Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
File:                     JlfA2qREzLm--MKoWGoOdJzqm1I.mft (raw, json)
Hash identifier:          D2NO4OzkF35MMEdhRIosUcMfExP01c135pDrTNfdRco=
Subject key identifier:   52:BC:93:50:85:91:01:81:59:DD:39:9F:2E:CE:6B:3B:A5:81:76:7D
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Certificate issuer:       /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial:       0C90
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
Manifest number:          0C8D
Signing time:             Thu 13 Mar 2025 00:57:38 +0000
Manifest this update:     Thu 13 Mar 2025 00:57:38 +0000
Manifest next update:     Sat 15 Mar 2025 00:57:38 +0000
Files and hashes:         1: JlfA2qREzLm--MKoWGoOdJzqm1I.crl (hash: AuRdoBE9+0krQS5oQRupGYDJxOHmZzRFnCqqlpRpMY4=)
                          2: F4602E7A7D7A11EFAF08EC65762E951A.roa (hash: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=)
                          3: B72B3B7459DA11EC8F6187BD5A40D577.roa (hash: lX5w/V9IxiCR5OIdQ46QZvuvbFy5St8N0ELixEctQHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                          rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 15 Mar 2025 00:26:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3216 (0xc90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AR
        Validity
            Not Before: Mar 13 00:57:38 2025 GMT
            Not After : Mar 15 00:57:38 2025 GMT
        Subject: CN=67d22d82-2e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:65:35:d7:36:51:e3:2b:28:d1:63:da:3b:0e:
                    06:5e:a9:5d:97:71:1c:9d:2f:4d:26:82:95:cb:27:
                    3f:8b:6f:15:bb:fb:cb:52:7c:ac:81:9d:3c:0c:97:
                    48:a1:7e:cf:ae:6b:06:ea:1e:b7:e7:df:09:55:db:
                    f3:c0:93:e9:95:3b:03:52:78:b3:59:95:cb:7c:6e:
                    ef:ae:a1:ef:05:10:4b:99:6a:3b:9b:7d:34:c2:c9:
                    8e:7b:7a:9a:09:66:a0:3d:7b:cd:08:ec:cb:e7:f6:
                    46:ad:8f:8e:f9:4b:f5:dd:8a:59:06:0a:b9:f0:ab:
                    14:93:fd:0c:37:d3:33:93:2f:eb:43:6c:cd:74:4e:
                    76:eb:1b:96:d7:bf:fa:37:f1:e9:b7:db:e0:ac:de:
                    f1:37:d5:17:90:44:6f:cc:36:ed:d0:85:ed:16:14:
                    fe:93:81:f6:b2:d7:de:7d:f7:ad:fb:f8:81:29:07:
                    ef:17:d2:1c:35:b6:4b:47:eb:4d:4f:51:2a:94:e0:
                    7c:cd:43:ac:b3:32:50:69:f7:37:6c:b9:39:c4:1a:
                    54:b3:76:ad:2b:0d:29:a0:9e:ad:c6:98:53:13:59:
                    de:6c:2b:1a:4c:bc:dc:4d:bb:34:26:ad:54:3c:d7:
                    55:92:19:21:fb:8c:39:69:48:89:ae:30:b0:f2:bf:
                    0f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BC:93:50:85:91:01:81:59:DD:39:9F:2E:CE:6B:3B:A5:81:76:7D
            X509v3 Authority Key Identifier:
                keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:ac:a9:ab:dc:04:04:aa:43:68:60:3f:6c:f4:c9:04:8d:b0:
         e2:98:c7:5b:87:46:6a:e6:11:fa:e3:95:31:97:0e:29:c6:44:
         cd:4c:13:1d:51:70:4f:78:cd:08:16:73:4b:f9:d8:77:e6:9c:
         64:2e:ce:16:26:0a:bd:95:83:dd:d3:95:cd:ba:7f:f1:f4:53:
         e9:41:05:73:03:27:e5:84:6c:47:1a:4c:0c:b8:58:d8:5a:a2:
         35:75:9b:a9:f0:3e:3d:75:12:32:9b:8d:e4:31:2a:68:2a:76:
         31:97:f5:5b:d2:59:06:f6:c7:ad:bc:86:96:db:c4:fa:8b:5c:
         50:bc:29:eb:ec:00:ea:a0:82:11:29:f9:e3:56:ec:da:51:ca:
         aa:ff:4a:e7:8b:79:ac:74:ad:7b:88:26:ab:0a:ab:67:3a:84:
         cf:6d:36:27:83:e8:e1:a0:14:e5:d8:e8:ea:de:25:8e:53:c3:
         aa:65:33:2f:5d:22:d6:96:92:80:14:ce:58:ae:88:15:ea:e4:
         17:aa:5d:00:70:9c:49:e7:d5:74:e9:34:08:f9:a1:b1:d9:a7:
         62:9d:60:c6:30:5e:3e:a2:3f:ea:c5:f5:c5:e8:13:0c:3a:e1:
         e1:ce:6a:ae:62:93:f1:39:8e:8d:3b:52:b1:39:35:b3:b8:e2:
         b1:ae:42:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:37:18 2025 by rpki-client