Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
File:                     WIdwDF8kkPVYQ4L55-dSatZVSLM.mft (raw, json)
Hash identifier:          Bbr+24M7pCEdV7o0xGUN0HMoxnZsmx9sCspuZe/lhm0=
Subject key identifier:   33:00:7D:B5:0D:B3:D4:2F:D3:38:08:83:2B:32:E7:D8:5C:8F:3B:68
Authority key identifier: 58:87:70:0C:5F:24:90:F5:58:43:82:F9:E7:E7:52:6A:D6:55:48:B3
Certificate issuer:       /CN=F3620ACFAR/serialNumber=5887700C5F2490F5584382F9E7E7526AD65548B3
Certificate serial:       0628
Authority info access:    rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
Manifest number:          0625
Signing time:             Tue 29 Jul 2025 02:19:36 +0000
Manifest this update:     Tue 29 Jul 2025 02:19:35 +0000
Manifest next update:     Thu 31 Jul 2025 02:19:35 +0000
Files and hashes:         1: WIdwDF8kkPVYQ4L55-dSatZVSLM.crl (hash: vY0EI34zJT46Y1n3fQ0XMgJj/zFqQdk9QKEhD+fU6Y0=)
                          2: 8B60EA52155611EC8AC0712FD8A014CE.roa (hash: ufx3nbeHn5LIxNhzFCsFv+TFwX/35OEeaIqSDK5cW6k=)
                          3: 459695BAD4DF11EB8D761947F8AEA228.roa (hash: V+fApY3tgq+qpHqlmWamZgFjrncOkO2wIFJyIOrmaiA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
                          rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 31 Jul 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576 (0x628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620ACFAR, serialNumber=5887700C5F2490F5584382F9E7E7526AD65548B3
        Validity
            Not Before: Jul 29 02:19:35 2025 GMT
            Not After : Jul 31 02:19:35 2025 GMT
        Subject: CN=68882fb8-31ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b5:dd:cb:48:b7:9f:cc:d6:bc:17:00:43:61:
                    21:b6:d3:1b:91:ac:b6:ca:f3:28:db:50:b9:93:0c:
                    c9:10:22:14:3c:3f:26:c1:01:b7:f2:56:10:84:97:
                    5f:bb:f7:7a:bf:f0:d1:b2:81:8b:cd:0f:0e:9a:c7:
                    35:f1:de:7b:b0:00:db:fc:b3:50:0a:4c:cb:88:8e:
                    8b:90:51:32:ac:c3:06:76:84:29:57:d9:23:61:85:
                    e8:25:98:32:1b:b4:a1:18:02:a5:62:9f:32:d9:e4:
                    cc:38:87:3e:f2:b0:51:a3:6e:b7:60:1f:fa:5c:5f:
                    3f:84:6c:60:17:56:9f:74:39:23:89:0d:ca:e3:d2:
                    aa:be:61:3c:3d:a9:c2:c6:42:0a:29:c8:16:1d:54:
                    fa:a1:b4:79:ab:e5:f4:8d:5e:9c:06:17:b5:10:9f:
                    d0:a0:d1:bb:b2:06:be:48:fd:43:b2:47:7c:bc:90:
                    7c:aa:98:f4:56:b9:da:4c:a1:ab:a6:96:d6:b1:ea:
                    9f:51:c7:65:b8:e2:c4:00:7a:55:30:59:43:88:de:
                    2c:15:44:66:10:96:c2:fa:65:20:0a:4e:2e:3f:bd:
                    d1:a0:9e:28:44:f0:29:29:7b:ab:98:ce:6e:30:da:
                    32:3c:c2:fc:e7:74:3b:ee:23:bb:a9:63:f0:ea:bb:
                    ef:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:00:7D:B5:0D:B3:D4:2F:D3:38:08:83:2B:32:E7:D8:5C:8F:3B:68
            X509v3 Authority Key Identifier:
                keyid:58:87:70:0C:5F:24:90:F5:58:43:82:F9:E7:E7:52:6A:D6:55:48:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/WIdwDF8kkPVYQ4L55-dSatZVSLM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/08A5FF82C21611EB8AA9356EF8AEA228/WIdwDF8kkPVYQ4L55-dSatZVSLM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:a8:3f:71:6e:20:c0:70:1d:b8:65:94:27:d8:8e:fb:d5:7e:
         60:db:37:27:5c:04:af:cd:92:3a:92:dd:a6:20:83:6e:0a:c4:
         52:45:55:58:00:69:f4:df:31:5c:79:66:bd:fa:d6:88:14:c2:
         66:31:f4:f3:eb:4c:8d:da:24:1b:9a:01:b4:b6:f8:d1:de:da:
         91:2f:31:84:29:ec:b9:70:31:87:be:18:99:36:4a:73:f2:05:
         b8:66:3f:5a:76:ef:14:f6:c0:01:10:d0:aa:d1:15:6f:c5:c1:
         35:4b:d8:3a:2f:9e:63:c6:59:d6:54:cc:f8:f6:3e:9f:ef:9e:
         f6:97:d6:8c:56:53:fd:f3:c6:72:86:86:69:d0:99:95:a3:fa:
         b6:ef:71:ba:27:76:31:25:13:9f:01:a3:59:ef:9e:02:04:ef:
         28:2e:8e:9b:ce:94:37:8e:fa:fe:32:82:5a:c4:ba:8c:35:e4:
         9d:5d:74:40:0e:ba:98:8c:e6:2b:c6:84:60:3a:b4:28:c8:b8:
         6e:13:b2:24:23:9f:79:18:2d:9e:a6:20:3e:1c:6c:95:c2:93:
         c6:3d:ac:62:6e:b3:3f:0f:c6:51:af:3b:69:8d:21:54:be:13:
         c5:81:5a:7e:d3:41:be:76:58:10:13:4d:b8:90:92:05:43:d3:
         13:c0:ef:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 16:24:57 2025 by rpki-client