Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
File:                     hgwk5dUBPSMjsLq0BphmwNwK7m0.mft (raw, json)
Hash identifier:          ETOwd7BQP6KPNVL4XhuSMI6N1B7sCohZDSF/rHEExbQ=
Subject key identifier:   35:07:D4:49:DD:55:EE:43:37:B4:43:C8:1F:3F:F8:6B:24:1E:84:31
Authority key identifier: 86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D
Certificate issuer:       /CN=F361F1DAAR/serialNumber=860C24E5D5013D2323B0BAB4069866C0DC0AEE6D
Certificate serial:       0229
Authority info access:    rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
Manifest number:          0228
Signing time:             Tue 15 Apr 2025 04:04:52 +0000
Manifest this update:     Tue 15 Apr 2025 04:04:52 +0000
Manifest next update:     Thu 17 Apr 2025 04:04:52 +0000
Files and hashes:         1: hgwk5dUBPSMjsLq0BphmwNwK7m0.crl (hash: KzdwQGtOdBercOqZ+cSPpHLldtFyAGgNp5udz2EEJAc=)
                          2: B2B100A8960311EE9DAC9C0ED25BE465.roa (hash: oJ8IY/etJV+KmOnt6rOLNi+N6bGbXrWs5HWdSZ42ZyE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
                          rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 17 Apr 2025 00:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 553 (0x229)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F1DAAR, serialNumber=860C24E5D5013D2323B0BAB4069866C0DC0AEE6D
        Validity
            Not Before: Apr 15 04:04:52 2025 GMT
            Not After : Apr 17 04:04:52 2025 GMT
        Subject: CN=67fddae4-1428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f1:7a:0e:4d:24:c3:4d:c9:33:83:f4:6f:ff:
                    a7:39:e9:dc:ed:80:56:1f:2c:cf:20:4c:e7:12:54:
                    7b:38:31:27:a3:b8:9e:44:dd:9d:fa:95:87:8f:60:
                    08:f1:de:78:71:ee:3a:2e:5c:0a:31:fa:65:ea:93:
                    16:cc:e5:4a:9a:17:8a:53:93:a9:2d:be:33:45:25:
                    f2:26:a7:1b:ad:5c:f7:c8:eb:d6:23:37:88:ea:b5:
                    e1:30:1c:eb:50:14:93:4b:7e:69:71:7e:63:4a:63:
                    d0:af:60:ea:9f:ed:aa:86:b7:fa:90:aa:e7:6b:77:
                    09:44:f1:25:97:7f:f4:72:5b:3d:e1:a1:78:ab:5f:
                    76:54:17:60:94:3e:3f:1e:3a:78:1a:6f:70:41:a7:
                    15:c6:44:3d:ac:bf:ac:41:7a:66:84:8a:db:64:ff:
                    3d:24:04:df:29:02:d2:07:f8:f2:75:da:39:27:f1:
                    e0:de:b6:39:b1:39:1e:91:28:37:bf:5e:41:12:71:
                    a7:1b:3a:59:98:65:9a:c3:7d:e0:33:28:b1:49:d7:
                    51:1c:13:28:d2:4e:db:ef:ae:96:33:41:a2:a3:85:
                    b8:78:18:4b:0e:4e:df:29:19:9b:f5:0f:09:1e:d4:
                    99:af:7c:e7:be:b7:ff:31:36:84:5b:ff:8b:d7:d5:
                    10:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:07:D4:49:DD:55:EE:43:37:B4:43:C8:1F:3F:F8:6B:24:1E:84:31
            X509v3 Authority Key Identifier:
                keyid:86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:5b:aa:7b:19:80:bb:5e:b6:50:6e:20:6f:a9:16:15:4a:52:
         54:89:54:af:ef:80:39:4e:15:0c:6f:09:db:07:a3:4f:7a:a5:
         5c:e3:c8:90:6b:10:e6:8b:6c:1c:46:62:75:d7:0d:ee:6b:40:
         e1:65:4a:6a:36:ca:0e:cc:b8:dc:54:4f:8d:6f:dd:38:be:c5:
         bb:88:fb:81:47:2a:b0:67:81:a6:c6:ae:70:f1:3b:34:d5:82:
         ce:d9:15:08:31:ac:42:cd:97:bc:65:be:41:bf:03:e5:b6:06:
         d8:58:9d:b2:e1:0c:c9:d7:9c:f7:1d:da:79:10:e7:b0:62:0e:
         9f:e3:f8:de:6f:ea:5c:83:e4:bb:73:a3:c4:4c:5f:49:0a:ad:
         1f:fc:7a:9d:2a:ed:25:3e:4d:40:8d:5d:cf:e1:6e:d8:ec:b2:
         4e:1c:05:3a:9c:8f:af:d7:c2:db:9f:7f:8c:e4:34:5c:39:35:
         99:72:49:d3:22:6a:7f:ee:a9:36:30:14:d5:66:e8:2f:f6:69:
         d0:f0:3b:40:4b:22:d6:ee:ba:ff:21:b9:a4:17:37:43:79:92:
         a1:28:eb:07:c8:8d:31:12:fe:e7:17:d2:04:ad:5f:c9:c7:df:
         e5:e3:b4:02:29:b7:ad:10:c1:95:06:32:01:db:f5:aa:6c:b2:
         87:23:ff:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 14:24:26 2025 by rpki-client