Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
File:                     QVvN73HfdO_cZVY4QJM9lPIraRM.mft (raw, json)
Hash identifier:          +z5fVEfb+xbQXTrjDAhJ4AQCwa5aCYwd64t6X5NEHdk=
Subject key identifier:   23:28:91:0E:E1:0E:24:66:F1:D3:FE:FE:3C:B4:8C:6B:F9:53:23:C0
Authority key identifier: 41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13
Certificate issuer:       /CN=F36374C9AR/serialNumber=415BCDEF71DF74EFDC65563840933D94F22B6913
Certificate serial:       0CEB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
Manifest number:          0CEA
Signing time:             Sun 08 Jun 2025 01:03:45 +0000
Manifest this update:     Sun 08 Jun 2025 01:03:44 +0000
Manifest next update:     Tue 10 Jun 2025 01:03:44 +0000
Files and hashes:         1: QVvN73HfdO_cZVY4QJM9lPIraRM.crl (hash: iwXQPEZiIaFXYf6LbLaV1TeupDzjsVQ0QwEJ6J43nyI=)
                          2: A3321ED8542E11E6BE4E521EF8AEA228.roa (hash: sJ9cmmKEMJXtaW4GTF37G3rJicRaTpT/POSsPQBapsQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
                          rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Jun 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3307 (0xceb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36374C9AR, serialNumber=415BCDEF71DF74EFDC65563840933D94F22B6913
        Validity
            Not Before: Jun  8 01:03:44 2025 GMT
            Not After : Jun 10 01:03:44 2025 GMT
        Subject: CN=6844e171-761a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:63:c3:dc:1a:ec:13:42:68:80:ba:fb:6f:32:
                    29:cd:e6:ef:a3:c1:e5:21:2e:49:49:64:1a:7a:eb:
                    b8:35:be:51:96:f6:7b:e3:e8:5c:6d:3a:40:1b:ad:
                    29:c8:52:38:7e:3f:30:06:3f:d6:19:2c:ff:b7:e8:
                    f8:db:24:20:e6:19:5c:b1:5d:83:81:c2:41:d7:f0:
                    68:6b:6c:68:af:8c:a4:54:f1:a4:70:4c:05:ff:f6:
                    c2:00:cc:39:0b:b8:e9:22:15:dd:33:0b:c6:11:07:
                    34:50:43:66:d0:9b:7c:1a:22:55:0f:e1:1f:ed:33:
                    bc:00:fa:13:7e:8e:bd:d5:df:dd:16:5b:2a:9d:c1:
                    65:95:ba:54:e9:f1:45:a0:64:92:85:45:eb:ad:75:
                    7e:e9:2e:02:09:6c:1e:1a:da:cd:96:e5:ba:0b:35:
                    a8:77:3c:13:e9:0e:46:c3:37:b6:2d:af:9c:b8:06:
                    3f:7f:5c:96:b8:ff:b4:23:bd:0b:dd:cf:32:32:18:
                    71:44:74:91:84:4c:48:c7:a6:cf:9b:8e:d8:fb:b7:
                    57:67:88:f9:43:a8:3e:ce:9d:27:d7:cd:fa:72:36:
                    be:20:aa:4b:4c:df:c0:e6:36:80:a1:85:01:71:53:
                    88:4a:ec:92:71:6f:64:74:1e:6b:86:5e:1c:f8:09:
                    0d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:28:91:0E:E1:0E:24:66:F1:D3:FE:FE:3C:B4:8C:6B:F9:53:23:C0
            X509v3 Authority Key Identifier:
                keyid:41:5B:CD:EF:71:DF:74:EF:DC:65:56:38:40:93:3D:94:F2:2B:69:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QVvN73HfdO_cZVY4QJM9lPIraRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/5024DE42542E11E6B8BE071EF8AEA228/QVvN73HfdO_cZVY4QJM9lPIraRM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:be:72:d8:f6:8d:86:9c:87:b4:dd:01:71:8e:bd:50:a5:ad:
         c9:8c:55:0d:0c:60:a9:f1:b5:17:77:f8:ec:39:84:ba:c4:ef:
         3c:dc:a8:64:eb:87:ef:40:ae:6b:06:6d:6f:bd:88:c5:7e:94:
         7b:57:9a:76:58:e4:af:b0:cf:30:79:2e:5c:19:e4:92:41:d4:
         1e:ca:dc:78:7a:4c:4d:49:9d:88:31:71:09:41:4f:b9:78:1c:
         f7:bf:4e:06:f1:77:7f:e8:85:ee:71:43:2b:19:34:53:49:75:
         1b:d2:26:a0:01:d7:a1:57:81:69:07:2f:10:57:6f:5d:da:ea:
         56:d2:45:ae:d2:50:cb:8d:54:28:c1:50:54:39:a4:c2:84:bc:
         33:db:3e:1b:9c:17:4d:fe:76:9b:44:3d:e2:3a:94:00:5a:7a:
         d4:5c:b1:84:8a:77:8b:96:c5:0d:c0:9d:36:f1:42:72:9d:00:
         5d:58:f0:74:3a:bf:60:39:4d:37:87:14:63:1b:f6:48:db:d0:
         58:7b:f3:00:c7:60:fd:30:9c:aa:2e:ff:c3:e2:fd:c9:1d:d5:
         25:9b:90:f1:94:88:2d:5a:60:a6:07:2a:87:f3:3f:ac:28:4b:
         f1:66:b2:4d:2b:61:c2:ca:9f:dd:45:67:80:a0:92:a4:6f:b5:
         52:45:a6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:36:26 2025 by rpki-client