Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
File:                     3ctMnFuiLYifJQktxc7JJbqEO3g.mft (raw, json)
Hash identifier:          JftLpzl98SioRmtBrrKW2R2F2scWcAGLcUK6i64oc7k=
Subject key identifier:   5C:E3:DC:84:97:4E:BA:97:67:A7:A3:D5:8E:57:AF:23:87:F4:2D:FC
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Certificate issuer:       /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial:       02B2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
Manifest number:          02B1
Signing time:             Mon 09 Jun 2025 03:57:16 +0000
Manifest this update:     Mon 09 Jun 2025 03:57:15 +0000
Manifest next update:     Wed 11 Jun 2025 03:57:15 +0000
Files and hashes:         1: 3ctMnFuiLYifJQktxc7JJbqEO3g.crl (hash: A+2Tj05fNy+GtC3FImP9nfYARCiGn9/MddqmqVDYR4k=)
                          2: 271BDC865B7D11EEA292A6744AD9E6FC.roa (hash: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                          rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 11 Jun 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690 (0x2b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668CFEAR, serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
        Validity
            Not Before: Jun  9 03:57:15 2025 GMT
            Not After : Jun 11 03:57:15 2025 GMT
        Subject: CN=68465b9c-5518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:1a:2f:ae:d2:70:46:67:b3:9f:31:8f:61:
                    fe:0c:b5:da:39:a7:1b:39:49:86:ae:7a:fe:19:ee:
                    d0:3c:45:45:6b:98:b9:f4:94:17:5b:b8:6f:95:ce:
                    60:60:10:5f:c9:c5:6f:3a:d8:45:71:3d:c1:9f:d5:
                    80:d8:97:72:ab:b4:4e:6c:eb:8d:a2:e3:48:70:4e:
                    e0:eb:23:6e:b1:71:1b:fb:e4:1b:1b:74:78:d3:c3:
                    2b:87:bd:a9:34:41:9c:e1:7a:8e:97:fa:e2:96:df:
                    c2:c3:36:f8:7b:3d:85:f7:95:01:71:e2:e9:95:27:
                    83:2e:d8:b2:65:48:e1:6c:ad:00:d9:76:95:cd:59:
                    97:4a:23:30:b9:16:f9:69:db:76:d0:4b:ef:37:62:
                    51:50:e1:b8:1f:69:5b:07:9a:77:82:11:f2:53:78:
                    13:21:35:cc:40:81:f6:79:83:f5:ca:0a:69:f1:61:
                    07:2a:0e:10:32:5a:ad:26:7c:d1:d1:79:24:a4:b7:
                    2e:51:32:05:a4:9e:2a:33:eb:57:24:b8:b5:a4:4c:
                    63:45:e3:22:d9:a3:dc:7c:51:68:0e:24:95:3b:04:
                    b3:0c:9f:44:2e:20:22:08:45:92:d9:ca:5c:59:8f:
                    9f:17:25:9d:c2:fc:13:72:65:f5:23:16:ba:4d:f2:
                    0f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E3:DC:84:97:4E:BA:97:67:A7:A3:D5:8E:57:AF:23:87:F4:2D:FC
