Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
File:                     XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft (raw, json)
Hash identifier:          8c7xGNwSBitPauYaB/d58d1B4AjdW64nQESAyIjDTD4=
Subject key identifier:   97:1D:41:3A:1A:EF:42:E2:B8:96:00:C4:85:14:FE:8D:05:CF:78:92
Authority key identifier: 5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14
Certificate issuer:       /CN=F36795C4AR/serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
Certificate serial:       08C6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
Manifest number:          08C5
Signing time:             Sat 14 Jun 2025 01:36:03 +0000
Manifest this update:     Sat 14 Jun 2025 01:36:02 +0000
Manifest next update:     Mon 16 Jun 2025 01:36:02 +0000
Files and hashes:         1: XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl (hash: AHGvx/+c0HCMBQtAIaMHFwiP4wC0iYgwcUqjGUZ3JpE=)
                          2: 85DEE92291EF11E9ABCCB07EF8AEA228.roa (hash: 3K2tDuP6LQooSlB5SsHZUahCN8ylMLHTNlp/RyDYHoc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
                          rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Jun 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2246 (0x8c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AR, serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
        Validity
            Not Before: Jun 14 01:36:02 2025 GMT
            Not After : Jun 16 01:36:02 2025 GMT
        Subject: CN=684cd203-0eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:ab:42:21:3d:8f:4d:2d:47:80:17:06:34:
                    05:9e:a0:0f:17:4b:32:ff:09:30:a2:28:36:d7:2c:
                    21:3b:5d:d5:c3:88:f1:8a:c1:4c:44:e0:0e:a9:b1:
                    e5:e6:b5:25:89:bd:f6:25:38:90:f6:67:bb:5a:74:
                    e7:ae:f6:a9:8c:17:44:cd:b7:a2:6d:e7:e1:a0:2f:
                    ad:e9:03:f8:f6:41:64:ee:f3:e1:4e:e9:b4:67:ea:
                    c6:76:06:4b:b1:57:fb:dd:38:09:78:2d:8c:05:4b:
                    52:d2:ba:23:09:56:be:cf:bb:7e:5b:1d:dc:e2:be:
                    40:6d:5f:c7:05:bf:56:55:d4:58:98:0b:0d:ec:67:
                    92:13:3a:8c:a6:11:63:58:fe:c1:17:e3:bd:81:19:
                    d2:e5:ea:b4:c6:79:9a:71:66:37:3b:78:a0:f6:99:
                    c8:09:ce:85:9c:4c:ed:7e:46:78:ec:e4:b6:39:a2:
                    60:15:e4:da:cd:19:c7:51:19:78:8f:0f:03:d5:ca:
                    ac:16:61:91:51:7e:9b:b9:24:56:9c:fb:18:8b:21:
                    05:04:c9:73:77:70:66:f5:48:60:86:7a:7c:b5:cc:
                    2e:7d:65:6d:ee:b6:ae:18:6e:79:06:4d:b7:69:7e:
                    e4:2b:98:23:da:a4:4e:b2:c2:c8:d9:85:65:ef:d4:
                    90:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:1D:41:3A:1A:EF:42:E2:B8:96:00:C4:85:14:FE:8D:05:CF:78:92
            X509v3 Authority Key Identifier:
                keyid:5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:8a:10:7c:cc:19:91:28:4f:48:a0:e1:54:c8:43:bf:d4:82:
         f1:f5:3e:0b:13:91:9a:48:22:d5:46:ce:28:67:f3:59:7a:a3:
         74:9c:a7:36:d6:5d:cb:d9:be:6b:e8:7c:07:d0:d6:4b:cb:2f:
         77:8c:51:13:32:f1:69:1b:89:2d:7c:4e:ce:9c:d9:57:14:b7:
         98:ee:28:92:63:ec:6e:24:8b:5e:5d:82:ee:8c:ff:ed:f1:bb:
         65:68:94:74:d4:c3:f0:65:75:7e:99:e2:c5:93:4d:10:11:65:
         4c:cb:ee:ae:e5:5b:d9:6b:a3:00:f1:fc:06:22:bf:d0:88:58:
         eb:04:d4:5a:36:61:24:93:63:35:5c:aa:78:fb:62:b3:48:5b:
         be:cf:d4:cc:b9:90:3d:46:e0:8f:88:6a:70:5f:3f:80:92:d3:
         d7:1b:4f:79:88:8e:14:69:ea:b1:03:31:06:c2:cf:93:a7:ed:
         53:49:42:bc:97:b4:cb:5e:fe:68:27:ee:da:ba:34:38:49:45:
         f4:9c:fb:5c:68:bd:f1:be:e5:7a:45:60:d1:ce:bd:9d:db:cc:
         fa:5b:09:b1:4b:ba:ae:18:cb:12:63:d4:4f:9b:5c:bf:7c:d5:
         96:b3:38:3d:00:d1:1f:b8:1a:91:72:39:89:2c:37:72:7f:d2:
         51:ae:30:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:57:17 2025 by rpki-client