Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
File:                     f570NrMeWSCJBjwebEN80sP-oEs.mft (raw, json)
Hash identifier:          I+ylaLF8JxRszvQURjqR7p2nn9qaNmQTyBzCHT/laAQ=
Subject key identifier:   35:4E:9B:2C:8A:E3:67:AF:ED:2F:D0:4E:C0:18:8B:97:6C:68:44:F6
Authority key identifier: 7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B
Certificate issuer:       /CN=F366DC11AR/serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
Certificate serial:       07A6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
Manifest number:          07A2
Signing time:             Thu 31 Jul 2025 01:57:12 +0000
Manifest this update:     Thu 31 Jul 2025 01:57:12 +0000
Manifest next update:     Sat 02 Aug 2025 01:57:12 +0000
Files and hashes:         1: f570NrMeWSCJBjwebEN80sP-oEs.crl (hash: iuyVSME9F4xcAS8iI+t1Zq+9g9/sRRYmgi10/CAcLDA=)
                          2: AC4E8162494411EC8CA9436BD8A014CE.roa (hash: b3n4slgOS/MlasvqZ+C1CqSsBm6+jMSAotZwP76nH4w=)
                          3: 73CF35D0B0D611ECA0847BBD5A40D577.roa (hash: 5YOdoaN/nTrUVBHfwF7bO4BngZbRv1YMgLNCZWSSDi0=)
                          4: 1EB2FC3C808E11EF9FE834B8762E951A.roa (hash: 8WICMpU1EnHwLaB230BzQWko4F3WLir8PQtyYVCg1ig=)
                          5: F71135A8967811EA89ED085BF8AEA228.roa (hash: mQ+To7RHNAESk5YJPSceRlTNZT8t40xisQ1Ad1mdyds=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                          rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1958 (0x7a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DC11AR, serialNumber=7F9EF436B31E592089063C1E6C437CD2C3FEA04B
        Validity
            Not Before: Jul 31 01:57:12 2025 GMT
            Not After : Aug  2 01:57:12 2025 GMT
        Subject: CN=688acd78-9809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:e3:45:22:ed:be:e6:09:2b:2e:91:67:43:83:
                    6f:81:d7:4e:64:1b:93:49:c7:66:93:ca:bc:92:d8:
                    1b:1c:04:f2:1f:f3:a3:55:eb:20:38:f9:68:d5:c7:
                    12:53:66:c9:92:25:04:e4:ef:90:ba:5d:03:61:73:
                    38:23:48:0d:2f:ff:a8:11:d7:a2:74:c0:82:dd:b3:
                    3b:cb:73:4f:7a:3c:34:b6:6f:1c:5b:03:41:4f:29:
                    e0:ec:d6:22:40:bf:c6:7c:4e:04:1a:04:fe:a7:49:
                    cd:06:17:47:94:65:36:8d:41:9e:1d:db:fd:7b:a5:
                    98:8c:9a:f4:a4:3e:0b:20:2d:20:0d:83:9e:9c:18:
                    aa:b2:c9:a6:2f:18:5b:89:b2:5f:20:b4:26:a6:cf:
                    b2:3d:0b:82:7e:a9:a9:1e:ac:2e:03:b9:a8:98:10:
                    05:49:8e:25:1d:88:81:48:c8:d6:3f:18:25:cf:cd:
                    20:f9:67:6b:98:df:99:6d:cd:56:04:2a:91:8c:07:
                    3c:0f:ba:bd:e1:08:4c:9e:b1:32:d4:47:09:fc:23:
                    20:3b:44:f5:35:2f:de:36:b1:84:e2:37:71:be:00:
                    e9:4a:30:ff:60:82:5d:81:fd:dc:d3:a2:6e:9a:11:
                    28:4c:8a:45:b1:fb:df:77:12:3c:89:65:b9:75:f3:
                    d7:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4E:9B:2C:8A:E3:67:AF:ED:2F:D0:4E:C0:18:8B:97:6C:68:44:F6
            X509v3 Authority Key Identifier:
                keyid:7F:9E:F4:36:B3:1E:59:20:89:06:3C:1E:6C:43:7C:D2:C3:FE:A0:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/f570NrMeWSCJBjwebEN80sP-oEs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/995946BC967811EA8799955AF8AEA228/f570NrMeWSCJBjwebEN80sP-oEs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:8d:f1:1f:c1:f2:f9:ae:85:aa:05:69:56:75:cb:f6:78:3b:
         86:11:56:7c:a5:3e:09:f2:f0:ab:2b:e0:ad:37:95:6d:6c:1c:
         51:b0:f1:fa:8a:89:72:4f:69:e8:f0:4f:f0:dd:db:51:7c:84:
         3d:ab:f9:5c:7b:24:e9:2e:33:6b:a1:d4:ca:07:4d:f9:d0:98:
         91:63:38:bb:59:76:4f:d8:00:26:5e:28:f1:3b:40:5d:bb:13:
         66:6a:e4:5b:f2:d3:93:3d:31:a6:07:60:47:01:4c:78:0a:82:
         32:1e:df:7a:c8:d1:cf:44:51:cc:ed:a2:e1:ec:06:b6:d0:0f:
         e6:35:2c:97:dc:e0:29:1f:79:d8:df:f3:2d:32:50:6e:40:88:
         7e:51:c1:0f:6b:15:9e:a6:7f:f2:34:e1:5b:14:94:90:ce:3b:
         ab:41:35:fa:8a:56:7a:db:1c:d4:5f:79:b4:b1:f3:19:09:db:
         e8:7e:70:d6:fe:0c:02:bd:06:55:13:05:81:a4:4a:51:84:af:
         73:84:bf:6a:dd:42:d0:0d:63:0c:50:3f:f1:b8:af:74:16:d2:
         14:4f:bf:d8:27:dd:62:1d:07:d9:dd:46:08:44:05:b4:c9:d8:
         d6:69:e3:3d:69:46:cb:32:d9:9c:54:e3:37:10:99:82:50:32:
         11:f3:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 13:26:30 2025 by rpki-client