Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
File:                     FsdOc5XcId2ESiKgESgWEhp19JI.mft (raw, json)
Hash identifier:          IxAAjwasSzLqUZFJbiljzoakfGTcQP8HkzA6RY2Z4oI=
Subject key identifier:   FE:92:B9:E3:77:B7:25:C5:29:6F:46:28:F2:77:06:3A:34:80:89:B5
Authority key identifier: 16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
Certificate issuer:       /CN=F3654A44AR/serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Certificate serial:       0314
Authority info access:    rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
Manifest number:          0311
Signing time:             Sun 16 Feb 2025 02:22:35 +0000
Manifest this update:     Sun 16 Feb 2025 02:22:34 +0000
Manifest next update:     Tue 18 Feb 2025 02:22:34 +0000
Files and hashes:         1: FsdOc5XcId2ESiKgESgWEhp19JI.crl (hash: /BOOLShu95qKenJHCgzLe83V+BPVlPHfbHwx4Ge7onk=)
                          2: CF8B10CE1DB711EFA609B0217DDC24C2.roa (hash: cUUrYIHHPxFgWnYQbOftBzdS94Gj26Vr5vz5884oWrA=)
                          3: 148381D41DB811EF83D02FF17CDC24C2.roa (hash: BiZPcXyEyPmGn8AwAntxiM0fpA7+k3wSNcu8/0aEYDQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                          rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654A44AR
        Validity
            Not Before: Feb 16 02:22:34 2025 GMT
            Not After : Feb 18 02:22:34 2025 GMT
        Subject: CN=67b14beb-2482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:05:9c:ae:46:b5:37:04:fc:41:d5:29:1a:87:
                    e5:16:fa:11:b1:e3:0a:d2:35:41:5a:7a:15:a5:6d:
                    55:2d:21:e6:8a:90:67:d0:0e:6d:18:c8:8d:24:68:
                    3a:82:3f:af:61:2e:cc:04:9b:40:c9:3e:94:ae:d6:
                    55:64:96:ab:b0:37:80:93:ee:14:b9:1f:2a:3d:66:
                    da:68:7d:2e:40:16:60:65:88:7c:d5:78:d5:96:cc:
                    cc:4e:5f:0e:47:3b:43:6a:76:75:fc:47:11:77:90:
                    0e:ac:02:57:32:e8:5a:94:60:7a:c3:c6:3d:81:9e:
                    91:ad:0a:76:78:d7:f9:c4:58:1e:0e:d3:1b:67:a1:
                    15:b4:09:08:af:d3:f9:c0:3e:a2:a8:0a:45:13:44:
                    be:1a:ee:26:8e:c0:0d:58:7f:ff:a9:0d:35:16:48:
                    4b:7f:39:0c:f3:a6:56:94:93:cb:99:86:f7:bb:b4:
                    e6:8d:70:02:3f:ab:07:1e:a5:09:d6:99:a6:89:39:
                    ef:95:0f:ae:e0:97:e0:43:29:23:82:32:a2:0c:4a:
                    42:cc:9f:3d:9e:38:e3:54:a0:02:e5:f1:f8:35:1c:
                    86:a8:a1:b4:3d:7b:8f:44:63:67:81:a9:c8:ad:55:
                    e6:b0:da:d1:52:66:9f:f1:c3:db:97:eb:a7:5b:cb:
                    b9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:92:B9:E3:77:B7:25:C5:29:6F:46:28:F2:77:06:3A:34:80:89:B5
            X509v3 Authority Key Identifier:
                keyid:16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:03:2d:03:c1:65:9e:ad:23:af:d8:ff:26:cf:8c:36:be:84:
         b0:56:f1:ef:a4:27:5c:13:17:7d:59:55:9e:b2:8d:f6:f1:f3:
         af:aa:0a:5c:3f:64:31:01:59:34:6d:5e:7c:da:78:ff:45:0f:
         96:cf:7e:c8:c9:83:66:88:70:3e:4f:fc:47:19:47:cd:1b:6e:
         67:55:c6:ca:59:46:c9:c2:9e:5e:75:41:c1:3b:50:4c:71:bc:
         74:75:95:92:9a:bc:ba:d3:d4:6c:14:af:be:12:84:d1:36:f0:
         43:7e:4e:29:f7:60:5d:17:a3:15:ec:88:7d:e3:4b:5d:ca:75:
         86:29:7c:c7:c5:53:07:02:20:76:52:c6:4d:f5:e7:32:5b:04:
         df:49:2f:8e:71:32:5e:ab:0c:ab:07:10:d0:d7:f9:ba:8f:9f:
         31:aa:8f:47:33:76:46:b6:4d:ba:d0:17:65:d8:92:6f:66:07:
         99:db:46:18:89:a1:21:ac:d4:37:b0:d5:c9:39:3e:dc:5f:63:
         b0:8f:5e:9b:30:a4:da:db:57:eb:03:c5:8b:c3:d8:03:81:7c:
         ae:75:f0:8d:68:1c:ce:1f:64:93:08:11:fc:6c:8d:ce:cb:bf:
         99:a7:b9:e1:b9:36:e8:76:d2:c8:72:0a:fb:e9:a3:86:9b:64:
         b7:0d:a7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:21:57 2025 by rpki-client