmRA.mft (raw, json)
Hash identifier:          OpZQB1WoDq5Gz032XQhehyvc8rXN6kgFkD8YPcnrAmw=
Subject key identifier:   CC:4F:20:89:0E:7E:FA:AE:1B:7F:78:BC:F9:44:3A:4C:51:02:02:4F
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Certificate issuer:       /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial:       8E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
Manifest number:          85
Signing time:             Thu 08 May 2025 05:11:57 +0000
Manifest this update:     Thu 08 May 2025 05:11:56 +0000
Manifest next update:     Sat 10 May 2025 05:11:56 +0000
Files and hashes:         1: xcFCD1BxamsUb136joK_0eTdmRA.crl (hash: 5Hmb5f+iO5YjegM44yMCe3MKH6vxNdCNkqrFqPLrXOs=)
                          2: 1FC67724DB2F11EFA180C6B7762E951A.roa (hash: JHgdUdEE2ORETD1hobD1l7BrD95rRqOs+/yUcWHinV4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                          rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 May 2025 05:11:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CFBB0AR, serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
        Validity
            Not Before: May  8 05:11:56 2025 GMT
            Not After : May 10 05:11:56 2025 GMT
        Subject: CN=681c3d1d-6ce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1b:f1:da:cb:a6:4e:44:db:c3:5c:11:84:21:
                    f8:89:4c:08:68:33:6e:51:40:ba:02:8e:36:45:bb:
                    5b:24:40:f9:e2:2c:8e:e2:b4:5b:90:d9:e0:f8:02:
                    d7:ba:cb:4c:43:5a:fd:4c:bf:26:2a:44:27:38:a8:
                    4f:17:9b:3c:26:72:60:78:e8:0f:c5:98:7a:df:83:
                    1c:6f:1f:27:5d:09:2f:b4:4c:0f:4d:90:6b:c0:e0:
                    0e:ff:d8:dc:79:b8:e9:0d:17:8b:05:f0:ac:c5:8e:
                    d5:9d:5e:9e:a6:4b:11:00:5b:f7:0d:d0:c7:6a:c9:
                    07:75:c0:21:86:9c:e4:57:13:e6:7a:95:44:a7:68:
                    8f:b3:b3:77:9b:d8:38:84:01:32:81:68:91:5e:61:
                    c5:26:43:02:4f:62:3c:0a:eb:ba:39:4e:e0:b2:eb:
                    ad:2c:17:64:db:d1:f7:a3:53:8e:4e:85:f5:c2:d1:
                    4f:d6:1a:f3:7d:85:84:c5:91:31:c2:87:54:0c:41:
                    e7:45:29:2d:9c:14:43:77:9c:e0:06:28:ac:55:aa:
                    11:e1:2c:c3:2f:ce:6f:7e:e0:d7:1a:30:ba:12:e7:
                    3e:cb:8b:f1:21:33:85:9a:3b:60:92:84:60:bf:93:
                    3a:1a:10:95:9f:0d:19:f5:5d:91:9b:98:c1:51:e1:
                    02:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:4F:20:89:0E:7E:FA:AE:1B:7F:78:BC:F9:44:3A:4C:51:02:02:4F
            X509v3 Authority Key Identifier:
                keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:57:57:55:42:42:e5:e2:25:8c:02:90:5e:72:91:62:af:57:
         18:0e:9c:6c:e8:0f:68:76:7d:ac:9d:bc:35:f7:84:f3:1b:1d:
         98:7e:02:c5:e4:02:97:25:d1:65:66:a7:6e:c5:42:f6:95:91:
         6f:01:50:bc:9b:c7:bc:a2:b7:26:ce:22:01:31:2b:8f:70:ca:
         9c:8c:94:cd:73:c5:c6:68:3a:56:ef:27:1d:fb:79:0b:27:5f:
         02:d8:35:f3:93:a6:36:9c:43:46:60:20:fe:be:3a:fd:64:a3:
         02:a4:9a:73:4a:dc:24:f1:2a:f9:d4:e9:79:96:2e:e5:13:3b:
         3f:1f:ed:aa:d0:e6:af:7c:34:dd:2d:2d:cd:b9:ad:2d:4c:88:
         94:ef:73:ab:a9:d6:2d:61:84:8e:48:13:ea:1f:e8:e0:1f:79:
         dc:ca:01:fe:23:de:d9:f4:8c:6c:39:48:c4:03:56:a6:ff:6a:
         4c:c5:d8:5f:30:15:11:9a:fb:0f:6f:de:37:e1:77:a3:88:b7:
         17:06:cb:a1:bb:fd:73:df:51:74:c9:48:9f:db:a7:97:17:84:
         fb:13:a9:81:00:ac:c6:70:80:c1:34:0c:5b:4b:cc:9f:c2:26:
         2a:9f:90:99:3f:bc:8c:ec:dc:53:cd:a2:cf:d5:f6:f1:98:ef:
         9c:75:35:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 05:20:44 2025 by rpki-client