Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
File:                     GS9iV_wr5XP3WbXyvfg9aar_ouc.mft (raw, json)
Hash identifier:          hxcsmj/qlW5SfAEKes0BkbXaVb9XonJpcObAFJtaRuw=
Subject key identifier:   78:43:66:57:94:B0:71:7A:A2:46:6B:45:B5:D2:F5:35:A6:09:49:40
Authority key identifier: 19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7
Certificate issuer:       /CN=F3615A48AR/serialNumber=192F6257FC2BE573F759B5F2BDF83D69AAFFA2E7
Certificate serial:       0284
Authority info access:    rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
Manifest number:          0283
Signing time:             Sun 16 Feb 2025 02:32:16 +0000
Manifest this update:     Sun 16 Feb 2025 02:32:16 +0000
Manifest next update:     Tue 18 Feb 2025 02:32:16 +0000
Files and hashes:         1: GS9iV_wr5XP3WbXyvfg9aar_ouc.crl (hash: 8NWcX3lG/nV3iES9sDQ2lf6z1GHZF78i4eQL6fqICPk=)
                          2: A147BE680D4211EF9356066C017001B1.roa (hash: QuPZYoQI7oZ3C2C6Xc4HwdYmjHFXWbZWWnj28DQTRz0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
                          rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 644 (0x284)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A48AR
        Validity
            Not Before: Feb 16 02:32:16 2025 GMT
            Not After : Feb 18 02:32:16 2025 GMT
        Subject: CN=67b14e30-004f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c8:1f:12:46:7b:ba:56:0c:5a:12:46:4d:ff:
                    2e:cb:d6:eb:ba:86:26:60:1c:85:52:12:ae:00:cc:
                    f7:4f:4b:6f:c5:f2:03:fc:4e:40:b5:a8:81:02:37:
                    07:e3:22:45:67:c3:a7:a8:40:bc:ad:6b:72:bd:6f:
                    bc:f1:94:e0:c7:e9:53:ae:12:d1:aa:f7:b1:46:02:
                    df:75:fb:07:6d:48:ce:ba:35:44:3d:da:91:1d:d5:
                    2a:8a:e2:e2:37:e2:a7:43:41:cc:b0:67:ac:1f:c8:
                    07:94:11:44:0f:a6:4b:ba:6e:aa:b4:77:5f:e7:10:
                    10:99:2e:ef:44:2c:25:2e:c4:a9:c2:94:5d:67:08:
                    50:81:8b:cc:ee:ef:17:5c:65:6a:83:b1:e9:62:83:
                    52:8b:a0:98:b4:1b:50:fc:5c:b6:98:44:8b:b6:1c:
                    d2:a5:d9:c1:d9:cb:9d:2a:1d:bd:6e:7e:21:29:39:
                    85:de:34:2a:88:ec:a2:44:ec:01:39:e5:53:ee:1c:
                    41:c1:c2:94:d4:1e:70:3d:5b:7c:29:f1:32:91:4c:
                    de:6a:c3:d8:70:40:df:30:0a:51:f3:28:85:5f:da:
                    06:77:d2:cc:8a:12:54:55:4c:88:03:6c:18:98:f3:
                    47:af:d1:86:c2:1f:78:78:28:1f:a5:24:5f:23:5a:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:43:66:57:94:B0:71:7A:A2:46:6B:45:B5:D2:F5:35:A6:09:49:40
            X509v3 Authority Key Identifier:
                keyid:19:2F:62:57:FC:2B:E5:73:F7:59:B5:F2:BD:F8:3D:69:AA:FF:A2:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GS9iV_wr5XP3WbXyvfg9aar_ouc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A48/3009F118043211EEB077F65B4AD9E6FC/GS9iV_wr5XP3WbXyvfg9aar_ouc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:0d:6a:b4:20:04:77:0d:34:33:07:fb:36:63:37:dc:8f:be:
         a3:d2:9a:61:82:d4:d1:af:a4:b9:8b:d9:2b:eb:71:82:c7:d2:
         aa:69:34:64:de:51:ed:80:86:fa:57:14:d8:fb:9a:f7:e4:0c:
         1d:56:96:84:f4:fd:c9:96:df:12:61:43:09:91:2b:6e:f1:54:
         33:fb:6d:c6:16:ee:d0:d0:b4:94:0d:6c:b2:e5:aa:64:67:0c:
         83:95:27:1a:87:59:ba:68:02:30:2d:9b:04:6a:7d:b9:ac:95:
         38:96:b5:ca:54:7d:95:03:b7:c0:ac:91:7f:0f:a1:e8:9d:40:
         1f:d9:78:97:42:8b:65:f7:49:0d:f0:54:31:eb:65:eb:f8:ff:
         be:4f:be:9f:5f:84:9f:7c:14:1d:96:29:0b:65:08:1e:23:61:
         87:46:2b:f8:de:ba:f1:3a:e7:89:3c:eb:72:db:3e:cd:c0:aa:
         3d:a5:8d:71:15:ab:80:a1:76:84:c8:ef:e3:a3:46:43:96:8c:
         ae:bc:66:60:7f:a3:9b:c3:3d:59:04:d4:b0:be:3a:be:7b:52:
         9f:b6:01:ba:cb:21:83:be:9c:db:10:c3:5a:1c:71:2b:93:72:
         07:36:ed:7f:2a:8c:3d:9f:25:47:69:9a:20:23:d4:af:64:c1:
         54:ba:15:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:28:16 2025 by rpki-client