Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
File:                     MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft (raw, json)
Hash identifier:          l+a1NPePagr8yAbHpWvQnXAZFTN+9d9SnqYyjfAppJ4=
Subject key identifier:   DD:93:72:9A:93:6D:89:49:27:1A:83:17:63:83:F7:F9:0F:F0:AE:E4
Authority key identifier: 33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74
Certificate issuer:       /CN=F3691854AR/serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
Certificate serial:       029B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
Manifest number:          029A
Signing time:             Tue 29 Jul 2025 04:09:51 +0000
Manifest this update:     Tue 29 Jul 2025 04:09:50 +0000
Manifest next update:     Thu 31 Jul 2025 04:09:50 +0000
Files and hashes:         1: MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl (hash: R2U5hJJYtm73Mf9DX9rBWyPOxiZLC9m6/8STtBFNHBk=)
                          2: 2BBC033C71AE11EEA2D2E5354AD9E6FC.roa (hash: 2uI0q3ii9m0usdGfquktABEqM6p1z0wsDQZ+3pXcYh4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
                          rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 31 Jul 2025 04:09:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 667 (0x29b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691854AR, serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
        Validity
            Not Before: Jul 29 04:09:50 2025 GMT
            Not After : Jul 31 04:09:50 2025 GMT
        Subject: CN=6888498f-82a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:de:dd:8b:65:13:a8:02:87:79:be:9b:4d:e0:
                    88:b0:77:97:0d:74:32:4c:46:3d:f2:74:45:78:27:
                    59:4d:5b:15:b3:4d:50:02:25:ad:24:06:5f:4a:1d:
                    19:12:29:e4:fa:77:7a:f3:0a:66:1d:b3:aa:b3:17:
                    67:53:e8:39:c6:93:eb:65:b0:ce:20:4c:73:45:73:
                    30:81:48:f7:b9:9b:84:df:c1:4f:c5:40:f4:da:7e:
                    69:7d:c3:a5:a7:fa:34:8d:63:cf:91:cc:6e:b8:fc:
                    17:05:2a:6d:35:ed:a5:ba:07:f1:3f:92:24:22:4a:
                    e4:b4:0c:40:df:f5:99:a0:c4:c0:a4:f1:8a:33:d4:
                    57:78:6d:a0:81:f3:bd:99:3b:ec:9a:75:70:63:ef:
                    58:7a:37:a8:30:ed:3e:c5:b2:c3:48:d4:c4:c9:e9:
                    d7:b6:f6:e1:1f:ef:b4:3f:60:24:93:81:82:83:a0:
                    b4:82:4c:e4:24:70:b0:4f:37:2a:72:2f:0f:dd:e8:
                    61:85:be:ac:fd:2b:c1:04:e8:aa:46:94:59:d0:17:
                    98:64:6d:1b:ed:8f:da:46:91:2a:47:91:6c:8c:59:
                    e5:da:bc:3a:8f:0b:3b:89:f7:8f:0b:49:74:98:d6:
                    da:da:bd:32:21:02:7e:c5:5f:59:c8:48:81:c6:c5:
                    7d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:93:72:9A:93:6D:89:49:27:1A:83:17:63:83:F7:F9:0F:F0:AE:E4
            X509v3 Authority Key Identifier:
                keyid:33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a0:0c:29:83:a7:9e:23:69:46:3c:eb:f1:89:b8:2d:b1:00:
         7a:f9:e2:df:c5:4a:41:70:7a:f5:9a:8d:65:b7:6a:25:c8:71:
         46:87:cc:45:f3:cb:c1:2b:a1:b4:08:0a:5e:90:41:0d:41:b9:
         3c:80:81:fd:69:8e:6e:a2:27:30:45:68:85:10:79:1e:0c:c5:
         b5:23:a8:ef:4c:f1:75:7e:43:e9:b1:0c:75:e0:1b:41:13:0b:
         a3:13:f3:3c:94:e9:27:80:33:7d:4c:3d:d4:2c:74:7e:9e:98:
         0c:cd:c9:2c:c8:9b:e7:1d:d2:89:1e:61:5f:f3:55:4e:73:36:
         ed:1e:83:04:b6:b8:cb:a9:47:77:fc:96:0c:84:9f:c6:e8:01:
         11:dd:77:21:5b:b3:d3:43:0c:1f:f0:87:01:ed:c4:b7:a4:5c:
         d6:de:9c:46:93:4a:fe:77:11:c3:4d:ac:5c:09:51:3a:74:83:
         22:ee:e4:e2:28:21:3b:3a:d9:58:85:56:5f:3e:c4:d4:68:19:
         fa:bb:81:82:5d:64:f3:21:35:39:6e:8a:e5:1f:9c:87:f6:f5:
         09:75:a8:d9:76:db:e1:31:4a:55:c5:37:fa:59:5c:c7:f6:f8:
         67:69:ee:e8:c9:70:51:3d:bf:3b:05:17:d4:90:4d:12:89:12:
         51:1a:b7:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 05:20:48 2025 by rpki-client