Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.mft
File:                     DQqYyjQmBIKxsXgOoyEN9IWsCIA.mft (raw, json)
Hash identifier:          aFfInqB906c7qzYhHRRQ1rXbO69VeijacrGR+kDA7LY=
Subject key identifier:   CB:1F:22:C3:F2:68:46:C7:31:97:33:0B:29:32:09:09:79:E5:F4:BE
Authority key identifier: 0D:0A:98:CA:34:26:04:82:B1:B1:78:0E:A3:21:0D:F4:85:AC:08:80
Certificate issuer:       /CN=F365E03DAR/serialNumber=0D0A98CA34260482B1B1780EA3210DF485AC0880
Certificate serial:       03AB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.mft
Manifest number:          03A9
Signing time:             Sun 16 Feb 2025 02:12:11 +0000
Manifest this update:     Sun 16 Feb 2025 02:12:11 +0000
Manifest next update:     Tue 18 Feb 2025 02:12:11 +0000
Files and hashes:         1: DQqYyjQmBIKxsXgOoyEN9IWsCIA.crl (hash: C7SbpB17KjNAB5Rk82He8ThyceUSmBcLDWHWYu7rPDk=)
                          2: 5F7AB17428B611EDB115B48AF1222468.roa (hash: OF/fSOSuvHu8HSaG6Hw4O63ywB6BMdELYNXTmsSswzk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.mft
                          rsync://rpki.afrinic.net/repository/arin/DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939 (0x3ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E03DAR
        Validity
            Not Before: Feb 16 02:12:11 2025 GMT
            Not After : Feb 18 02:12:11 2025 GMT
        Subject: CN=67b1497b-0649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:a1:c1:ee:ab:74:30:10:c1:16:65:79:04:
                    14:72:2b:c1:d4:4c:f9:ba:03:4f:31:37:8b:bd:e0:
                    bd:a6:01:fa:9e:ff:de:3e:eb:8e:89:f4:de:df:75:
                    56:31:2a:f5:fb:ef:80:c1:0c:ad:fd:64:69:c5:69:
                    db:a0:fa:a8:80:8d:fe:42:fe:43:c4:50:8a:4a:07:
                    d6:2a:26:d1:8d:57:7e:a6:4f:51:3b:37:dd:a8:1e:
                    db:1a:7f:fc:50:40:87:51:06:a5:59:b3:91:28:71:
                    2a:c8:4b:96:e3:24:94:f4:01:51:a8:ad:51:ee:1e:
                    74:59:21:9e:30:54:0a:65:19:87:45:00:e2:5a:35:
                    43:7c:c2:8a:32:91:81:0c:64:0b:d3:aa:c4:9b:d7:
                    17:9b:6f:a0:3b:41:f2:89:90:8a:dd:c1:f2:1a:56:
                    aa:29:f2:9a:84:ce:e1:5b:43:9a:fe:11:85:74:b8:
                    8f:7e:48:c2:b4:f6:b7:72:03:4b:2f:16:cc:c2:81:
                    bf:e8:6a:41:83:d2:f2:48:a0:4b:cf:bd:50:b6:ee:
                    f7:29:d9:61:1a:f3:e9:f8:71:8d:3d:b5:0b:a1:b7:
                    7a:48:fb:b2:d8:f4:5c:54:27:70:4e:dc:f4:84:68:
                    f8:d4:1b:69:53:23:84:11:d4:fe:27:6a:a2:bb:0b:
                    53:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1F:22:C3:F2:68:46:C7:31:97:33:0B:29:32:09:09:79:E5:F4:BE
            X509v3 Authority Key Identifier:
