Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
File:                     -sDqJCqAq1tZab-mHdXZlLIVbrU.mft (raw, json)
Hash identifier:          iJTImQyV6uygLLf8/kINq+EDfVext4XsDYs7iopdIgQ=
Subject key identifier:   3B:83:46:A6:D8:EF:60:D5:56:63:6B:E7:AE:32:12:51:F9:BE:8B:24
Authority key identifier: FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5
Certificate issuer:       /CN=F364379DAR/serialNumber=FAC0EA242A80AB5B5969BFA61DD5D994B2156EB5
Certificate serial:       02FA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
Manifest number:          02F9
Signing time:             Thu 13 Mar 2025 02:25:02 +0000
Manifest this update:     Thu 13 Mar 2025 02:25:02 +0000
Manifest next update:     Sat 15 Mar 2025 02:25:02 +0000
Files and hashes:         1: -sDqJCqAq1tZab-mHdXZlLIVbrU.crl (hash: hW11PYtJbW4RhgyKOdf93vpz2AYOhnGMcidv4Aoa2g4=)
                          2: 3E5464B4C23911ED988FECF5F1222468.roa (hash: /hp7kvSrcZNgp2PjQqGMre4rusrPNDhZ4t/WjMK1l7g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
                          rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 15 Mar 2025 00:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 762 (0x2fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364379DAR
        Validity
            Not Before: Mar 13 02:25:02 2025 GMT
            Not After : Mar 15 02:25:02 2025 GMT
        Subject: CN=67d241fe-cd08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:33:fe:7f:6f:52:02:78:3a:f4:d3:23:71:0c:
                    84:40:45:ef:24:2b:ca:d0:65:d9:3d:6a:95:56:65:
                    57:67:e9:1e:5a:e1:03:7a:a4:96:5a:84:b7:eb:06:
                    f2:57:2d:f9:30:e3:9a:e8:2c:e5:c8:a3:51:ac:d4:
                    7a:84:98:64:d7:46:cc:5a:b6:07:15:f5:a4:72:0f:
                    f3:c0:a6:81:11:e5:11:79:b0:94:a8:c0:66:9f:d3:
                    06:3d:76:bf:ee:67:73:e5:0c:a2:8e:a5:96:80:f3:
                    ef:b6:84:2b:66:70:06:50:cd:a9:6a:97:1b:31:6e:
                    77:98:01:81:8a:47:d1:bc:5c:1b:43:aa:68:ff:62:
                    31:04:14:49:17:0e:58:b3:d6:ab:94:2f:8e:db:40:
                    c8:4b:64:7d:db:74:85:16:29:c5:6f:9f:bf:31:de:
                    0a:06:c0:2a:de:29:b2:e3:47:43:55:10:5f:a8:fc:
                    07:ec:90:3c:8f:89:84:63:98:c6:16:28:4e:3c:23:
                    48:f6:64:e3:35:89:be:66:a2:1f:98:ea:30:09:e0:
                    58:12:09:7e:d9:c4:e0:b8:da:bb:92:bd:cf:d2:1d:
                    dd:20:24:ec:ef:91:58:c0:ba:c4:8d:dd:74:b4:19:
                    82:d4:a0:f4:84:07:2e:a4:15:b1:9a:7d:18:d8:3e:
                    36:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:83:46:A6:D8:EF:60:D5:56:63:6B:E7:AE:32:12:51:F9:BE:8B:24
            X509v3 Authority Key Identifier:
                keyid:FA:C0:EA:24:2A:80:AB:5B:59:69:BF:A6:1D:D5:D9:94:B2:15:6E:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-sDqJCqAq1tZab-mHdXZlLIVbrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364379D/502A97D4BF3D11EDB8DB40F1F1222468/-sDqJCqAq1tZab-mHdXZlLIVbrU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:f2:32:07:19:e7:aa:81:68:4f:d7:b6:ca:6a:a7:dd:9e:55:
         56:25:42:39:4b:23:99:b6:ab:87:80:36:95:bf:65:42:30:79:
         88:68:99:b7:26:00:80:6a:26:17:8c:08:a0:62:bd:3f:1d:b2:
         77:b9:48:dd:4d:11:a9:4f:2d:e3:a2:4a:93:3c:42:39:17:71:
         bc:09:4e:66:49:d3:2e:e2:20:a3:a0:93:0a:85:3e:14:e7:28:
         5d:ff:7b:d3:9a:94:00:0c:1f:e4:55:6f:c4:a3:e6:55:d3:22:
         73:92:57:d9:9f:cb:3b:22:b1:5e:6e:cc:72:ea:d9:b8:6f:d8:
         71:41:4f:7e:77:81:99:2b:b4:49:25:61:42:fe:cc:7c:f8:06:
         35:33:25:1a:d4:7d:b5:2e:cf:01:98:2b:59:21:0c:1f:78:0f:
         9b:f5:93:2d:60:c5:21:57:9f:4b:30:ee:ec:58:b5:fa:5d:da:
         24:6d:3d:5b:0c:0b:7c:10:3e:b4:59:0c:23:7e:45:f1:87:46:
         77:86:a4:b4:c8:9a:e5:57:8e:c2:49:f5:98:e9:fe:db:6f:16:
         f3:c5:ba:20:9d:ad:77:8b:e8:8d:17:e4:5a:80:bd:9c:2a:37:
         a2:57:bc:59:67:e3:20:43:92:cc:5d:2a:3c:1e:f8:6c:95:42:
         71:5a:2c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:49:15 2025 by rpki-client