Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
File:                     fitobmq6qC0Tpu6fS-fmmmuN_3k.mft (raw, json)
Hash identifier:          2HPKjVQSFSbjOTextOf4S0z0VsJG1He68yeesFj8HwY=
Subject key identifier:   77:BB:F3:A7:1C:03:6C:7F:45:0B:35:33:2A:42:F1:B4:FD:82:05:4F
Authority key identifier: 7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79
Certificate issuer:       /CN=F366AE59AR/serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
Certificate serial:       01EF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
Manifest number:          01EE
Signing time:             Thu 31 Jul 2025 04:35:04 +0000
Manifest this update:     Thu 31 Jul 2025 04:35:03 +0000
Manifest next update:     Sat 02 Aug 2025 04:35:03 +0000
Files and hashes:         1: fitobmq6qC0Tpu6fS-fmmmuN_3k.crl (hash: HFEPteNhe5eMeePQjwajg0feym6Xsl7CDuVvW7NphGo=)
                          2: D55071E2F57711EE9C79B75F775412E6.roa (hash: JwIZwppDkh7nSLuQ5FmIaDKSeTXhtwFxqvQi4jhkWJQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                          rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 495 (0x1ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366AE59AR, serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
        Validity
            Not Before: Jul 31 04:35:03 2025 GMT
            Not After : Aug  2 04:35:03 2025 GMT
        Subject: CN=688af278-f7a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:f8:d2:32:67:1c:d3:52:6b:9e:fa:27:c9:
                    94:93:f4:cd:d6:b5:89:76:b6:18:6a:cc:6b:65:ae:
                    6d:b3:90:f1:3d:b7:6f:f8:0f:bc:e6:94:bd:3a:34:
                    4b:23:e9:64:f6:1b:07:c0:92:56:8b:92:69:2d:69:
                    5c:87:16:93:a5:0e:55:18:13:62:5d:29:43:31:3e:
                    1e:62:75:76:85:b4:9e:89:12:08:8b:b5:e6:4f:57:
                    d7:3f:20:53:1c:9e:b0:18:2a:3e:f7:e3:cb:4c:7b:
                    83:c8:7d:49:ff:f4:19:b2:60:f6:cc:10:49:7a:6b:
                    27:ae:55:ac:c2:bf:95:79:68:53:44:d3:a3:e0:9d:
                    9d:d9:9e:fd:95:52:bd:ca:85:62:5f:96:75:05:ed:
                    ec:84:9e:4a:68:43:b5:4a:d8:23:2e:d8:62:6e:d7:
                    54:a7:f7:a1:22:aa:dc:a0:a2:ec:fb:ff:ae:3d:62:
                    ba:d5:52:6c:61:b1:74:5d:bd:da:69:4f:ec:15:58:
                    d2:c6:26:4b:4a:1d:36:62:ab:7c:12:e9:03:1a:5f:
                    24:93:1b:3b:b3:9f:c4:f5:09:eb:03:36:40:d7:36:
                    0e:45:27:52:55:b2:f4:a6:f9:7a:4d:f0:99:30:ae:
                    d3:05:fe:a1:d2:2b:76:91:15:31:0d:2c:fe:b1:b9:
                    61:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:BB:F3:A7:1C:03:6C:7F:45:0B:35:33:2A:42:F1:B4:FD:82:05:4F