                keyid:0D:0A:98:CA:34:26:04:82:B1:B1:78:0E:A3:21:0D:F4:85:AC:08:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DQqYyjQmBIKxsXgOoyEN9IWsCIA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/474BF94E289011EDB90CD793F1222468/DQqYyjQmBIKxsXgOoyEN9IWsCIA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:bd:29:e0:34:9d:20:04:15:cd:f9:56:b3:b5:52:f8:8c:b3:
         4d:a4:74:77:68:d0:11:a3:2d:38:9d:4e:e6:bb:69:eb:4a:33:
         97:50:23:bb:dc:59:53:95:61:f1:06:f6:5c:ef:1b:95:2e:81:
         da:71:42:b9:10:94:b8:ef:64:fe:e9:bb:4a:c6:81:9c:dc:d9:
         ef:56:32:ba:8d:d0:ae:e3:f0:35:97:aa:ea:7e:cb:b7:8a:4f:
         50:4a:df:3e:7d:dc:a7:c6:6f:82:a5:a7:31:83:15:35:24:6e:
         6e:fe:d5:c3:00:6c:84:69:be:59:7e:72:63:34:06:2d:c3:69:
         ff:de:66:45:97:5e:b6:de:09:1a:1a:6b:ac:0f:7b:e1:1b:bc:
         7f:b7:26:82:49:4f:5b:6c:17:b4:2e:5f:71:6e:c6:ca:3c:db:
         fe:87:db:27:81:26:83:9b:32:ab:4a:be:6b:38:71:8c:34:1e:
         1d:59:c3:b7:6d:a9:96:6f:cb:90:f9:45:03:ac:01:a3:d2:c9:
         db:7a:d6:e1:84:45:aa:60:75:34:ef:60:ca:18:9b:9a:e7:9d:
         96:f1:be:57:a8:50:ea:c7:9b:8f:84:8b:0d:9c:d7:f7:3c:4d:
         bc:f6:e4:f1:3c:f5:90:6c:3a:e3:d7:95:1c:15:1b:5f:af:a6:
         61:cf:42:c9
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA6swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUUwM0RBUjExMC8GA1UEBRMoMEQwQTk4Q0EzNDI2MDQ4MkIxQjE3ODBFQTMyMTBE
RjQ4NUFDMDg4MDAeFw0yNTAyMTYwMjEyMTFaFw0yNTAyMTgwMjEyMTFaMBgxFjAU
BgNVBAMTDTY3YjE0OTdiLTA2NDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDKyqHB7qt0MBDBFmV5BBRyK8HUTPm6A08xN4u94L2mAfqe/94+646J9N7f
dVYxKvX774DBDK39ZGnFadug+qiAjf5C/kPEUIpKB9YqJtGNV36mT1E7N92oHtsa
f/xQQIdRBqVZs5EocSrIS5bjJJT0AVGorVHuHnRZIZ4wVAplGYdFAOJaNUN8wooy
kYEMZAvTqsSb1xebb6A7QfKJkIrdwfIaVqop8pqEzuFbQ5r+EYV0uI9+SMK09rdy
A0svFszCgb/oakGD0vJIoEvPvVC27vcp2WEa8+n4cY09tQuht3pI+7LY9FxUJ3BO
3PSEaPjUG2lTI4QR1P4naqK7C1OhAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUyx8i
w/JoRscxlzMLKTIJCXnl9L4wHwYDVR0jBBgwFoAUDQqYyjQmBIKxsXgOoyEN9IWs
CIAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVFMDNELzQ3NEJGOTRFMjg5MDExRURCOTBDRDc5M0YxMjIyNDY4L0RRcVl5
alFtQklLeHNYZ09veUVOOUlXc0NJQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0RRcVl5alFtQklLeHNYZ09veUVOOUlXc0NJQS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NUUwM0QvNDc0QkY5NEUyODkwMTFFREI5MENENzkzRjEyMjI0
NjgvRFFxWXlqUW1CSUt4c1hnT295RU45SVdzQ0lBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCevSngNJ0gBBXN+VaztVL4jLNNpHR3aNAR
oy04nU7mu2nrSjOXUCO73FlTlWHxBvZc7xuVLoHacUK5EJS472T+6btKxoGc3Nnv
VjK6jdCu4/A1l6rqfsu3ik9QSt8+fdynxm+CpacxgxU1JG5u/tXDAGyEab5ZfnJj
NAYtw2n/3mZFl1623gkaGmusD3vhG7x/tyaCSU9bbBe0Ll9xbsbKPNv+h9sngSaD
mzKrSr5rOHGMNB4dWcO3bamWb8uQ+UUDrAGj0snbetbhhEWqYHU072DKGJua552W
8b5XqFDqx5uPhIsNnNf3PE289uTxPPWQbDrj15UcFRtfr6Zhz0LJ
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:39 2025 by rpki-client