Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
File:                     rTNWCjX9wk4yt-GkeeIbDolqKw8.mft (raw, json)
Hash identifier:          osXfTe0cVvXENANmwJ8N5GWOHIcNTiYhJotBFFLJB5A=
Subject key identifier:   58:E0:28:4E:77:63:57:88:29:0E:04:51:3E:5E:1E:96:F7:C4:57:8A
Authority key identifier: AD:33:56:0A:35:FD:C2:4E:32:B7:E1:A4:79:E2:1B:0E:89:6A:2B:0F
Certificate issuer:       /CN=F36F9BF2AR/serialNumber=AD33560A35FDC24E32B7E1A479E21B0E896A2B0F
Certificate serial:       04F9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
Manifest number:          04F2
Signing time:             Wed 14 May 2025 02:45:14 +0000
Manifest this update:     Wed 14 May 2025 02:45:14 +0000
Manifest next update:     Fri 16 May 2025 02:45:14 +0000
Files and hashes:         1: rTNWCjX9wk4yt-GkeeIbDolqKw8.crl (hash: fea4ONuQmnlm0X09cOpjP0d60iQ1pM9di2iDPTmmD9A=)
                          2: 3ECF1FD6C4BF11EE8B2737C5775412E6.roa (hash: 3Te+eK/mIojMdAzwZB8nPJY3HNmC7bWhD0CTw4iHG3c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
                          rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 May 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1273 (0x4f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F9BF2AR, serialNumber=AD33560A35FDC24E32B7E1A479E21B0E896A2B0F
        Validity
            Not Before: May 14 02:45:14 2025 GMT
            Not After : May 16 02:45:14 2025 GMT
        Subject: CN=682403ba-ada9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d0:c5:5b:e5:cc:8e:1a:5e:b0:34:99:e7:a5:
                    fc:42:88:4c:e1:8d:48:e7:aa:52:15:2c:a8:5f:d6:
                    ef:87:2e:d5:cf:ae:51:4a:8e:59:d7:b4:08:b9:f5:
                    16:86:8e:fc:f2:96:02:08:4c:fc:51:11:9f:9a:7c:
                    d7:11:ce:99:9b:f9:52:b1:f6:6f:8b:30:6f:c1:97:
                    8f:7c:26:66:8e:23:e0:c3:a4:51:22:65:8f:32:bc:
                    5f:51:f3:ad:77:54:b6:b4:c3:2c:81:d5:2b:c5:b7:
                    8d:f2:f4:41:cb:ce:5b:aa:a2:dc:f3:d0:1c:59:7b:
                    e3:fc:89:9f:2e:d0:56:61:55:38:ce:74:6b:73:27:
                    2b:87:0b:74:de:3e:cd:b9:70:92:ee:ef:df:fc:c3:
                    61:41:47:fc:c6:8c:51:51:4b:08:09:f9:06:15:5e:
                    94:ff:db:3a:12:99:54:fc:32:03:eb:ff:8a:df:09:
                    e1:1e:d4:9a:73:5d:81:4f:2e:86:9b:0f:d9:10:bc:
                    26:f7:58:a6:46:d5:6c:fc:74:c2:6e:1f:07:d2:d0:
                    86:18:9e:ad:64:2a:2e:62:e8:5c:4b:d9:0e:d2:13:
                    25:f6:45:84:7d:f0:63:d7:2e:7c:d5:59:42:ed:52:
                    90:64:0f:6d:76:f9:8f:b9:46:e5:de:c5:5f:d1:bd:
                    66:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E0:28:4E:77:63:57:88:29:0E:04:51:3E:5E:1E:96:F7:C4:57:8A
            X509v3 Authority Key Identifier:
                keyid:AD:33:56:0A:35:FD:C2:4E:32:B7:E1:A4:79:E2:1B:0E:89:6A:2B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rTNWCjX9wk4yt-GkeeIbDolqKw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F9BF2/5A60711A6FF711EC954B07CA5A40D577/rTNWCjX9wk4yt-GkeeIbDolqKw8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:02:47:03:0f:c4:09:50:e6:d3:42:16:8c:fd:f0:2e:1b:d9:
         e5:49:ba:36:e0:bb:b6:36:48:4d:98:5c:d5:6c:22:9b:ab:8f:
         bf:ef:0e:5a:f7:d9:5a:64:50:75:32:53:01:dc:29:11:bc:1a:
         3c:d5:be:f1:4f:01:37:51:6e:e5:d6:fc:9a:bd:56:50:49:42:
         9f:b7:4c:89:29:f3:08:e1:80:3f:38:7a:80:4a:cf:77:a8:28:
         72:46:54:72:1c:90:09:e6:be:a6:de:e8:d8:71:49:b0:f3:d9:
         df:e7:ab:9b:9f:80:99:09:6c:92:17:6f:aa:87:46:0c:1f:83:
         87:60:77:ce:45:3b:a6:e3:a9:f5:5b:ff:47:ea:3f:fe:2a:36:
         39:4b:db:b5:2a:41:5b:09:8e:71:0d:53:10:2b:5c:8e:0c:40:
         6e:e3:85:83:5b:be:39:bd:79:ab:a0:89:15:0a:d9:c3:d1:db:
         0b:72:9a:2e:c1:67:04:18:c0:14:b8:11:d8:c2:33:56:36:1d:
         13:93:07:e3:42:08:1e:1c:34:17:18:f3:af:f9:c5:fd:8c:0b:
         f6:ed:a7:3c:58:63:11:3e:88:a9:22:c0:d1:64:83:a9:e3:64:
         dc:da:55:76:4e:43:1d:c9:8d:7c:81:bc:74:ad:f0:14:06:74:
         44:f5:2a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 11:33:04 2025 by rpki-client