Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
File:                     JlfA2qREzLm--MKoWGoOdJzqm1I.mft (raw, json)
Hash identifier:          x52IGzPtN9U3/mDMqHtxAiXTLMpMbcxxjAqDu4IfJmg=
Subject key identifier:   D5:5D:7D:8C:02:DA:56:0B:2C:08:0B:A9:84:BD:F6:6E:45:FA:40:D6
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Certificate issuer:       /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial:       0CB5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
Manifest number:          0CB2
Signing time:             Fri 18 Apr 2025 06:05:26 +0000
Manifest this update:     Fri 18 Apr 2025 06:05:25 +0000
Manifest next update:     Sun 20 Apr 2025 06:05:25 +0000
Files and hashes:         1: JlfA2qREzLm--MKoWGoOdJzqm1I.crl (hash: GbZbnP+6/s2C6O9n6OS06DqXpHmbE5/m1D+u0W466+Q=)
                          2: F4602E7A7D7A11EFAF08EC65762E951A.roa (hash: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=)
                          3: B72B3B7459DA11EC8F6187BD5A40D577.roa (hash: lX5w/V9IxiCR5OIdQ46QZvuvbFy5St8N0ELixEctQHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                          rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Apr 2025 05:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3253 (0xcb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AR, serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
        Validity
            Not Before: Apr 18 06:05:25 2025 GMT
            Not After : Apr 20 06:05:25 2025 GMT
        Subject: CN=6801eba6-965e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:e3:a6:d1:da:a8:9f:79:6b:1a:71:2c:30:
                    c4:30:d7:6d:70:00:c8:92:f2:5c:31:26:b7:50:ca:
                    a3:e0:2e:d8:12:fa:ca:fc:e8:df:79:37:b6:e0:f6:
                    b1:5e:eb:b4:88:15:76:8c:54:ef:e4:ac:d2:58:ad:
                    e4:13:00:7b:5f:f4:ee:43:0a:45:39:5f:3b:7d:f7:
                    e8:51:ca:09:69:90:d8:0d:6f:e7:c0:21:e0:f8:f7:
                    fe:30:d2:c8:61:49:c7:1a:06:58:b4:3a:41:d9:0d:
                    99:c3:87:75:24:60:d9:e2:3b:12:c0:50:19:fe:3d:
                    17:6f:ff:f4:54:28:04:a7:94:34:eb:fc:2f:76:1f:
                    d4:32:9a:7f:a2:ff:61:22:96:5f:69:d4:6c:4b:34:
                    2b:2e:33:e8:d2:30:a4:c9:66:c6:5c:9b:01:9e:0f:
                    da:ce:e9:82:cc:4c:ff:ee:0e:d5:38:c8:3e:86:f3:
                    6f:34:2c:33:8e:b2:0d:fa:43:fc:e4:09:14:d5:0b:
                    74:f4:39:a7:32:1b:04:18:d3:d1:c1:72:a5:38:7a:
                    e4:16:61:3e:c2:7e:9b:90:0a:d5:f4:f8:c8:6d:c3:
                    72:a5:1a:98:7e:38:fb:49:11:1b:ae:eb:8e:a0:ba:
                    35:82:a0:eb:16:99:e8:62:21:45:bb:17:b1:71:03:
                    df:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:5D:7D:8C:02:DA:56:0B:2C:08:0B:A9:84:BD:F6:6E:45:FA:40:D6
            X509v3 Authority Key Identifier:
                keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:89:f8:6c:3d:06:8b:e2:9a:04:7e:50:cd:87:02:ca:10:70:
         18:bd:75:1c:bb:d2:35:9e:d9:1e:bd:ca:79:92:35:ad:ce:d3:
         a5:66:90:00:8e:51:70:0a:30:de:97:58:2f:8f:56:6a:d3:dc:
         81:44:0a:03:20:13:27:6b:4b:a9:be:f2:be:b8:74:f5:92:53:
         43:a5:40:c5:32:b6:8a:83:b7:34:8c:eb:18:d5:cc:bf:82:d3:
         a9:d4:8e:f3:93:e0:7f:88:12:42:3d:c8:ba:46:0c:50:8a:44:
         d6:1f:86:e9:03:83:a1:0f:2f:59:e0:c3:e2:77:94:bf:f6:2c:
         4c:a3:71:1b:43:fc:11:6a:78:8e:d6:2e:6e:7a:03:10:fb:fd:
         7a:e0:51:b2:67:2a:6e:22:14:9e:c9:cd:4c:9e:c2:c2:9c:da:
         9f:f7:65:f0:d3:76:ba:06:50:ee:50:42:e2:d7:12:ec:5f:c0:
         c9:14:a4:5e:8a:d0:5a:e6:5a:ec:58:5b:a0:36:a3:9f:2f:bf:
         f9:31:96:e4:9f:59:69:d4:cf:d8:e2:ff:f6:36:8b:fb:d0:85:
         40:39:b7:f9:fe:70:f1:64:5f:6f:05:a0:3d:ce:74:04:e1:61:
         39:d3:e6:c2:53:92:b9:fd:fd:9f:ea:20:e2:8a:b2:4d:46:92:
         6f:5c:3f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 09:55:39 2025 by rpki-client