Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
File:                     -sDqJCqAq1tZab-mHdXZlLIVbrU.mft (raw, json)
Hash identifier:          Hs6BNEFYM5MV5rpjKSVtOmk2+CzrN8uGhqARWniLkm0=
Subject key identifier:   60:73:D4:B6:58:DF:B9:C7:4A:A0:D0:EB:A0:62:84:E8:A6:0C:44:AD
Authority key identifier: FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5
Certificate issuer:       /CN=F364379DAR/serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
Certificate serial:       0319
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
Manifest number:          0318
Signing time:             Sat 12 Apr 2025 02:25:53 +0000
Manifest this update:     Sat 12 Apr 2025 02:25:53 +0000
Manifest next update:     Mon 14 Apr 2025 02:25:53 +0000
Files and hashes:         1: -sDqJCqAq1tZab-mHdXZlLIVbrU.crl (hash: yiZO43EgXVr9JwtsGFc4Ete6grMRrmqF/nfs5iTLvWU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
                          rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 14 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364379DAR, serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
        Validity
            Not Before: Apr 12 02:25:53 2025 GMT
            Not After : Apr 14 02:25:53 2025 GMT
        Subject: CN=67f9cf31-d416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:66:ea:8f:3f:f6:ad:41:00:35:44:82:c0:62:
                    21:85:8e:0d:31:7d:6a:50:17:c2:41:fe:88:b0:4b:
                    a9:c6:de:5d:2d:d7:89:c6:30:09:a1:fc:40:00:56:
                    28:d8:44:4b:e9:92:f5:0d:7a:5b:a7:b9:47:3a:b2:
                    0b:d2:4b:2a:5b:f3:ef:21:3f:3c:92:61:fe:66:67:
                    d7:32:1b:67:34:a0:42:6b:21:57:b9:fc:a1:a9:42:
                    4e:41:98:25:ed:50:45:90:41:4d:fe:a3:96:2e:0e:
                    94:f7:4d:23:84:11:b6:f0:58:d2:73:e5:13:b0:6a:
                    9f:12:19:cd:2a:f5:ad:18:28:e0:57:cc:67:05:54:
                    f3:1e:7f:32:29:ab:85:4b:e3:8e:62:98:23:70:33:
                    7f:59:8c:8a:8c:0f:ee:bc:08:17:96:07:85:44:61:
                    b6:95:6a:c7:1f:a6:42:39:77:80:fa:6a:a4:02:ad:
                    98:f8:9f:68:b7:22:35:86:f7:51:9c:24:64:90:72:
                    70:bf:0e:85:a0:df:ef:0d:5d:d6:a0:cf:ae:1a:18:
                    26:df:84:e3:aa:5d:dc:60:fb:13:01:c8:14:0d:5c:
                    a3:42:c3:e4:7f:10:71:00:77:59:86:75:6b:8a:d6:
                    b3:e0:8a:21:df:fd:fd:43:9d:e7:c8:43:f3:ae:f0:
                    85:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:73:D4:B6:58:DF:B9:C7:4A:A0:D0:EB:A0:62:84:E8:A6:0C:44:AD
            X509v3 Authority Key Identifier:
                keyid:FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:0e:90:e2:a7:39:c8:ee:50:66:2c:74:7f:fb:74:db:0e:91:
         18:47:11:28:0d:4a:5a:0d:c4:56:3d:59:c8:3f:fe:87:59:8e:
         12:e5:98:07:52:98:6b:cc:5a:06:6e:a7:a7:ad:0f:df:d7:b0:
         e5:2a:6b:40:a1:8a:0c:3a:77:7b:0b:ea:79:09:f4:f9:59:de:
         31:c2:b3:9c:60:de:ea:d9:ea:75:a6:e1:1f:14:e6:70:1d:c1:
         ab:84:8b:f1:e8:f0:93:0c:31:6d:ca:a0:b7:33:c3:5c:cc:bd:
         8b:a5:cc:a9:ba:6a:2d:bb:48:61:e2:6f:0e:77:16:98:42:fd:
         bf:73:e5:ea:60:52:a7:d9:6d:dd:e2:8e:16:5a:60:7c:94:c6:
         3e:65:29:5c:de:d4:ce:33:11:ae:b7:81:5b:b2:bb:29:31:aa:
         3b:c3:02:7d:3b:7f:8e:99:6c:51:dd:46:b3:6e:4f:b7:eb:d1:
         ac:c8:c4:db:69:1e:8e:59:d7:de:76:8f:dd:1d:85:6e:7e:3c:
         12:74:ca:a9:83:18:66:79:1d:17:ab:b8:d8:fc:7c:41:7c:65:
         df:25:b1:24:2c:ca:fc:00:8c:5f:6a:a5:eb:4c:03:75:49:85:
         fd:7c:a1:fb:28:6b:5e:61:d2:3c:b1:9c:d9:c4:ad:8c:6f:1f:
         3b:d8:c2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 22:42:40 2025 by rpki-client