Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
File:                     iXuXO6A-uTTexeB2EobT3XyBo7c.mft (raw, json)
Hash identifier:          wICL/zYmaKcazNw4wBQ5oi4d7Br5Kde8drsCqHZqoSc=
Subject key identifier:   D9:09:EB:3A:7D:B7:A9:02:22:23:C5:2D:ED:1F:1F:FC:B8:6B:EC:9F
Authority key identifier: 89:7B:97:3B:A0:3E:B9:34:DE:C5:E0:76:12:86:D3:DD:7C:81:A3:B7
Certificate issuer:       /CN=F36D3DBFAR/serialNumber=897B973BA03EB934DEC5E0761286D3DD7C81A3B7
Certificate serial:       33
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
Manifest number:          32
Signing time:             Sun 06 Jul 2025 05:23:52 +0000
Manifest this update:     Sun 06 Jul 2025 05:23:51 +0000
Manifest next update:     Tue 08 Jul 2025 05:23:51 +0000
Files and hashes:         1: iXuXO6A-uTTexeB2EobT3XyBo7c.crl (hash: DdhCz957z50Nw4FJ3X28H+5F6mDAsYl7MQRBOt5H/ns=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
                          rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 08 Jul 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D3DBFAR, serialNumber=897B973BA03EB934DEC5E0761286D3DD7C81A3B7
        Validity
            Not Before: Jul  6 05:23:51 2025 GMT
            Not After : Jul  8 05:23:51 2025 GMT
        Subject: CN=686a0868-4918
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:d5:88:5e:24:a7:33:07:d7:26:23:4f:01:1f:
                    4d:9c:c2:75:95:d2:cb:da:be:93:d7:c4:f1:2d:a3:
                    92:c2:20:f6:94:5c:36:2b:c4:91:ff:73:97:d9:f4:
                    ff:90:42:24:a0:b2:7d:89:29:73:44:23:7c:36:73:
                    87:68:5a:e1:3c:1f:da:80:e4:89:3b:ca:5c:5d:20:
                    0a:ff:56:6f:a5:18:8d:c3:a4:55:ab:5f:f5:f7:79:
                    fb:3c:75:3c:1d:42:f1:df:eb:e9:00:76:7b:15:71:
                    c7:c8:6a:e1:60:ee:9f:cc:a7:50:ad:5c:f0:7f:2c:
                    6d:89:f5:39:f5:48:7f:ca:e2:79:e1:26:72:20:90:
                    9f:60:0f:83:ad:f4:ea:90:45:d8:70:57:74:b2:1f:
                    50:b5:ca:0b:5a:be:f2:fa:27:69:3a:09:c0:a4:3e:
                    25:8e:19:a4:a8:ba:58:36:f6:75:61:c9:56:61:4a:
                    08:59:7a:18:3a:df:bb:6f:c8:7a:46:06:aa:ec:cd:
                    cf:c5:6d:e3:a9:f0:72:69:01:0c:b6:24:1e:62:83:
                    ea:a1:b8:8b:31:eb:61:52:9a:db:b7:22:40:a7:cf:
                    f9:50:e9:3e:ae:5f:1f:a5:cc:bc:95:af:43:7f:c5:
                    43:64:bc:8c:c7:80:46:16:99:39:c4:ae:20:36:8a:
                    bf:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:09:EB:3A:7D:B7:A9:02:22:23:C5:2D:ED:1F:1F:FC:B8:6B:EC:9F
            X509v3 Authority Key Identifier:
                keyid:89:7B:97:3B:A0:3E:B9:34:DE:C5:E0:76:12:86:D3:DD:7C:81:A3:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iXuXO6A-uTTexeB2EobT3XyBo7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3DBF/E8D924C2361A11F086475D79DAE4EC9C/iXuXO6A-uTTexeB2EobT3XyBo7c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a7:7c:0d:3f:34:f6:0f:b7:0b:e2:c3:24:29:b5:a8:6c:e6:
         6f:fd:a9:91:27:08:cd:b5:0c:b3:b2:52:b0:46:f1:7b:13:0a:
         c2:2d:9d:8e:7e:57:13:df:92:fe:16:2c:c9:7f:b6:a4:79:23:
         4e:7f:22:36:22:5f:f7:5b:2e:8a:8f:9e:22:cd:82:51:93:0e:
         41:7c:ec:06:6d:bf:61:5d:c9:04:e3:31:42:f8:5f:47:a8:46:
         d1:18:07:1c:c3:0b:37:da:08:6e:d7:5d:d8:a6:ba:b8:d0:51:
         df:fb:9f:de:16:00:90:cb:e4:28:4d:73:ef:fe:51:d4:2f:f4:
         a1:d4:e2:23:42:07:7e:d1:a2:88:3c:a7:ae:c8:56:e4:8d:3a:
         b0:80:63:2c:9d:34:d3:e1:86:ea:f8:25:eb:8a:35:38:5e:a1:
         f7:5d:6b:fa:9f:38:62:0b:b2:9d:02:ab:af:a2:70:a5:7b:1b:
         94:57:43:ec:d9:14:87:5c:af:7e:35:bd:be:ae:73:2d:33:d8:
         7b:12:e6:6b:90:45:e2:5c:79:6c:cd:6b:de:32:43:32:80:2f:
         72:94:14:66:b5:69:59:7a:76:e1:7c:2e:63:26:b9:e9:01:aa:
         60:9a:fc:04:49:c8:ea:47:d3:49:57:f4:23:94:5d:65:71:1b:
         d8:15:e3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 12:07:01 2025 by rpki-client