            X509v3 Authority Key Identifier:
                keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:25:c8:a2:98:40:74:09:e7:1c:b7:c9:98:99:f9:69:7d:11:
         72:d5:66:61:69:88:03:30:1f:1a:fe:4c:69:4b:bd:d8:63:af:
         75:22:62:b0:65:21:97:2a:3a:3e:5b:db:c6:4c:9f:e0:29:dd:
         af:c7:1b:7f:34:65:42:fc:27:8d:7f:cb:85:25:23:f9:01:7d:
         e6:f4:0f:34:fd:b7:0c:fa:d8:ac:01:4b:b7:07:bf:d7:43:ac:
         b5:ee:84:ff:d5:51:2e:50:a4:f4:2d:36:eb:ae:5f:c0:33:37:
         02:fd:6d:28:5f:2e:20:92:96:8e:05:30:33:60:24:af:31:de:
         56:01:b6:6f:85:fa:65:97:74:65:e9:16:d7:8c:d7:90:d4:cd:
         f5:47:0b:08:c9:86:77:bd:cb:ad:9a:13:2f:63:f9:a2:53:30:
         d9:fd:17:d5:f5:1f:b1:39:b7:cf:88:70:bb:d1:2d:d5:67:46:
         47:c4:56:d1:ec:00:c6:1e:f4:0f:21:36:7e:6a:2f:94:dd:3e:
         34:ef:52:5a:12:72:13:11:41:5e:c0:e5:f3:14:da:91:f8:9b:
         0d:64:1e:33:67:40:e4:4e:0b:2c:5e:ed:0e:b8:c4:ad:5e:12:
         bd:1b:53:52:7a:e3:32:68:d6:3c:69:c1:87:c7:98:e4:01:3c:
         38:e4:cc:27
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICArIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjhDRkVBUjExMC8GA1UEBRMoRERDQjRDOUM1QkEyMkQ4ODlGMjUwOTJEQzVDRUM5
MjVCQTg0M0I3ODAeFw0yNTA2MDkwMzU3MTVaFw0yNTA2MTEwMzU3MTVaMBgxFjAU
BgNVBAMTDTY4NDY1YjljLTU1MTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEeRovrtJwRmeznzGPYf4Mtdo5pxs5SYauev4Z7tA8RUVrmLn0lBdbuG+V
zmBgEF/JxW862EVxPcGf1YDYl3KrtE5s642i40hwTuDrI26xcRv75BsbdHjTwyuH
vak0QZzheo6X+uKW38LDNvh7PYX3lQFx4umVJ4Mu2LJlSOFsrQDZdpXNWZdKIzC5
Fvlp23bQS+83YlFQ4bgfaVsHmneCEfJTeBMhNcxAgfZ5g/XKCmnxYQcqDhAyWq0m
fNHReSSkty5RMgWknioz61ckuLWkTGNF4yLZo9x8UWgOJJU7BLMMn0QuICIIRZLZ
ylxZj58XJZ3C/BNyZfUjFrpN8g8RAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUXOPc
hJdOupdnp6PVjlevI4f0LfwwHwYDVR0jBBgwFoAU3ctMnFuiLYifJQktxc7JJbqE
O3gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4Q0ZFL0E1RjI3MUVBMzc1NzExRUVBQUFBNTMxODRBRDlFNkZDLzNjdE1u
RnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzNjdE1uRnVpTFlpZkpRa3R4YzdKSmJxRU8zZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NjhDRkUvQTVGMjcxRUEzNzU3MTFFRUFBQUE1MzE4NEFEOUU2
RkMvM2N0TW5GdWlMWWlmSlFrdHhjN0pKYnFFTzNnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCdJciimEB0Cecct8mYmflpfRFy1WZhaYgD
MB8a/kxpS73YY691ImKwZSGXKjo+W9vGTJ/gKd2vxxt/NGVC/CeNf8uFJSP5AX3m
9A80/bcM+tisAUu3B7/XQ6y17oT/1VEuUKT0LTbrrl/AMzcC/W0oXy4gkpaOBTAz
YCSvMd5WAbZvhfpll3Rl6RbXjNeQ1M31RwsIyYZ3vcutmhMvY/miUzDZ/RfV9R+x
ObfPiHC70S3VZ0ZHxFbR7ADGHvQPITZ+ai+U3T4071JaEnITEUFewOXzFNqR+JsN
ZB4zZ0DkTgssXu0OuMStXhK9G1NSeuMyaNY8acGHx5jkATw45Mwn
-----END CERTIFICATE-----
Generated at Mon Jun 9 08:52:19 2025 by rpki-client