Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
File:                     yD3GjOK-QyU6qlUariL5Wh8drSs.mft (raw, json)
Hash identifier:          nccwpOxe/gjuRerJo4V90ZxQsnfhS9ZvhRK7nEqreRA=
Subject key identifier:   0B:AA:AB:BD:1E:DE:06:81:0F:E3:C1:6E:EB:2B:75:45:12:CE:A4:0E
Authority key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
Certificate issuer:       /CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Certificate serial:       043D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
Manifest number:          043B
Signing time:             Fri 13 Jun 2025 03:08:15 +0000
Manifest this update:     Fri 13 Jun 2025 03:08:14 +0000
Manifest next update:     Sun 15 Jun 2025 03:08:14 +0000
Files and hashes:         1: yD3GjOK-QyU6qlUariL5Wh8drSs.crl (hash: Afqq2sXkxDo0h+JrnP0EFPHGMttgvH5iWiQXhyYktwU=)
                          2: B1BFBFEA278711ED8808E3CDF1222468.roa (hash: Assvrj8OD6s30X7gj/5howMI7VisH2Gq7WxHn9j6+kQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                          rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 15 Jun 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1085 (0x43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671DBDAR, serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
        Validity
            Not Before: Jun 13 03:08:14 2025 GMT
            Not After : Jun 15 03:08:14 2025 GMT
        Subject: CN=684b961e-8ba4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:91:52:b4:44:05:5c:73:30:68:da:c6:32:62:
                    80:3f:0c:69:d8:92:03:68:35:ae:1f:54:ae:8f:7b:
                    75:ab:a7:79:df:ae:de:f9:24:d0:0c:c9:82:ff:ab:
                    ba:d6:d9:bb:25:7d:9b:a7:88:6d:46:bb:63:7e:b0:
                    f4:92:40:48:bd:d1:45:cc:5c:17:04:6d:2b:e0:95:
                    56:0f:3e:a0:e4:48:a8:5c:85:93:17:49:ec:6a:c1:
                    55:84:81:b4:b8:ef:8a:66:88:17:2c:83:52:47:14:
                    a3:97:6d:65:ff:0a:66:d0:55:52:34:3b:c8:c4:dc:
                    27:d0:5a:36:18:7b:cd:ff:0c:af:06:14:ec:66:4d:
                    86:0a:27:e9:d1:b4:e9:6f:55:41:08:e6:b8:9f:3d:
                    84:65:a8:87:9f:e8:7b:83:25:22:cb:6d:c7:a7:03:
                    33:c3:72:1c:e5:31:40:6b:89:c9:0f:f1:8a:08:86:
                    bf:dc:4b:66:19:09:9b:43:e3:fd:38:1b:66:2a:3a:
                    2e:d3:3b:a4:c6:97:c3:90:9d:46:ad:da:a3:b3:8e:
                    35:51:d3:42:6f:24:77:71:2a:06:a5:d1:20:a3:d1:
                    6e:43:01:9e:41:82:d7:fd:0b:76:9a:3c:62:f4:ed:
                    c8:73:2c:40:ca:50:1b:5f:54:4b:a4:a9:2e:40:9a:
                    67:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:AA:AB:BD:1E:DE:06:81:0F:E3:C1:6E:EB:2B:75:45:12:CE:A4:0E
            X509v3 Authority Key Identifier:
                keyid:C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:95:06:27:9b:70:aa:b6:18:4f:d3:e3:23:10:52:dc:dc:2c:
         c4:dd:3c:8b:b0:17:d6:0d:81:d4:6a:7f:ab:29:5b:16:c4:93:
         01:1a:e1:b7:1d:af:b9:a3:85:ce:20:95:a3:87:b4:a4:fe:b1:
         b7:7c:9f:ca:03:41:7c:fe:97:e9:da:b0:63:6c:5c:d2:b5:54:
         34:2b:42:6f:d2:0c:4b:66:c4:eb:e2:02:2c:9c:0e:cf:b3:10:
         6c:9c:02:6c:b0:a0:51:1a:62:14:ab:ec:4f:da:ba:2e:31:46:
         a2:d1:7a:94:85:35:56:82:7d:90:9d:2d:87:f4:e1:2c:9f:fd:
         46:b1:cd:4c:74:0c:b4:32:8e:5e:bb:8b:ae:80:bd:6c:13:14:
         20:c8:31:3b:98:aa:3c:c3:63:52:fd:f0:1e:fc:6e:50:6d:e3:
         70:0b:c4:cc:1f:c5:81:7c:86:4c:61:78:b1:84:fd:a2:82:28:
         af:6a:b7:28:83:eb:f1:b6:15:4d:8c:4d:4c:02:6f:2f:38:4e:
         22:1b:13:e4:e5:0e:a4:7c:ff:31:cf:c0:bc:62:9e:ff:da:e4:
         49:82:f0:fa:5b:3b:25:10:3f:f4:2c:cf:e5:c6:e7:bb:a0:29:
         77:c4:7b:43:d0:be:65:7d:8a:e2:f3:c5:8e:08:e9:5e:bc:06:
         a7:ad:fe:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 12:43:24 2025 by rpki-client