Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
File:                     fitobmq6qC0Tpu6fS-fmmmuN_3k.mft (raw, json)
Hash identifier:          qHbRl0nlwM3beSkHhEjwml5u4IfIqe8TwsJGEo09vEY=
Subject key identifier:   B2:85:B1:1C:BC:08:5E:FE:5D:FB:E7:B2:0F:8B:EA:1B:A9:16:EF:5F
Authority key identifier: 7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79
Certificate issuer:       /CN=F366AE59AR/serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
Certificate serial:       01B8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
Manifest number:          01B7
Signing time:             Sat 07 Jun 2025 04:29:21 +0000
Manifest this update:     Sat 07 Jun 2025 04:29:21 +0000
Manifest next update:     Mon 09 Jun 2025 04:29:21 +0000
Files and hashes:         1: fitobmq6qC0Tpu6fS-fmmmuN_3k.crl (hash: MKKxQaYZr8lLENKluBFm95x2bnEX295mTa0B3aU5VIU=)
                          2: D55071E2F57711EE9C79B75F775412E6.roa (hash: JwIZwppDkh7nSLuQ5FmIaDKSeTXhtwFxqvQi4jhkWJQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                          rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366AE59AR, serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
        Validity
            Not Before: Jun  7 04:29:21 2025 GMT
            Not After : Jun  9 04:29:21 2025 GMT
        Subject: CN=6843c021-f822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:36:a6:d5:0c:50:cb:a2:aa:47:09:97:ea:fb:
                    3b:0f:df:6a:f7:70:05:6d:dd:f0:fa:c8:a0:2b:69:
                    fe:4d:b4:2d:d1:d8:40:22:01:dd:20:53:ae:d2:ff:
                    6b:76:3f:d6:47:e0:b9:b5:2b:67:33:6e:c5:61:68:
                    02:5d:b0:99:02:21:db:a1:d5:6e:cc:dc:0c:b6:99:
                    f4:5b:29:8a:1b:5f:c2:34:21:f9:f3:e2:c8:13:22:
                    e7:5c:08:cf:63:02:40:3a:f7:bd:1e:75:c4:bb:68:
                    df:1b:12:53:aa:5e:c2:22:0a:be:71:1c:25:69:15:
                    fe:8e:84:c1:c4:c6:ec:cd:51:92:b9:ba:f8:b3:bc:
                    25:fc:f8:ca:62:12:55:36:d3:9e:b6:a5:f9:4a:64:
                    53:a8:9d:2e:22:1f:7f:66:d0:1b:79:d7:03:9d:a2:
                    cc:7d:03:9a:14:18:a3:6e:08:a7:41:15:6e:06:4e:
                    09:00:2e:bc:c3:ec:e6:33:29:c5:81:50:17:8e:69:
                    e0:f9:29:59:8d:de:25:16:ba:cb:aa:de:29:65:4e:
                    15:a3:5f:62:1e:06:2e:f2:0b:45:35:42:fc:60:c5:
                    a3:ca:1f:69:be:9b:4b:95:37:a0:fe:24:fd:b5:76:
                    f1:a1:03:08:9f:b0:c5:06:c8:45:b8:e9:54:65:b7:
                    01:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:85:B1:1C:BC:08:5E:FE:5D:FB:E7:B2:0F:8B:EA:1B:A9:16:EF:5F
            X509v3 Authority Key Identifier:
                keyid:7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:43:e8:3b:83:2d:c7:06:53:03:79:c0:16:9b:96:bf:6f:35:
         16:27:93:97:a7:7a:53:6f:1d:20:fb:26:14:32:62:94:ea:dc:
         34:6a:ad:bb:ce:63:e3:8d:88:33:d5:e9:11:cd:84:0b:2d:5b:
         a7:fe:eb:13:e7:f8:50:08:d6:87:31:7b:a4:2d:88:35:b4:28:
         cf:e5:23:5c:c1:ba:d8:8d:f1:d0:5c:97:96:38:85:88:27:8b:
         f7:29:dd:d0:9b:63:23:ce:3f:1f:8a:81:5c:a4:96:f6:f5:71:
         29:aa:f7:78:23:eb:3d:a4:aa:9f:a3:fa:5c:6c:7a:10:26:e2:
         38:5e:8f:1f:45:ec:4f:9a:14:1f:23:ac:2c:63:4e:71:6c:01:
         dd:5e:a8:db:d0:f3:e6:91:85:25:a5:0f:2a:a3:83:b3:17:d2:
         76:45:dc:f3:09:86:49:90:ed:48:7e:d0:7c:1d:76:2c:0f:58:
         fb:38:5c:f9:a5:77:df:04:71:75:f9:79:c5:0b:a2:df:a8:0f:
         5a:20:71:33:66:e3:b8:20:1d:2b:2b:e8:fc:b3:c8:ee:d7:86:
         79:68:ef:86:ba:9b:07:c7:74:89:68:ce:b5:df:ce:87:52:c1:
         72:dd:6b:48:b0:4d:9f:19:85:90:cd:93:63:a6:35:aa:87:5b:
         38:0a:8f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:33 2025 by rpki-client