            X509v3 Authority Key Identifier:
                keyid:7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:b0:43:83:94:67:b0:48:ed:8a:3c:27:fd:8a:52:9f:e5:f2:
         87:cf:a9:28:0b:47:c9:80:ea:75:9f:2c:e0:d4:4d:98:97:89:
         b2:5e:2e:3f:72:57:5b:19:db:c5:ab:e5:aa:67:b4:33:39:9e:
         8a:27:65:c8:a3:05:84:52:61:0d:91:c6:d2:e3:44:66:aa:bf:
         29:31:f9:f4:57:ed:ed:9d:b8:e3:c6:13:a8:1b:b0:f5:3d:93:
         30:71:5b:7d:82:6d:45:34:bb:3a:a5:c1:35:a1:48:a0:55:59:
         e3:24:b8:ff:4d:1d:c2:3e:59:30:17:fc:45:74:a9:df:9e:c9:
         31:1a:6e:c6:45:58:bc:1a:95:3b:1f:1f:6c:2a:c7:c4:ad:27:
         87:bc:c4:94:be:26:4b:b2:3a:7b:6b:2b:60:3f:d2:b5:8c:7b:
         db:06:24:07:36:01:60:02:fc:02:14:5a:58:0f:21:c0:aa:aa:
         31:79:2e:01:e2:c1:5a:21:82:af:a1:7d:19:b4:43:92:61:c1:
         d2:ad:4c:0d:f8:d5:51:f1:db:43:70:55:84:8f:66:e3:de:9a:
         7e:69:61:e4:58:fe:38:1a:46:3d:36:18:0c:bf:31:f2:13:a6:
         2c:a0:48:09:4b:8a:d5:83:36:20:0f:a7:f4:6d:ef:1e:16:f6:
         49:b1:8b:33
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkFFNTlBUjExMC8GA1UEBRMoN0UyQjY4NkU2QUJBQTgyRDEzQTZFRTlGNEJFN0U2
OUE2QjhERkY3OTAeFw0yNTA3MzEwNDM1MDNaFw0yNTA4MDIwNDM1MDNaMBgxFjAU
BgNVBAMTDTY4OGFmMjc4LWY3YTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHrvjSMmcc01JrnvonyZST9M3WtYl2thhqzGtlrm2zkPE9t2/4D7zmlL06
NEsj6WT2GwfAklaLkmktaVyHFpOlDlUYE2JdKUMxPh5idXaFtJ6JEgiLteZPV9c/
IFMcnrAYKj7348tMe4PIfUn/9BmyYPbMEEl6ayeuVazCv5V5aFNE06PgnZ3Znv2V
Ur3KhWJflnUF7eyEnkpoQ7VK2CMu2GJu11Sn96Eiqtygouz7/649YrrVUmxhsXRd
vdppT+wVWNLGJktKHTZiq3wS6QMaXySTGzuzn8T1CesDNkDXNg5FJ1JVsvSm+XpN
8JkwrtMF/qHSK3aRFTENLP6xuWHTAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUd7vz
pxwDbH9FCzUzKkLxtP2CBU8wHwYDVR0jBBgwFoAUfitobmq6qC0Tpu6fS+fmmmuN
/3kwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZBRTU5L0NGNUUzNkMyRjU3NTExRUVBMDBCQ0Q0Rjc3NTQxMkU2L2ZpdG9i
bXE2cUMwVHB1NmZTLWZtbW11Tl8zay5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2ZpdG9ibXE2cUMwVHB1NmZTLWZtbW11Tl8zay5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NkFFNTkvQ0Y1RTM2QzJGNTc1MTFFRUEwMEJDRDRGNzc1NDEy
RTYvZml0b2JtcTZxQzBUcHU2ZlMtZm1tbXVOXzNrLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDHsEODlGewSO2KPCf9ilKf5fKHz6koC0fJ
gOp1nyzg1E2Yl4myXi4/cldbGdvFq+WqZ7QzOZ6KJ2XIowWEUmENkcbS40Rmqr8p
Mfn0V+3tnbjjxhOoG7D1PZMwcVt9gm1FNLs6pcE1oUigVVnjJLj/TR3CPlkwF/xF
dKnfnskxGm7GRVi8GpU7Hx9sKsfErSeHvMSUviZLsjp7aytgP9K1jHvbBiQHNgFg
AvwCFFpYDyHAqqoxeS4B4sFaIYKvoX0ZtEOSYcHSrUwN+NVR8dtDcFWEj2bj3pp+
aWHkWP44GkY9NhgMvzHyE6YsoEgJS4rVgzYgD6f0be8eFvZJsYsz
-----END CERTIFICATE-----
Generated at Thu Jul 31 12:59:49 2025 by rpki-client