Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.mft
File:                     uf3YlTNJcWra56jRuxPMJ_Ug_9Y.mft (raw, json)
Hash identifier:          0amdRCfXazA+xda6uEsC05T6gvRLZPTpOPA/H/Esmmc=
Subject key identifier:   89:43:E7:0A:FF:D9:BF:A6:5A:D2:38:0B:5A:A0:F1:F2:EB:E7:5A:44
Authority key identifier: B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6
Certificate issuer:       /CN=F3626CB6AR/serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
Certificate serial:       0763
Authority info access:    rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.mft
Manifest number:          06E6
Signing time:             Sat 12 Apr 2025 01:38:22 +0000
Manifest this update:     Sat 12 Apr 2025 01:38:22 +0000
Manifest next update:     Mon 14 Apr 2025 01:38:22 +0000
Files and hashes:         1: uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl (hash: nfl7jAfKse64lR+ZyMKBwwlcL1Y7BLznlKysM8SfxUg=)
                          2: B3154C7CC81F11EEAA20E967775412E6.roa (hash: 8UfO1Zdj7sHYai3qFl14GvhjEbZMOyrK3RfMcTYVc3I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.mft
                          rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 14 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1891 (0x763)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3626CB6AR, serialNumber=B9FDD8953349716ADAE7A8D1BB13CC27F520FFD6
        Validity
            Not Before: Apr 12 01:38:22 2025 GMT
            Not After : Apr 14 01:38:22 2025 GMT
        Subject: CN=67f9c40e-7fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:27:1d:f1:31:46:cb:6c:69:b4:2d:42:d9:e4:
                    ba:97:19:d7:3f:6c:3f:88:5f:79:85:22:01:13:d2:
                    91:40:32:2d:4d:86:83:3d:77:44:16:b8:a9:55:37:
                    2b:75:94:8a:bb:44:47:ef:08:96:c7:52:55:14:24:
                    3e:5a:57:37:27:51:65:00:0a:0f:fc:4d:6f:cb:aa:
                    b7:3a:f4:7e:1f:60:29:03:a1:c3:5b:65:d2:24:1f:
                    a9:33:18:0a:14:3b:de:bb:5a:10:79:be:88:70:71:
                    6d:c4:ac:2b:95:27:24:58:9a:38:a1:c7:11:59:94:
                    cd:08:de:b5:4f:71:60:49:6b:df:7c:61:ec:b0:3f:
                    72:3b:d7:cb:95:01:d9:cd:1b:26:86:f8:de:46:55:
                    75:26:fd:b7:b3:0e:76:1d:bf:63:f7:41:80:9c:bb:
                    42:c3:8a:64:34:6b:d8:76:00:22:a6:f0:c7:64:83:
                    51:81:ee:ef:f9:8f:c1:c6:86:7b:48:62:71:fe:78:
                    01:14:61:ac:a4:8e:66:dc:b3:d3:4a:cf:bf:6c:dd:
                    04:3c:be:7d:9c:da:fd:25:c3:19:69:85:70:cc:8e:
                    87:6c:b7:50:07:1a:2a:d3:88:ad:91:c9:ca:cc:1f:
                    0d:73:b8:3c:e9:16:39:6f:e5:ba:10:31:bc:59:03:
                    e8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:43:E7:0A:FF:D9:BF:A6:5A:D2:38:0B:5A:A0:F1:F2:EB:E7:5A:44
            X509v3 Authority Key Identifier:
