Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
File:                     yD3GjOK-QyU6qlUariL5Wh8drSs.mft (raw, json)
Hash identifier:          f5J+dpq/J6LkMQuRVcBXEiY1S2RxpKQdPCss28sg+Es=
Subject key identifier:   17:1F:1B:12:3B:0A:0C:C1:FE:F4:45:C0:6F:46:66:04:DC:84:75:BE
Authority key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
Certificate issuer:       /CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Certificate serial:       03E0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
Manifest number:          03DE
Signing time:             Thu 13 Mar 2025 02:09:42 +0000
Manifest this update:     Thu 13 Mar 2025 02:09:41 +0000
Manifest next update:     Sat 15 Mar 2025 02:09:41 +0000
Files and hashes:         1: yD3GjOK-QyU6qlUariL5Wh8drSs.crl (hash: IhctHaqeqzC7hjnD2F6WtQrsNSchm6C1TpGAZq2X6vU=)
                          2: B1BFBFEA278711ED8808E3CDF1222468.roa (hash: Assvrj8OD6s30X7gj/5howMI7VisH2Gq7WxHn9j6+kQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                          rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 15 Mar 2025 00:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 992 (0x3e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671DBDAR
        Validity
            Not Before: Mar 13 02:09:41 2025 GMT
            Not After : Mar 15 02:09:41 2025 GMT
        Subject: CN=67d23e65-f7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:c0:34:71:3d:ef:02:62:7c:95:f2:e6:00:
                    6d:ad:6a:39:48:d7:0b:36:50:84:0b:9e:eb:c4:02:
                    0b:a5:06:99:ef:ca:9e:97:8e:e3:62:15:14:01:c7:
                    e1:e3:df:34:66:52:f1:a1:62:1f:d2:c3:0e:d0:dd:
                    c5:9c:dd:9f:79:b8:93:ae:45:75:08:b5:89:66:7f:
                    92:fd:bc:86:09:d2:fc:ff:09:60:58:84:a7:14:97:
                    64:79:a3:c8:94:62:d2:03:e5:8c:36:b1:b2:68:16:
                    ad:80:4c:7b:bc:c6:c4:f4:4d:6b:66:8d:4b:0f:b3:
                    00:0c:c2:88:49:7a:4f:6f:59:8f:32:3f:fd:ae:a8:
                    2c:dd:29:56:c1:a1:89:d6:43:3b:bf:89:11:cf:b9:
                    ee:fd:87:56:ba:b8:ab:5f:7c:29:49:6d:42:8b:88:
                    c0:ff:99:d6:e2:a3:05:12:a4:26:3e:45:50:47:f8:
                    bf:3f:c7:5b:4f:5a:79:47:df:99:0a:5d:05:a7:b7:
                    85:a2:60:9d:3a:fc:d8:bb:3d:fa:68:1d:3d:8c:00:
                    21:1c:57:9b:6b:32:38:f7:a4:71:94:55:e7:dc:60:
                    71:1e:1f:a0:d2:5c:38:2b:8f:49:0f:35:c2:d4:32:
                    34:1c:b1:da:9f:84:d5:a6:d1:68:4a:e4:d1:26:7e:
                    41:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:1F:1B:12:3B:0A:0C:C1:FE:F4:45:C0:6F:46:66:04:DC:84:75:BE
            X509v3 Authority Key Identifier:
                keyid:C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:03:84:88:14:5b:e2:34:63:b8:01:bf:34:10:83:13:c5:a6:
         09:44:d7:6e:63:30:14:fd:6b:6a:39:a9:77:a7:2e:a2:68:af:
         24:bc:0c:97:b9:86:47:77:b9:6a:62:95:b2:62:96:05:cb:b7:
         0a:65:8c:b5:a0:d5:f7:01:ef:aa:d4:a6:1e:91:23:b4:f2:53:
         a1:8d:76:1c:a2:85:b3:ee:f5:01:5d:83:a3:29:b9:87:c3:74:
         6c:c6:9b:2c:29:01:73:d9:56:87:9a:be:ab:46:47:f8:8a:bc:
         b4:4a:9a:91:ef:7c:ea:44:48:99:18:ab:7d:46:93:8a:e5:32:
         f8:20:05:fc:34:a2:44:c7:ef:c0:83:23:47:90:a4:5d:f4:f7:
         55:6a:ff:86:2a:73:cb:10:18:95:1b:b4:dc:7b:d3:71:86:7d:
         9a:bb:e2:4f:ac:8e:7f:ea:dc:3a:f1:88:9e:cf:ce:88:01:5a:
         0c:02:82:a3:96:a5:c3:ef:3d:5d:a1:0c:33:74:de:d1:e6:0f:
         d7:f8:84:f2:c2:7f:d2:92:b6:8c:ff:5c:2f:b9:96:57:0a:b7:
         96:36:c0:99:d0:4d:98:2e:c5:14:a6:6c:1c:b7:eb:8d:84:f6:
         57:e3:3a:2f:65:9f:81:46:7d:da:11:0c:05:4d:c1:a4:77:bb:
         1c:d5:c9:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:53:13 2025 by rpki-client