Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
File:                     Abb7gSoUrvQLoDsWWv79W3SkZpY.mft (raw, json)
Hash identifier:          232R45bcmlCnys/GEzZxbrILiXMdgmevf7GLkhKjZzs=
Subject key identifier:   71:B6:55:4D:30:B6:6F:E8:65:16:5E:8D:AB:AE:95:0F:07:94:43:0D
Authority key identifier: 01:B6:FB:81:2A:14:AE:F4:0B:A0:3B:16:5A:FE:FD:5B:74:A4:66:96
Certificate issuer:       /CN=F3674008AR/serialNumber=01B6FB812A14AEF40BA03B165AFEFD5B74A46696
Certificate serial:       026E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Abb7gSoUrvQLoDsWWv79W3SkZpY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
Manifest number:          026D
Signing time:             Sat 19 Apr 2025 03:59:22 +0000
Manifest this update:     Sat 19 Apr 2025 03:59:21 +0000
Manifest next update:     Mon 21 Apr 2025 03:59:21 +0000
Files and hashes:         1: Abb7gSoUrvQLoDsWWv79W3SkZpY.crl (hash: LfZ5ruBAEIeaok+DiZluhT8/QeYvct+G1b46AZ1YGi4=)
                          2: 61E8A95475A111EFAC7BA279762E951A.roa (hash: iAiWDX2k6dKqGfuzfdFuo/QfCsfKMTY5hEty8a1QfDk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
                          rsync://rpki.afrinic.net/repository/arin/Abb7gSoUrvQLoDsWWv79W3SkZpY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 21 Apr 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674008AR, serialNumber=01B6FB812A14AEF40BA03B165AFEFD5B74A46696
        Validity
            Not Before: Apr 19 03:59:21 2025 GMT
            Not After : Apr 21 03:59:21 2025 GMT
        Subject: CN=68031f9a-2480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ea:1f:9c:61:c6:23:1f:0c:ab:1e:ff:5d:40:
                    83:f5:13:10:4e:69:e0:7a:62:37:df:e3:cb:4e:cd:
                    26:ae:d3:3a:89:11:24:e0:0e:62:0c:38:cb:a9:64:
                    90:14:42:bd:c3:da:d8:59:c2:d8:87:d5:78:65:74:
                    d4:d7:e9:ca:f5:1a:29:08:7c:98:cf:e6:b6:e0:93:
                    8f:5a:10:31:3e:52:ae:6d:bc:b3:ff:fe:a9:9f:a5:
                    c4:4e:a7:be:01:17:9f:6e:82:ed:89:ed:d4:a6:5c:
                    90:89:0e:1b:c6:b4:4d:08:ea:e3:9c:4a:9c:ec:93:
                    4a:4e:8f:f9:56:ee:0e:07:34:53:05:e8:f5:eb:bc:
                    7b:c4:a8:88:48:94:72:e3:71:c5:f6:62:cb:92:03:
                    5a:ad:4e:38:c3:4a:ce:fc:2f:bc:af:19:64:a1:d1:
                    6d:7d:74:80:57:4b:20:10:b2:ba:41:4e:ad:a0:a3:
                    d3:72:d5:0f:d3:51:3f:05:ef:ce:eb:10:d7:d8:a5:
                    c1:62:50:ae:c6:15:f1:96:91:1f:aa:80:61:90:1a:
                    92:66:3c:75:0d:d4:7a:bf:63:ab:df:56:54:94:f2:
                    52:cb:6c:98:f1:c6:8d:96:5e:b9:e8:a2:a3:8b:49:
                    f5:19:cd:c9:9f:ba:52:ca:18:b6:93:97:e6:9e:2a:
                    f4:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B6:55:4D:30:B6:6F:E8:65:16:5E:8D:AB:AE:95:0F:07:94:43:0D
