Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
File:                     VcSAIZIjODGCUcva0uggjBsiQyE.mft (raw, json)
Hash identifier:          JhatR5Vhpsyu5RWOD6HVG5j+ehRHubuPugbJfppSTUM=
Subject key identifier:   7D:CA:31:19:A1:A3:2F:05:14:A7:B2:A4:3C:8B:44:DC:EE:F5:98:E5
Authority key identifier: 55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21
Certificate issuer:       /CN=F367DA9BAR/serialNumber=55C48021922338318251CBDAD2E8208C1B224321
Certificate serial:       038C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
Manifest number:          038B
Signing time:             Sun 08 Jun 2025 03:24:21 +0000
Manifest this update:     Sun 08 Jun 2025 03:24:20 +0000
Manifest next update:     Tue 10 Jun 2025 03:24:20 +0000
Files and hashes:         1: VcSAIZIjODGCUcva0uggjBsiQyE.crl (hash: TawcUS4RaD69u/spSvLqUg8LGtXCa8QbaMGHjIZKIa0=)
                          2: 4CEBE78CABC211ED80A4B483F1222468.roa (hash: RMWNA7CymMg9CNpy2XouqWvp370orj1H39/pzyyz1/Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                          rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Jun 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 908 (0x38c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DA9BAR, serialNumber=55C48021922338318251CBDAD2E8208C1B224321
        Validity
            Not Before: Jun  8 03:24:20 2025 GMT
            Not After : Jun 10 03:24:20 2025 GMT
        Subject: CN=68450265-b2a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:86:ab:59:69:4a:66:82:97:30:e0:00:94:12:
                    c7:d4:b6:ae:31:4c:82:75:b5:6a:ff:5e:db:f2:f3:
                    f3:a2:48:56:02:05:20:17:36:4c:bf:a0:fa:ae:c7:
                    4e:ca:3b:fd:b2:54:f5:a7:3a:59:ea:22:5a:d7:5a:
                    33:ad:79:3d:2e:ee:85:43:78:6e:a4:65:73:e1:4c:
                    1b:7e:2e:25:8b:a6:60:3f:38:e6:29:72:bc:3b:76:
                    cb:73:2c:61:9a:aa:bc:6b:2d:3c:91:93:2a:e2:01:
                    8c:e8:01:64:06:b8:d3:4a:af:b0:23:57:29:d8:57:
                    9a:66:04:7e:80:2c:2b:fa:cf:9e:37:57:aa:6f:7c:
                    c6:17:90:b9:0f:c3:e9:cc:38:66:f0:ba:1e:3f:4a:
                    46:fd:d8:99:5a:df:84:9d:8c:fd:cc:4b:55:5d:ef:
                    ac:34:8e:40:ab:f0:2a:40:a0:50:56:bd:88:aa:e5:
                    6f:6f:7b:88:3a:8d:d8:95:41:bd:71:ea:ce:85:ea:
                    b5:c9:96:0a:da:45:bf:28:08:72:fc:32:1b:cf:50:
                    c3:b9:91:07:59:f2:d1:84:16:12:bc:5a:cd:a5:5d:
                    a9:ad:6b:2a:65:31:86:43:d7:dc:ad:e3:c4:c7:18:
                    df:85:09:a2:84:7e:2f:f5:da:3a:a0:8d:3e:c7:d7:
                    e3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:CA:31:19:A1:A3:2F:05:14:A7:B2:A4:3C:8B:44:DC:EE:F5:98:E5
            X509v3 Authority Key Identifier:
                keyid:55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:04:a7:53:7e:3f:4e:33:a3:9b:16:f4:9c:d9:84:5e:6d:dc:
         fd:be:2e:a2:09:c8:b1:6d:d8:9c:4b:8b:ba:8d:61:a1:01:fb:
         64:d9:46:e1:19:40:67:7d:07:9c:cd:a7:a3:d6:de:ee:7f:23:
         75:43:e3:8c:68:3a:5c:47:bd:59:0c:61:ea:e1:bd:03:71:10:
         be:e2:31:42:91:14:ef:c7:1d:93:92:6f:41:e6:2a:d4:df:b6:
         5d:b4:62:dd:38:83:36:cf:14:d5:1f:25:aa:47:3f:c8:26:43:
         9b:3b:87:a3:b7:49:32:30:31:4a:26:9d:a7:b2:ac:3d:6a:2d:
         e7:bb:34:69:16:d8:c2:39:71:4e:e3:cf:c0:e8:da:ab:0b:91:
         40:d4:5b:35:16:e1:ca:dd:03:da:14:6c:41:52:8c:cb:e1:76:
         2d:30:05:8a:ee:04:a0:3c:64:a9:14:10:fe:9d:ef:72:e5:b8:
         6c:c6:90:35:ff:99:0d:ca:85:78:ab:8e:03:aa:bd:dd:3c:ec:
         ec:f1:6d:1f:6f:69:da:58:a7:ec:b0:a5:9c:17:07:23:cd:fe:
         3d:f7:f2:ca:d2:7d:63:85:1a:14:26:54:57:49:91:93:d4:71:
         83:bc:c8:f3:c1:d4:49:59:c0:d4:1b:bd:e7:85:8a:e7:e8:60:
         55:de:03:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:45:05 2025 by rpki-client