Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.mft
File:                     VdvLWIZ1BvehPgl-PTWa3WJwsXU.mft (raw, json)
Hash identifier:          xUpaGX6tJ44RbR8uwZSbSmxxZy1JWTKa92VO5lyCS4s=
Subject key identifier:   1E:6F:FB:F7:E3:70:29:F8:DE:EF:41:EB:A5:2D:C3:17:C4:CA:6E:74
Authority key identifier: 55:DB:CB:58:86:75:06:F7:A1:3E:09:7E:3D:35:9A:DD:62:70:B1:75
Certificate issuer:       /CN=F3623AE4AR/serialNumber=55DBCB58867506F7A13E097E3D359ADD6270B175
Certificate serial:       C2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VdvLWIZ1BvehPgl-PTWa3WJwsXU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.mft
Manifest number:          C1
Signing time:             Sun 08 Jun 2025 05:04:44 +0000
Manifest this update:     Sun 08 Jun 2025 05:04:43 +0000
Manifest next update:     Tue 10 Jun 2025 05:04:43 +0000
Files and hashes:         1: VdvLWIZ1BvehPgl-PTWa3WJwsXU.crl (hash: Jd9VPKsuVs6jZML8f9sqqPcZkq2H93/UzCQCSsbJl7E=)
                          2: 0938C110B27111EFB0304D44762E951A.roa (hash: ay75fj6Xo/K8dMqIw1e1aVOA92l5Vt1QYzAgQ5lPJF8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.mft
                          rsync://rpki.afrinic.net/repository/arin/VdvLWIZ1BvehPgl-PTWa3WJwsXU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Jun 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623AE4AR, serialNumber=55DBCB58867506F7A13E097E3D359ADD6270B175
        Validity
            Not Before: Jun  8 05:04:43 2025 GMT
            Not After : Jun 10 05:04:43 2025 GMT
        Subject: CN=684519ec-440f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fe:c9:21:09:0d:1c:a8:5b:e8:c3:5d:94:19:
                    19:a3:bc:3b:76:29:49:46:4e:b7:e2:73:41:fc:68:
                    b7:aa:98:d8:29:9a:a4:18:63:cf:da:68:57:0c:7a:
                    60:57:ba:18:40:fe:6e:6d:d5:f6:ab:bc:c8:4a:9e:
                    b7:d0:02:a9:b7:d6:9c:3f:1a:98:a3:9b:7f:6b:8f:
                    69:87:4b:f5:da:df:23:5f:4e:75:a3:77:23:b0:5b:
                    e0:4a:2a:61:0a:60:17:e8:0d:6d:72:d7:ee:4b:3b:
                    82:d6:bc:a5:6f:b2:55:14:31:ba:8e:eb:5e:43:cd:
                    ee:36:da:ce:e2:d2:78:da:7e:a0:9d:9a:4f:cd:46:
                    d3:15:30:52:c5:4d:13:7b:92:39:5c:01:27:8f:8a:
                    ca:83:8b:76:1e:8b:2c:de:01:f3:db:54:40:f5:fe:
                    8e:e9:d0:9d:d6:e5:ab:07:a2:de:e6:d2:17:d4:f4:
                    36:d1:ea:c4:c6:ae:dc:13:5d:7e:b4:ac:58:5b:01:
                    4e:69:dd:0f:df:3b:8b:0d:2c:68:0a:a0:d2:09:92:
                    35:7a:9b:01:4e:a2:a3:0f:9a:6c:df:cf:94:5f:cb:
                    0b:84:f4:f1:7f:60:8f:45:fa:c6:c1:82:8c:56:99:
                    85:27:a0:0a:63:75:01:40:15:da:b9:29:15:6e:c7:
                    40:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6F:FB:F7:E3:70:29:F8:DE:EF:41:EB:A5:2D:C3:17:C4:CA:6E:74
            X509v3 Authority Key Identifier:
                keyid:55:DB:CB:58:86:75:06:F7:A1:3E:09:7E:3D:35:9A:DD:62:70:B1:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VdvLWIZ1BvehPgl-PTWa3WJwsXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623AE4/DC77632AB27011EF91F22F42762E951A/VdvLWIZ1BvehPgl-PTWa3WJwsXU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:a2:58:02:65:91:08:1b:17:3c:13:ba:10:0d:c3:f9:09:45:
         f7:bb:9d:8b:08:1a:a0:4c:a9:d3:a2:a7:31:15:7b:c3:8b:b1:
         a7:8f:b0:8e:a6:35:89:a0:63:40:66:80:c8:55:68:ec:9b:a3:
         2b:8c:ae:bd:3d:82:e8:9c:2c:73:a5:96:58:e2:41:dc:6d:ad:
         02:93:8d:3b:51:91:81:87:6a:5c:03:54:3e:08:bc:9e:21:20:
         14:30:a6:ab:ee:44:22:fc:e9:ad:0e:e1:3f:33:0c:51:be:b3:
         b6:94:90:d1:48:e7:8a:69:df:43:23:47:ac:c7:d7:7b:60:6a:
         b0:2c:3c:8c:16:9e:54:72:e0:43:5e:6a:ce:32:26:ba:f4:86:
         76:79:79:66:63:e3:47:48:53:48:9c:bf:da:30:ae:79:3a:7f:
         05:f5:26:37:e5:90:24:45:e2:99:e4:d3:97:be:d1:3d:44:e7:
         24:f5:88:36:3f:36:3b:0d:27:4d:45:ac:09:74:35:ac:b0:bd:
         db:1e:dc:9c:3d:07:60:64:5e:f1:70:89:42:71:96:e5:16:ef:
         3c:c0:c3:b1:e5:b5:19:ba:9f:13:cb:12:e8:16:2c:9e:c5:ba:
         80:b6:ce:91:1b:18:3b:5d:19:72:23:f2:40:64:b3:c7:af:fc:
         8a:97:14:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:24:55 2025 by rpki-client