            X509v3 Authority Key Identifier:
                keyid:01:B6:FB:81:2A:14:AE:F4:0B:A0:3B:16:5A:FE:FD:5B:74:A4:66:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Abb7gSoUrvQLoDsWWv79W3SkZpY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:e4:e7:b6:7d:57:6c:a2:ba:cc:4d:b5:08:88:c3:c2:d1:a4:
         ed:1d:57:95:ca:57:42:b0:2f:15:01:22:93:c0:a1:ec:df:ae:
         c6:12:b1:b0:31:5e:14:84:c1:54:26:72:1a:33:5c:76:6e:44:
         bd:67:a8:16:62:ca:57:0e:e9:87:23:c1:39:68:f0:da:80:42:
         12:db:61:80:92:38:85:d4:d2:8d:37:b0:e2:dd:38:2e:b2:0d:
         5b:ad:b9:7e:60:a8:c0:1e:d9:a6:94:bd:ff:f3:0f:2f:f1:9e:
         33:82:0d:30:1e:df:f5:40:3f:70:9c:3b:14:d9:e2:b1:51:4c:
         22:de:14:24:04:d1:dd:19:2c:0e:12:88:f7:49:1c:ab:22:e1:
         e9:98:53:85:35:b7:bc:ce:7e:e8:9d:ed:67:d7:16:d2:b0:9b:
         b2:84:09:e6:7d:d6:95:43:c3:3c:c4:a6:4b:f1:ba:63:b2:4e:
         d0:87:ad:d2:5d:d1:91:ba:39:01:49:38:1c:27:59:75:4a:db:
         e1:db:32:6b:7d:79:64:48:c2:01:cb:5c:13:da:ad:c3:ec:21:
         95:bf:f3:89:b4:dc:83:11:e3:df:59:75:db:02:0a:26:9e:9c:
         19:a5:fd:6e:c9:24:df:a3:fc:e0:80:9a:e3:8a:7a:67:45:b0:
         bc:22:14:43
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAm4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzQwMDhBUjExMC8GA1UEBRMoMDFCNkZCODEyQTE0QUVGNDBCQTAzQjE2NUFGRUZE
NUI3NEE0NjY5NjAeFw0yNTA0MTkwMzU5MjFaFw0yNTA0MjEwMzU5MjFaMBgxFjAU
BgNVBAMTDTY4MDMxZjlhLTI0ODAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCj6h+cYcYjHwyrHv9dQIP1ExBOaeB6Yjff48tOzSau0zqJESTgDmIMOMup
ZJAUQr3D2thZwtiH1XhldNTX6cr1GikIfJjP5rbgk49aEDE+Uq5tvLP//qmfpcRO
p74BF59ugu2J7dSmXJCJDhvGtE0I6uOcSpzsk0pOj/lW7g4HNFMF6PXrvHvEqIhI
lHLjccX2YsuSA1qtTjjDSs78L7yvGWSh0W19dIBXSyAQsrpBTq2go9Ny1Q/TUT8F
787rENfYpcFiUK7GFfGWkR+qgGGQGpJmPHUN1Hq/Y6vfVlSU8lLLbJjxxo2WXrno
oqOLSfUZzcmfulLKGLaTl+aeKvQvAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUcbZV
TTC2b+hlFl6Nq66VDweUQw0wHwYDVR0jBBgwFoAUAbb7gSoUrvQLoDsWWv79W3Sk
ZpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc0MDA4LzVBQjc2OUM0NDczRDExRUU5OEIzNzg2NjRBRDlFNkZDL0FiYjdn
U29VcnZRTG9Ec1dXdjc5VzNTa1pwWS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0FiYjdnU29VcnZRTG9Ec1dXdjc5VzNTa1pwWS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NzQwMDgvNUFCNzY5QzQ0NzNEMTFFRTk4QjM3ODY2NEFEOUU2
RkMvQWJiN2dTb1VydlFMb0RzV1d2NzlXM1NrWnBZLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCv5Oe2fVdsorrMTbUIiMPC0aTtHVeVyldC
sC8VASKTwKHs367GErGwMV4UhMFUJnIaM1x2bkS9Z6gWYspXDumHI8E5aPDagEIS
22GAkjiF1NKNN7Di3Tgusg1brbl+YKjAHtmmlL3/8w8v8Z4zgg0wHt/1QD9wnDsU
2eKxUUwi3hQkBNHdGSwOEoj3SRyrIuHpmFOFNbe8zn7one1n1xbSsJuyhAnmfdaV
Q8M8xKZL8bpjsk7Qh63SXdGRujkBSTgcJ1l1Stvh2zJrfXlkSMIBy1wT2q3D7CGV
v/OJtNyDEePfWXXbAgomnpwZpf1uySTfo/zggJrjinpnRbC8IhRD
-----END CERTIFICATE-----
Generated at Sat Apr 19 12:47:14 2025 by rpki-client