Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
File:                     GS9iV_wr5XP3WbXyvfg9aar_ouc.mft (raw, json)
Hash identifier:          sUZFOULNbradoEWg2WhPBaqmgXkFJWLuYkW+A/+gZak=
Subject key identifier:   3B:D4:63:FA:9F:2C:CA:4C:DB:74:8E:59:9C:4F:00:30:E4:7F:9C:32
Authority key identifier: 19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7
Certificate issuer:       /CN=F3615A48AR/serialNumber=192F6257FC2BE573F759B5F2BDF83D69AAFFA2E7
Certificate serial:       02C4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
Manifest number:          02C3
Signing time:             Sun 20 Apr 2025 03:42:53 +0000
Manifest this update:     Sun 20 Apr 2025 03:42:52 +0000
Manifest next update:     Tue 22 Apr 2025 03:42:52 +0000
Files and hashes:         1: GS9iV_wr5XP3WbXyvfg9aar_ouc.crl (hash: 5ZB2mVgS/kLGrGc2QmWmR6inY+KJsHk/Wqbx9uXA4Pg=)
                          2: A147BE680D4211EF9356066C017001B1.roa (hash: QuPZYoQI7oZ3C2C6Xc4HwdYmjHFXWbZWWnj28DQTRz0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
                          rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Apr 2025 03:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 708 (0x2c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A48AR, serialNumber=192F6257FC2BE573F759B5F2BDF83D69AAFFA2E7
        Validity
            Not Before: Apr 20 03:42:52 2025 GMT
            Not After : Apr 22 03:42:52 2025 GMT
        Subject: CN=68046d3c-8a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:67:bc:d0:bd:1d:15:a0:e3:87:aa:7c:0e:
                    df:4e:0f:2e:4c:16:1b:b8:d8:51:f4:18:97:e2:23:
                    f5:d3:be:c9:fb:4e:d4:27:72:1b:10:eb:6b:94:d1:
                    6b:0f:74:52:c9:f2:24:6a:40:90:ba:19:31:40:b2:
                    41:6c:49:2c:0f:52:80:19:54:3a:70:54:63:be:d8:
                    94:df:65:da:7d:f1:2d:02:10:3f:eb:f0:fb:3a:f1:
                    41:1a:9a:ff:07:31:1d:3f:a2:f0:61:ab:7c:55:82:
                    b4:f4:be:63:fc:1b:b7:c5:73:91:3c:12:98:3a:b0:
                    78:5e:e0:17:05:f1:09:46:03:47:f3:bd:71:ad:db:
                    23:65:42:2e:fc:9e:62:cc:53:55:49:da:25:cf:d2:
                    5c:60:4f:e6:97:16:f9:23:05:7a:a3:a8:29:aa:49:
                    03:bb:95:28:ac:d6:80:5f:5a:d6:03:8e:0e:87:dc:
                    41:86:ab:c6:47:57:79:ac:cc:f2:23:f5:c5:40:2b:
                    d0:83:7b:da:78:d9:39:51:50:0c:5d:16:83:4b:44:
                    27:40:e0:95:e5:0f:e4:42:8a:df:86:7d:35:25:5f:
                    f4:23:af:7b:a5:fe:ea:e3:18:fb:0d:6a:ea:c4:2d:
                    cf:58:e3:55:c3:10:8d:0a:c5:8c:90:3b:2a:f4:62:
                    71:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D4:63:FA:9F:2C:CA:4C:DB:74:8E:59:9C:4F:00:30:E4:7F:9C:32
            X509v3 Authority Key Identifier:
                keyid:19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:d0:43:7f:2e:bb:ef:05:02:47:8f:19:d7:da:62:83:e3:9f:
         0a:ef:f2:f4:9e:92:37:80:50:62:b8:38:47:3b:af:d8:8f:b8:
         27:3e:5f:68:3c:e9:99:19:76:bb:e5:4c:8b:e0:95:68:6d:b2:
         d0:9f:af:5f:6f:bb:2d:dd:6c:6f:3c:50:68:86:c6:c5:2f:00:
         d5:43:36:a5:62:3c:f8:d8:f8:d3:f5:97:d7:75:24:22:75:54:
         63:e3:0e:e4:c9:5c:05:b2:e0:24:9e:92:61:4c:8f:d6:c7:06:
         00:00:cb:0d:25:73:e8:67:7b:90:7c:b1:ec:4c:3f:5e:b1:b1:
         ad:b0:45:e9:50:ff:17:60:d5:38:82:b9:a8:1f:2e:30:f0:db:
         e6:77:01:91:0d:d2:9e:86:a9:b7:8a:cc:ce:89:21:0d:08:e1:
         37:fa:10:3b:f6:9f:76:4b:c6:3a:44:fb:8d:04:13:66:38:8e:
         51:d3:af:fd:ad:81:b6:6e:5a:03:10:7f:0e:7b:5d:4a:cc:9d:
         6c:db:65:b1:97:ee:32:44:b7:16:08:be:92:0c:17:2e:57:15:
         09:fa:ab:f1:f9:20:01:f6:92:af:62:cf:52:ee:74:18:e2:77:
         9b:89:4f:39:5f:ca:05:a7:c5:71:aa:e7:c5:73:ed:e9:47:04:
         00:f3:61:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:33:11 2025 by rpki-client