                keyid:B9:FD:D8:95:33:49:71:6A:DA:E7:A8:D1:BB:13:CC:27:F5:20:FF:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3626CB6/02B8B9488BD911EB91C9A537F8AEA228/uf3YlTNJcWra56jRuxPMJ_Ug_9Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:88:02:ab:0c:5c:5e:9f:33:e4:78:7a:a9:3f:7c:81:15:05:
         5a:fc:92:fe:13:56:00:ad:db:19:73:92:eb:ed:71:25:68:0a:
         b7:9a:71:76:49:84:50:4c:c4:94:47:0c:af:25:c6:f2:eb:4e:
         05:30:35:30:05:12:76:a2:e0:14:d8:44:94:72:d8:75:f2:88:
         24:cf:e3:3f:af:9b:29:dc:d1:fa:01:41:d0:c0:fc:96:33:88:
         a1:28:c9:79:c7:df:a4:12:52:a2:17:a7:a1:26:3a:47:36:1e:
         0d:78:6b:68:ba:1f:83:fd:2c:86:ac:c7:d4:32:e2:ef:3f:7f:
         f2:24:43:3c:90:aa:9b:9e:62:34:1d:27:79:ec:3c:fd:1b:ce:
         bd:a7:09:04:36:fc:df:6a:a5:41:67:c1:72:7d:f0:55:be:11:
         3b:66:98:e0:98:ca:69:9e:83:a7:4b:c4:6c:84:b1:b3:15:03:
         be:d2:1f:b5:1a:30:cb:e3:52:60:0b:03:51:3e:8f:b0:4a:1c:
         cc:96:37:1e:f4:20:49:26:8b:b2:35:86:ce:56:58:f8:1e:9f:
         9e:52:c4:89:48:bd:0a:df:3a:82:a5:ae:2f:49:3c:00:dd:cf:
         44:01:18:ca:bf:0a:b6:3b:76:9c:39:36:94:d1:5e:38:4e:5c:
         cf:38:eb:c9
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICB2MwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjZDQjZBUjExMC8GA1UEBRMoQjlGREQ4OTUzMzQ5NzE2QURBRTdBOEQxQkIxM0ND
MjdGNTIwRkZENjAeFw0yNTA0MTIwMTM4MjJaFw0yNTA0MTQwMTM4MjJaMBgxFjAU
BgNVBAMTDTY3ZjljNDBlLTdmZDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcJx3xMUbLbGm0LULZ5LqXGdc/bD+IX3mFIgET0pFAMi1NhoM9d0QWuKlV
Nyt1lIq7REfvCJbHUlUUJD5aVzcnUWUACg/8TW/Lqrc69H4fYCkDocNbZdIkH6kz
GAoUO967WhB5vohwcW3ErCuVJyRYmjihxxFZlM0I3rVPcWBJa998YeywP3I718uV
AdnNGyaG+N5GVXUm/bezDnYdv2P3QYCcu0LDimQ0a9h2ACKm8Mdkg1GB7u/5j8HG
hntIYnH+eAEUYaykjmbcs9NKz79s3QQ8vn2c2v0lwxlphXDMjodst1AHGirTiK2R
ycrMHw1zuDzpFjlv5boQMbxZA+hFAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUiUPn
Cv/Zv6Za0jgLWqDx8uvnWkQwHwYDVR0jBBgwFoAUuf3YlTNJcWra56jRuxPMJ/Ug
/9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI2Q0I2LzAyQjhCOTQ4OEJEOTExRUI5MUM5QTUzN0Y4QUVBMjI4L3VmM1ls
VE5KY1dyYTU2alJ1eFBNSl9VZ185WS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L3VmM1lsVE5KY1dyYTU2alJ1eFBNSl9VZ185WS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MjZDQjYvMDJCOEI5NDg4QkQ5MTFFQjkxQzlBNTM3RjhBRUEy
MjgvdWYzWWxUTkpjV3JhNTZqUnV4UE1KX1VnXzlZLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQARiAKrDFxenzPkeHqpP3yBFQVa/JL+E1YA
rdsZc5Lr7XElaAq3mnF2SYRQTMSURwyvJcby604FMDUwBRJ2ouAU2ESUcth18ogk
z+M/r5sp3NH6AUHQwPyWM4ihKMl5x9+kElKiF6ehJjpHNh4NeGtouh+D/SyGrMfU
MuLvP3/yJEM8kKqbnmI0HSd57Dz9G869pwkENvzfaqVBZ8FyffBVvhE7ZpjgmMpp
noOnS8RshLGzFQO+0h+1GjDL41JgCwNRPo+wShzMljce9CBJJouyNYbOVlj4Hp+e
UsSJSL0K3zqCpa4vSTwA3c9EARjKvwq2O3acOTaU0V44TlzPOOvJ
-----END CERTIFICATE-----
Generated at Sat Apr 12 22:39:54 2025 by rpki-client