Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
File:                     At3Avw90-WSo2yJsvjP3007bAFM.mft (raw, json)
Hash identifier:          uH2+QaobX3tncYX2d4/3aqpAFq5m7m5kNi+9hc69hhs=
Subject key identifier:   BA:7D:EB:48:5D:D6:17:CA:50:A4:2D:28:E6:7B:49:6F:CB:A2:74:BF
Authority key identifier: 02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53
Certificate issuer:       /CN=F36F51F8AR/serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053
Certificate serial:       0893
Authority info access:    rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
Manifest number:          0891
Signing time:             Tue 01 Jul 2025 01:39:15 +0000
Manifest this update:     Tue 01 Jul 2025 01:39:14 +0000
Manifest next update:     Thu 03 Jul 2025 01:39:14 +0000
Files and hashes:         1: At3Avw90-WSo2yJsvjP3007bAFM.crl (hash: uZ4glCN35UJuXC9E0e5YoASErbn2bESSxauPbJE4how=)
                          2: B0D116986C8D11ECA9758ACA5A40D577.roa (hash: lTLDiHShhMe4QavSzilaN/PR1KFjgS4fLvPFpQKkp0g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
                          rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 03 Jul 2025 01:39:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2195 (0x893)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F51F8AR, serialNumber=02DDC0BF0F74F964A8DB226CBE33F7D34EDB0053
        Validity
            Not Before: Jul  1 01:39:14 2025 GMT
            Not After : Jul  3 01:39:14 2025 GMT
        Subject: CN=68633c43-3f08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:42:c1:df:4d:5c:51:92:9f:7d:46:06:10:7f:
                    68:eb:ff:5d:19:9b:30:6e:cc:e9:2d:08:f7:a4:31:
                    ce:8e:8a:a4:dd:41:3a:dc:c3:de:e8:f7:27:b8:bb:
                    21:f4:f0:e3:3a:a6:d6:4c:97:f9:57:f2:2e:c5:9d:
                    c9:ff:9d:81:ca:53:9f:d1:11:60:bb:4b:a5:28:3b:
                    36:f1:97:03:a1:3a:2c:7b:73:8b:2d:c9:bd:5e:12:
                    97:d1:7f:6b:db:71:bb:de:f4:27:f8:86:7d:1d:61:
                    67:11:c0:c9:ed:a4:d6:b9:9e:f2:d1:96:56:8c:05:
                    4e:2d:55:b8:3e:f9:6d:4d:ff:5a:9d:c4:4e:7d:59:
                    16:f6:68:42:3c:4e:b9:08:ce:76:41:aa:4a:83:78:
                    01:5a:13:dc:10:36:81:ec:11:63:9c:40:8d:ae:a2:
                    cc:e0:2b:71:6a:24:b1:fd:aa:24:b7:7f:d3:99:a2:
                    ff:f6:5c:45:b2:68:37:74:99:0a:40:fe:5d:dd:d3:
                    52:ad:0f:45:24:da:e6:6a:61:fe:99:f8:56:95:ba:
                    23:b8:66:2c:c2:35:28:9c:c1:35:30:6c:4d:fd:37:
                    4e:4a:f0:d8:4f:8e:ed:b4:ba:19:54:dd:75:82:24:
                    2b:e5:74:c4:cf:eb:e2:34:75:31:cf:d8:be:d9:96:
                    dd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7D:EB:48:5D:D6:17:CA:50:A4:2D:28:E6:7B:49:6F:CB:A2:74:BF
            X509v3 Authority Key Identifier:
                keyid:02:DD:C0:BF:0F:74:F9:64:A8:DB:22:6C:BE:33:F7:D3:4E:DB:00:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/At3Avw90-WSo2yJsvjP3007bAFM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F51F8/D4B085CACA3311E9945F9B6BF8AEA228/At3Avw90-WSo2yJsvjP3007bAFM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:42:43:cc:14:cd:b9:1b:97:5e:b3:99:d1:a7:95:8a:fe:aa:
         b4:bf:30:d1:49:8a:7c:f3:77:6f:df:eb:33:8b:38:2b:36:e2:
         61:b6:28:c4:88:2d:82:1b:f2:63:bf:d2:24:76:5f:fa:ea:54:
         c0:da:33:45:c3:ad:03:f6:8d:69:03:d1:a2:7a:29:c0:5a:bb:
         02:a2:42:20:7e:cd:53:e7:7d:0f:18:f0:80:83:de:15:4d:9a:
         85:be:d5:cd:d1:5b:7a:dc:d5:19:13:05:5b:47:82:c3:eb:cf:
         6b:3a:e2:d5:2f:43:7f:70:35:e0:47:67:c6:a7:93:14:73:c5:
         43:e0:cb:7c:69:fa:59:1a:cc:0f:3a:64:11:81:e2:bd:14:a5:
         96:c0:34:55:40:18:be:41:46:09:7b:41:8f:c2:46:d2:96:15:
         44:72:fc:2a:7c:1e:43:55:ca:b1:3a:bf:fe:8d:d8:8e:ba:f4:
         5e:58:31:7e:b5:56:5e:f8:8b:9a:5b:49:53:ee:a9:5b:e1:b2:
         0e:4c:f2:a9:56:fa:20:5f:c7:50:ca:45:21:dc:27:3d:d1:e0:
         d5:d2:f3:9d:87:26:95:c2:56:95:68:92:95:72:ea:da:f4:b0:
         7c:74:5f:98:ce:bd:dc:f2:c4:cb:8c:97:97:f3:4a:cc:a4:6c:
         41:6e:2f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 19:36:53 2025 by rpki-client