Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
File:                     XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft (raw, json)
Hash identifier:          5JM1QuLFG4QIcH1FFi9ABW23Peyd7200JLyVvhE+YEQ=
Subject key identifier:   57:42:01:AD:E8:15:DF:BF:2D:67:61:4B:2B:44:58:ED:BC:72:EC:70
Authority key identifier: 5E:EA:5A:2F:E7:2F:43:42:85:F8:18:B6:82:30:2D:9B:C2:AD:44:BF
Certificate issuer:       /CN=F36D5F5AAR/serialNumber=5EEA5A2FE72F434285F818B682302D9BC2AD44BF
Certificate serial:       031A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
Manifest number:          0319
Signing time:             Fri 16 May 2025 02:20:37 +0000
Manifest this update:     Fri 16 May 2025 02:20:36 +0000
Manifest next update:     Sun 18 May 2025 02:20:36 +0000
Files and hashes:         1: XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl (hash: 5xflhpSzY9RCfCEQuTeqmHifIcnmqhDtSTy9JDn4T0U=)
                          2: 9BC3F98C6BB811EFBD7EDC40762E951A.roa (hash: oM2MhvhIjECKQQKviSvKd0xtECqaKzO3eY40jsGYaaQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
                          rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 18 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 794 (0x31a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D5F5AAR, serialNumber=5EEA5A2FE72F434285F818B682302D9BC2AD44BF
        Validity
            Not Before: May 16 02:20:36 2025 GMT
            Not After : May 18 02:20:36 2025 GMT
        Subject: CN=6826a0f5-2c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:e3:c1:e9:a0:06:4a:38:2c:bb:12:db:50:1d:
                    26:96:56:de:84:2f:a8:3e:86:66:bd:66:0d:88:f4:
                    90:a3:39:23:de:07:cc:99:79:3b:2d:2e:7b:c1:14:
                    9b:8e:2d:30:43:a2:83:81:f5:45:e1:6b:6f:aa:f4:
                    e6:85:c7:15:ce:01:3c:1d:cf:2e:82:c2:d7:38:e1:
                    b2:3f:bb:34:84:99:16:9e:eb:61:f8:2c:29:1a:c1:
                    94:f5:1d:37:80:81:81:ed:cd:d7:12:9c:f7:09:25:
                    86:29:31:c3:e8:7f:1e:f7:4f:ae:68:8c:f6:85:85:
                    ea:6e:d7:7a:4a:a2:ae:36:35:10:45:78:9c:9b:fa:
                    04:46:3c:67:8f:c2:06:0c:02:10:d4:67:03:ca:ea:
                    20:a9:8a:aa:c4:95:b5:69:85:38:e9:e0:cc:75:26:
                    e0:67:b8:76:5f:17:10:dc:4e:94:58:8e:a9:83:a8:
                    da:0c:65:ff:a4:22:a5:f4:fd:07:de:d6:d1:4a:cc:
                    fc:ff:19:83:16:a1:47:58:5a:22:3a:0b:e2:56:b9:
                    af:33:16:66:8e:70:59:60:e9:10:6a:72:30:72:f1:
                    24:d8:af:07:a6:25:8a:bd:78:f5:1d:f9:2e:0f:79:
                    55:85:d8:f2:0c:d5:e6:67:1f:d4:1f:97:e3:6b:b7:
                    86:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:42:01:AD:E8:15:DF:BF:2D:67:61:4B:2B:44:58:ED:BC:72:EC:70
            X509v3 Authority Key Identifier:
                keyid:5E:EA:5A:2F:E7:2F:43:42:85:F8:18:B6:82:30:2D:9B:C2:AD:44:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D5F5A/3AB9187EDAA611ED9B1E00C52F6D8C1D/XupaL-cvQ0KF-Bi2gjAtm8KtRL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:3e:e9:26:ff:95:0c:2b:53:cf:ce:95:4d:ae:3c:8f:6a:2b:
         3c:98:8d:e1:e1:1d:f2:01:8e:e6:c9:41:02:ff:25:21:d7:77:
         cf:63:52:59:3f:28:b0:16:01:b5:f2:d5:4e:88:e2:db:d8:9d:
         23:13:ba:32:82:78:a6:de:d5:f7:d4:d2:a3:b8:25:af:5d:35:
         b0:ff:58:91:42:76:85:9d:d8:e3:1e:cd:7f:88:a9:7b:49:e1:
         f3:d1:93:85:ff:c0:da:7f:ab:f5:1a:04:09:39:ca:2c:f0:f8:
         eb:d5:fa:ff:fd:98:48:5a:20:cb:4e:99:fd:27:f7:64:3d:b6:
         39:1b:37:5f:7a:f8:fd:fb:ae:2c:72:58:74:be:5c:a5:ab:4f:
         1c:62:89:22:3a:f7:9c:4c:04:92:36:ad:cd:63:ef:ed:c7:62:
         68:8c:c6:f7:6c:e4:db:7c:92:bf:a8:c0:ca:51:6f:e3:5f:13:
         b2:36:30:92:5a:30:6b:5f:83:bb:10:50:bc:dd:a9:2a:2e:f6:
         f8:57:e3:01:be:53:98:28:73:c1:48:2f:bc:83:8b:c3:34:93:
         e2:f9:0b:e1:59:5d:9e:26:27:a6:fc:f5:71:c5:8e:9c:45:50:
         ac:c5:0c:dd:14:4f:fa:77:0e:bd:8e:94:1b:79:68:39:e0:70:
         50:39:44:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:19:04 2025 by rpki-client