Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
File:                     4ugF6J3fkHsrUo9CZBtP92ImmxY.mft (raw, json)
Hash identifier:          aHInBLLYxtiOA8ny7VDnN863o/+++U+rVy/0v2DVToU=
Subject key identifier:   CF:1B:22:19:4F:C9:5B:9E:0E:D3:A7:E9:9A:11:71:F5:2A:2E:21:07
Authority key identifier: E2:E8:05:E8:9D:DF:90:7B:2B:52:8F:42:64:1B:4F:F7:62:26:9B:16
Certificate issuer:       /CN=F3688321AR/serialNumber=E2E805E89DDF907B2B528F42641B4FF762269B16
Certificate serial:       019D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
Manifest number:          019C
Signing time:             Thu 12 Jun 2025 04:34:43 +0000
Manifest this update:     Thu 12 Jun 2025 04:34:42 +0000
Manifest next update:     Sat 14 Jun 2025 04:34:42 +0000
Files and hashes:         1: 4ugF6J3fkHsrUo9CZBtP92ImmxY.crl (hash: AhMM6UExpRpyg6059sOxsh5PpH4Gp/rweAZve/0v+Pk=)
                          2: 7E32B2260DFF11EF971154F4007001B1.roa (hash: mMlz9+L3Eog8WKMUxfqqOF5aG0LcyYUooSiKu/ea8uI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
                          rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 14 Jun 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688321AR, serialNumber=E2E805E89DDF907B2B528F42641B4FF762269B16
        Validity
            Not Before: Jun 12 04:34:42 2025 GMT
            Not After : Jun 14 04:34:42 2025 GMT
        Subject: CN=684a58e2-4e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c2:70:4c:17:27:23:0a:dc:38:ea:75:4b:29:
                    c3:6c:37:a6:0c:32:48:25:b1:96:0c:b5:3a:35:2f:
                    0c:86:20:e7:81:b6:7b:d2:15:40:0c:8b:4a:ee:3e:
                    90:43:0d:ff:01:59:c5:7a:8c:f0:db:ed:b5:10:8f:
                    aa:9f:58:e5:5a:f3:d7:23:c4:f2:1a:05:cc:9e:47:
                    ee:76:ba:21:f9:fc:9a:28:c5:3e:3c:d5:fa:2e:af:
                    b2:98:c6:65:82:92:be:b3:d8:a6:c3:8d:bb:62:73:
                    03:69:01:7a:42:48:13:34:7e:24:8e:d0:9a:9c:7f:
                    12:d0:9a:96:39:19:fb:2a:d4:1f:23:9e:eb:b0:d9:
                    40:4b:68:eb:48:f7:43:0a:1e:a6:18:3e:aa:cd:25:
                    75:57:82:da:2e:0d:cd:7f:01:d8:3f:4a:ce:d3:d9:
                    e5:d4:72:7e:01:28:6d:96:6c:b2:49:b0:64:e7:ce:
                    a5:02:07:e6:68:78:3f:90:08:33:27:f1:82:4e:26:
                    e3:b3:0f:2b:44:13:97:94:a4:64:fd:a7:49:40:c4:
                    1a:1c:60:f2:e1:25:b2:4a:d6:5d:03:84:5a:fd:f9:
                    ba:d0:a0:24:6d:a5:e7:c0:f8:3f:8d:05:aa:be:70:
                    62:bb:34:66:6a:f8:73:c2:3b:06:df:f3:ce:e3:f3:
                    91:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:1B:22:19:4F:C9:5B:9E:0E:D3:A7:E9:9A:11:71:F5:2A:2E:21:07
            X509v3 Authority Key Identifier:
                keyid:E2:E8:05:E8:9D:DF:90:7B:2B:52:8F:42:64:1B:4F:F7:62:26:9B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:64:fd:fb:ea:bc:c4:96:e3:30:d0:04:f7:7d:1c:38:82:7c:
         da:8d:42:01:43:ed:1f:8d:08:1e:ac:e5:8d:72:9a:1c:a6:3b:
         05:7f:96:d1:7e:89:28:26:e7:0e:a1:c1:1c:01:ca:d1:2e:dd:
         50:6a:2c:a3:e7:aa:a4:bf:cd:45:51:b6:6b:2a:b5:46:55:ab:
         6d:cf:51:03:f4:85:56:4f:d4:65:cf:a6:6f:c8:97:f2:2d:1c:
         db:3b:d3:0f:59:b8:e6:5d:9a:8f:c0:ba:30:fe:98:ea:28:f7:
         d3:27:a8:30:90:e2:43:a4:64:3c:5c:16:65:57:f0:a4:16:97:
         b9:81:d7:43:df:a9:4a:87:52:66:50:9d:7e:4c:12:4f:20:aa:
         3e:f3:f9:e0:8a:ca:05:21:f4:2a:91:bd:f1:82:1a:f1:c5:88:
         50:01:39:39:5a:06:e7:7f:29:17:e3:cd:cd:59:7c:47:46:f2:
         13:1f:56:4e:f2:f0:33:6f:ec:91:80:0d:f4:0e:c9:28:72:22:
         cf:e0:de:1b:e2:1a:d5:80:c0:6b:97:a2:92:f3:82:e9:5b:96:
         be:d7:cc:5b:77:c5:42:62:43:81:38:e9:b6:f1:ca:78:43:d1:
         91:d5:80:98:c5:e6:5f:c6:4d:c8:32:ef:7e:5d:e0:c6:13:08:
         a1:5f:55:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 22:02:55 2025 by rpki-client