Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.mft
File:                     HUPkHQHPhf-UD2YG4WRhR9hyiyg.mft (raw, json)
Hash identifier:          CeSlPhY0qWG3p/vCyFkNAdbKN7GwXxRxSwmE7ezJm6g=
Subject key identifier:   D8:75:D8:96:B3:1A:B8:CD:F8:89:2D:D0:E8:07:51:F9:F1:72:60:35
Authority key identifier: 1D:43:E4:1D:01:CF:85:FF:94:0F:66:06:E1:64:61:47:D8:72:8B:28
Certificate issuer:       /CN=F3651254AR/serialNumber=1D43E41D01CF85FF940F6606E1646147D8728B28
Certificate serial:       0C06
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HUPkHQHPhf-UD2YG4WRhR9hyiyg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.mft
Manifest number:          0F7E
Signing time:             Thu 13 Mar 2025 00:58:06 +0000
Manifest this update:     Thu 13 Mar 2025 00:58:06 +0000
Manifest next update:     Sat 15 Mar 2025 00:58:06 +0000
Files and hashes:         1: HUPkHQHPhf-UD2YG4WRhR9hyiyg.crl (hash: eGW61y1AAh/6OOj99PLPQqI2hP5S37xA6ylMx7xolPw=)
                          2: 14F1F27CD8C911E686B23863F8AEA228.roa (hash: bStN1pwltgaw97ERqptdQwfCi/altyvUGhKkmY10fFU=)
                          3: 15F71ABA3D8811ED90C4A0C3F1222468.roa (hash: ZIWSZmc0YyiPZ33NmPw3XzXebX+VO4+zLCYTtQFl6w8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.mft
                          rsync://rpki.afrinic.net/repository/arin/HUPkHQHPhf-UD2YG4WRhR9hyiyg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 15 Mar 2025 00:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3078 (0xc06)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651254AR
        Validity
            Not Before: Mar 13 00:58:06 2025 GMT
            Not After : Mar 15 00:58:06 2025 GMT
        Subject: CN=67d22d9e-59d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:63:96:0a:90:ad:cc:30:48:6d:31:6e:d5:3e:
                    0c:b4:25:d4:e3:ed:ca:90:fe:6e:8f:d7:3e:82:7a:
                    8e:79:26:0f:80:ae:51:97:77:f5:0b:a6:ea:60:e8:
                    56:85:97:3a:38:8d:fa:22:1c:74:56:62:fd:47:15:
                    e4:3b:13:ce:02:68:20:14:bf:14:10:5c:61:00:f0:
                    5e:aa:02:dc:84:07:ce:eb:88:64:fc:ec:11:ee:af:
                    8e:3a:81:17:e8:4a:ad:43:18:47:3c:32:e9:93:23:
                    1f:43:8f:69:9b:bf:94:08:dd:b9:3e:3c:5c:7d:86:
                    40:1a:48:3d:2f:df:dc:53:17:16:c4:7b:a5:6d:26:
                    9f:ea:3d:c4:27:e2:c3:ad:7d:a8:06:00:86:78:ba:
                    b9:45:0e:5d:f5:92:a5:a2:1f:7f:cf:1f:4a:2a:9b:
                    67:a9:59:1e:d6:cc:83:8e:e6:81:0c:97:9b:20:1d:
                    cc:d7:b6:5b:c8:76:fc:bb:46:bf:36:c7:ff:1a:2f:
                    10:17:bd:36:7b:ec:47:66:13:40:8b:56:f5:b7:db:
                    ba:3a:27:4e:c5:00:a4:50:e5:98:99:0b:79:35:97:
                    a7:48:02:9e:9d:51:eb:e6:65:06:13:9d:0d:d8:ba:
                    60:24:55:e3:66:c8:43:04:65:17:92:cd:37:97:46:
                    5d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:75:D8:96:B3:1A:B8:CD:F8:89:2D:D0:E8:07:51:F9:F1:72:60:35
            X509v3 Authority Key Identifier:
                keyid:1D:43:E4:1D:01:CF:85:FF:94:0F:66:06:E1:64:61:47:D8:72:8B:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HUPkHQHPhf-UD2YG4WRhR9hyiyg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651254/CD02A612C85311E69198EA57F8AEA228/HUPkHQHPhf-UD2YG4WRhR9hyiyg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:3a:d0:a6:23:a4:5a:41:2a:aa:7f:75:7d:0c:df:e1:e1:75:
         80:f6:d5:e8:31:79:89:19:e7:f9:3f:e0:42:a4:1b:62:a1:d2:
         cf:52:1a:81:0f:bd:17:57:04:8c:80:3a:99:74:e4:62:d1:48:
         ec:19:7e:26:5c:e7:be:50:80:8b:b1:c2:aa:eb:c2:d7:3f:60:
         00:76:87:60:8d:4e:2c:c7:5c:f1:6e:c1:c7:67:66:7a:02:ce:
         6b:51:b3:e7:f1:32:2a:c4:b5:9c:43:97:6c:1a:20:29:02:55:
         00:d8:df:67:ac:c7:63:fd:91:c6:4d:4e:c1:25:4c:9e:3f:96:
         1f:f9:2c:80:83:67:d2:48:03:25:a8:db:e8:f2:14:19:f7:6e:
         19:a1:36:84:1b:c7:dd:f9:be:87:63:a3:96:a6:87:a8:69:dd:
         2b:75:84:39:59:90:5e:45:3f:02:17:07:44:d1:af:45:6d:b9:
         58:c5:9f:85:ab:9f:7d:83:d0:22:91:88:7d:43:00:06:99:79:
         ab:d0:27:79:be:34:1a:01:5b:04:19:29:0b:ce:6b:32:11:62:
         ee:5c:23:f2:f0:77:fa:e6:23:86:b4:51:e9:b5:5e:88:d1:ac:
         fb:1c:55:d6:9d:cb:5c:e9:ed:ca:9b:bc:eb:7b:a0:b1:9b:9a:
         48:0b:6d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:39:29 2025 by rpki-client