Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
File:                     bvB88gdsxaYJayVyrgiV_Wc_RxI.mft (raw, json)
Hash identifier:          WqwISVb5nVzuUvOm2AxuhJscvgWzDqCGoxYICj2zKAQ=
Subject key identifier:   34:F3:20:BB:B6:A0:61:FC:FE:65:8F:12:9E:00:31:61:0C:F3:B4:24
Authority key identifier: 6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12
Certificate issuer:       /CN=F3668037AR/serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
Certificate serial:       088D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
Manifest number:          0888
Signing time:             Sun 08 Jun 2025 01:37:08 +0000
Manifest this update:     Sun 08 Jun 2025 01:37:07 +0000
Manifest next update:     Tue 10 Jun 2025 01:37:07 +0000
Files and hashes:         1: bvB88gdsxaYJayVyrgiV_Wc_RxI.crl (hash: 7GmEiAOEtaKNVtceJgnXok5VlR6EYlYCdbdDZSjWunA=)
                          2: FD8F3AE8BC2511EEA262C8AF775412E6.roa (hash: oLYmgki9mz5lwTsVGngG2jpWOy0zZNH+Gds3faUhjqY=)
                          3: B6757616A67E11EE8CA55FAE775412E6.roa (hash: e/FRp2BOX+DWBqpEiG2YF8XCaJAAB0mP/8wu77/rHbE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
                          rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Jun 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2189 (0x88d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668037AR, serialNumber=6EF07CF2076CC5A6096B2572AE0895FD673F4712
        Validity
            Not Before: Jun  8 01:37:07 2025 GMT
            Not After : Jun 10 01:37:07 2025 GMT
        Subject: CN=6844e944-fbf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:5c:89:ae:37:2f:a4:42:21:67:51:cf:49:
                    7f:a3:6a:20:dd:77:d1:26:54:19:6a:9e:74:fe:42:
                    ac:4f:37:33:cd:8c:fd:68:06:53:82:f1:fe:46:4c:
                    b1:39:65:f3:4c:be:9a:61:a0:3d:7b:0a:a9:52:2e:
                    51:a6:22:99:94:7a:43:1c:4a:7b:b8:e0:8e:6d:79:
                    f1:5e:ef:91:9b:cf:d9:d9:59:e9:f2:e5:43:52:11:
                    46:99:ce:da:4f:9d:48:47:08:89:42:f4:66:89:45:
                    83:7c:eb:3d:8f:ed:58:ea:11:ca:b8:97:18:32:ce:
                    df:9f:c8:75:4f:5d:e5:dd:4f:0e:7e:11:a2:e8:4c:
                    52:1b:3b:22:46:8d:ba:af:5a:39:2c:36:71:94:c2:
                    65:1c:bd:01:fb:09:56:e4:d0:f7:a5:41:08:95:9b:
                    0f:37:a3:32:50:94:8a:9a:2f:86:ef:e6:06:68:06:
                    34:ca:d9:51:b0:fe:73:56:36:ae:d0:fc:9f:b4:9d:
                    a9:98:1f:43:fc:52:bc:1e:12:d9:9c:d5:1f:e0:58:
                    b9:4e:01:0b:d1:97:9f:ea:15:83:28:1c:e4:28:06:
                    7e:fc:23:94:a4:79:5a:44:87:da:78:c8:20:60:83:
                    d4:eb:b5:f4:29:64:ba:e2:69:c8:f5:9e:c2:aa:5c:
                    64:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F3:20:BB:B6:A0:61:FC:FE:65:8F:12:9E:00:31:61:0C:F3:B4:24
            X509v3 Authority Key Identifier:
                keyid:6E:F0:7C:F2:07:6C:C5:A6:09:6B:25:72:AE:08:95:FD:67:3F:47:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bvB88gdsxaYJayVyrgiV_Wc_RxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/1159707EC3FC11E9A9726981F8AEA228/bvB88gdsxaYJayVyrgiV_Wc_RxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ad:4b:81:68:40:e9:40:fb:5b:2d:99:64:02:eb:d9:42:93:
         aa:a8:36:8b:80:66:57:e9:dd:bf:3e:80:a0:43:19:ec:7c:0b:
         6b:d0:70:e7:fa:ba:71:a8:ee:b9:2b:0a:ed:85:f6:68:2e:c1:
         2c:8b:de:5c:9b:a9:bb:5a:ea:ee:c6:d0:a1:65:c6:e1:fd:61:
         ba:72:0b:c5:d5:8e:ae:93:2a:d4:fe:de:9b:24:e6:fa:b9:52:
         8c:85:13:51:f5:df:83:93:c4:90:9a:4a:5a:94:34:27:06:93:
         20:63:15:17:1f:2c:ff:df:4a:22:2d:64:20:28:2d:ee:cb:76:
         46:9d:83:5f:fc:ea:4c:7d:32:95:68:5f:3c:5e:71:cc:54:63:
         a7:e9:24:1d:c7:e6:27:60:40:bb:04:46:e2:85:6f:85:7d:3a:
         52:6d:ed:5b:66:96:c8:55:64:18:31:3f:4f:e5:e4:35:8b:2f:
         94:3a:33:b4:70:2c:05:b2:16:ec:26:2b:1e:e1:61:2e:8b:97:
         48:ea:fb:9d:b5:b9:b5:c4:d6:de:92:f7:31:4f:3f:8a:d6:96:
         92:70:1b:83:3f:ff:85:41:04:48:82:ad:33:a5:35:21:3b:1a:
         5f:7e:16:a5:e8:0e:3e:cc:f0:99:af:76:91:c8:3d:3d:8d:b7:
         53:a4:42:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:24:01 2025 by rpki-client