Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
File:                     qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft (raw, json)
Hash identifier:          GcgAJB/RqomjRmZLSv29KEzGL35uUz6ZeqzEOcEEVPo=
Subject key identifier:   D0:06:03:48:97:0E:B8:A8:40:25:14:21:EC:F2:96:3E:7A:79:E4:BF
Authority key identifier: AA:4A:8F:FF:1B:18:06:24:D7:51:00:3D:21:65:AC:AF:AE:90:43:6A
Certificate issuer:       /CN=F3676EF0AR/serialNumber=AA4A8FFF1B180624D751003D2165ACAFAE90436A
Certificate serial:       F0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
Manifest number:          EF
Signing time:             Sun 20 Apr 2025 04:48:46 +0000
Manifest this update:     Sun 20 Apr 2025 04:48:45 +0000
Manifest next update:     Tue 22 Apr 2025 04:48:45 +0000
Files and hashes:         1: qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl (hash: f+25KRxGiMq+Sm6mxrm+8d85b34gFx8q9Wtn/tWdIHM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
                          rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Apr 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 240 (0xf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676EF0AR, serialNumber=AA4A8FFF1B180624D751003D2165ACAFAE90436A
        Validity
            Not Before: Apr 20 04:48:45 2025 GMT
            Not After : Apr 22 04:48:45 2025 GMT
        Subject: CN=68047cae-3959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:b8:e6:09:d4:d7:ce:89:90:4f:7f:f4:57:7f:
                    22:35:7b:fd:36:58:9f:7f:ee:5c:50:b9:32:1c:3d:
                    3b:d1:26:bc:e5:e8:f7:3e:ea:c4:2c:b4:de:05:e7:
                    34:67:a2:9a:43:67:e3:ee:08:2c:26:95:93:84:a3:
                    ce:7f:68:e0:f0:48:cd:64:95:58:7b:d5:97:d9:3e:
                    c1:dc:af:1d:48:71:0a:b9:56:4e:23:c9:a5:cf:a3:
                    fb:5c:f7:a4:d1:47:17:e4:20:60:eb:49:42:66:f2:
                    86:f8:b6:5a:e3:aa:83:31:90:0f:cc:b7:ff:a9:8c:
                    e8:c2:06:8d:ed:b1:31:a5:42:b2:40:4b:ce:9e:d3:
                    e5:74:14:cc:65:9a:a3:61:f3:65:10:b6:8f:a0:a2:
                    fa:4a:78:14:a7:ba:ce:56:3f:4c:68:32:60:17:bb:
                    2e:a0:e7:2f:9a:b8:55:c5:56:4f:10:c6:05:64:ec:
                    96:d8:0a:a7:42:b5:41:89:2e:46:97:0c:a4:58:24:
                    58:b5:b0:e5:c2:f6:c8:b6:65:4d:ac:67:74:ba:55:
                    03:a9:52:0e:b5:04:0c:33:c7:0f:c9:54:06:59:35:
                    be:d9:1e:58:5f:54:d0:df:2b:cf:66:4f:15:60:aa:
                    c6:1f:be:ae:f3:b3:28:55:c6:f8:c8:7e:a9:f1:7f:
                    52:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:06:03:48:97:0E:B8:A8:40:25:14:21:EC:F2:96:3E:7A:79:E4:BF
            X509v3 Authority Key Identifier:
                keyid:AA:4A:8F:FF:1B:18:06:24:D7:51:00:3D:21:65:AC:AF:AE:90:43:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:3b:47:0d:3b:b4:74:34:60:76:84:1f:f8:45:b3:6f:d1:9b:
         30:d7:51:bd:51:57:22:1c:c5:2d:a2:85:19:b3:e5:0f:df:8a:
         ef:02:eb:ab:a1:bc:de:6b:99:47:58:9c:66:6c:d2:37:c4:60:
         f9:ed:b6:b9:b9:e9:b2:b6:75:a7:61:ee:ba:4b:01:9d:17:a0:
         c3:18:1e:c3:90:97:62:ca:3b:55:56:95:82:70:0c:6c:1f:27:
         2c:a9:9f:0a:f6:0a:51:f7:ae:4d:01:86:cd:93:f2:9d:e2:dd:
         ce:74:02:4d:64:bc:5b:63:55:86:81:9d:04:34:00:52:4b:ec:
         6a:3b:be:17:22:3e:05:b0:ad:d2:fc:5e:10:25:55:00:43:4b:
         05:13:60:c8:10:63:a2:97:91:b7:a6:b6:9f:45:89:d5:c3:be:
         18:4d:a0:d7:d6:5c:e1:1d:ca:d4:18:38:68:e1:c3:f6:5c:61:
         81:9a:a7:e9:05:d6:0c:96:73:a2:41:8d:8a:f3:96:a2:32:a0:
         bc:02:1e:46:83:b0:15:55:34:f8:f6:fa:45:6b:fe:aa:aa:22:
         54:ce:78:d9:16:aa:50:6c:3b:bf:96:a9:c5:68:b2:83:f6:59:
         68:45:cc:38:46:41:c8:96:8d:b3:a5:d2:bd:3a:5c:ff:c7:b7:
         34:0c:1e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:53:58 2025 by rpki-client