Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
File:                     itr_GHci3uuw3c4Fe_PCmNAsfM4.mft (raw, json)
Hash identifier:          IRRBCQNRmVUnVjuGf7RhO94qgAlJPwxAuuFKzwukKPI=
Subject key identifier:   37:61:7F:D9:D6:BC:F8:8F:B4:CC:82:71:D4:6F:5C:12:BC:D9:C1:CD
Authority key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Certificate issuer:       /CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
Certificate serial:       035E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
Manifest number:          035D
Signing time:             Sat 07 Jun 2025 03:33:02 +0000
Manifest this update:     Sat 07 Jun 2025 03:33:01 +0000
Manifest next update:     Mon 09 Jun 2025 03:33:01 +0000
Files and hashes:         1: itr_GHci3uuw3c4Fe_PCmNAsfM4.crl (hash: q3eVtO4krtXXWDzbgG7jN8p+kflJfCN50NIYjWFVvJk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                          rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36939A6AR, serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
        Validity
            Not Before: Jun  7 03:33:01 2025 GMT
            Not After : Jun  9 03:33:01 2025 GMT
        Subject: CN=6843b2ee-e4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f4:a1:89:ce:2e:2a:be:19:d2:c8:db:d7:1d:
                    30:bb:b9:ff:48:1d:66:11:d9:f1:09:21:f2:fc:39:
                    2b:2f:c6:16:58:17:ce:c5:6d:04:bd:e8:e1:92:e5:
                    71:a4:42:0e:ed:80:26:e5:33:81:ee:23:b7:97:88:
                    cd:44:aa:06:af:7f:76:60:34:f2:6e:40:cf:ba:eb:
                    fd:07:65:d4:55:a3:53:e5:23:89:5d:09:9c:49:20:
                    ed:0f:52:5d:64:e1:44:bc:0f:29:db:1e:3e:40:0a:
                    50:98:b4:05:52:73:6b:5e:6c:d8:2d:58:64:b9:30:
                    3c:3a:cb:f3:f9:f2:f5:fb:07:3c:05:c3:ec:5e:06:
                    f3:2b:f7:0a:a4:75:dd:f6:30:14:d0:00:63:8b:8e:
                    cd:b4:b4:a5:19:a8:45:05:c1:05:93:f2:98:27:52:
                    61:33:b6:1b:12:f7:00:2f:04:29:68:76:ff:83:98:
                    67:90:15:09:ae:fa:54:78:48:44:98:13:d0:c5:58:
                    d2:f6:5f:d9:d0:dd:b5:94:18:02:e3:f1:85:4d:27:
                    1d:5e:60:5e:bd:63:d8:f7:7e:46:b0:6e:35:5a:1f:
                    59:1d:8c:7a:17:a9:03:97:43:3c:c7:6c:0f:9f:59:
                    58:99:0a:10:9e:f7:49:e6:bc:70:c2:f2:8c:c7:b6:
                    20:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:61:7F:D9:D6:BC:F8:8F:B4:CC:82:71:D4:6F:5C:12:BC:D9:C1:CD
            X509v3 Authority Key Identifier:
                keyid:8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:a7:49:f8:fa:b8:a2:61:d1:75:04:4a:de:17:bb:76:19:20:
         f2:f2:6a:48:ce:e2:bd:6e:01:10:d7:c2:64:04:ea:96:79:9e:
         e6:4f:c1:9f:ba:7e:70:ea:e8:a2:e9:0a:2b:9e:61:68:62:60:
         13:a5:dc:3f:8a:1e:00:35:3f:0a:5d:35:c8:6f:c2:c6:06:cc:
         bf:f7:a1:04:68:3c:49:72:86:8c:9a:4e:ab:47:aa:2e:85:a4:
         07:8d:7a:19:37:8a:0d:b6:f7:f6:55:94:41:a8:92:db:48:0f:
         9a:75:a8:71:97:75:14:07:7b:d8:1a:80:61:3b:ff:4c:37:20:
         c3:21:4f:a0:62:8b:57:21:e9:cc:43:e4:52:c7:6a:05:0d:00:
         a4:8e:f5:60:72:4b:cc:4d:8e:88:3b:50:70:1f:53:1f:c2:2f:
         98:71:a5:dc:04:4a:bd:9a:de:d0:36:87:81:45:77:f5:fa:ec:
         b2:3c:ba:9e:47:e3:08:17:25:92:0c:8d:37:37:5e:0c:03:20:
         90:2e:62:54:62:08:6c:53:8b:36:08:bc:92:d4:f7:a5:d7:38:
         88:ea:82:96:0c:9c:99:2e:18:92:db:75:bc:8a:26:c7:68:28:
         4f:ae:a4:4d:4c:fa:9d:1e:49:87:55:b1:84:d9:ec:65:d1:7b:
         9e:f9:a4:e8
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA14wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTM5QTZBUjExMC8GA1UEBRMoOEFEQUZGMTg3NzIyREVFQkIwRERDRTA1N0JGM0My
OThEMDJDN0NDRTAeFw0yNTA2MDcwMzMzMDFaFw0yNTA2MDkwMzMzMDFaMBgxFjAU
BgNVBAMTDTY4NDNiMmVlLWU0ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD39KGJzi4qvhnSyNvXHTC7uf9IHWYR2fEJIfL8OSsvxhZYF87FbQS96OGS
5XGkQg7tgCblM4HuI7eXiM1Eqgavf3ZgNPJuQM+66/0HZdRVo1PlI4ldCZxJIO0P
Ul1k4US8DynbHj5AClCYtAVSc2tebNgtWGS5MDw6y/P58vX7BzwFw+xeBvMr9wqk
dd32MBTQAGOLjs20tKUZqEUFwQWT8pgnUmEzthsS9wAvBClodv+DmGeQFQmu+lR4
SESYE9DFWNL2X9nQ3bWUGALj8YVNJx1eYF69Y9j3fkawbjVaH1kdjHoXqQOXQzzH
bA+fWViZChCe90nmvHDC8ozHtiCRAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUN2F/
2da8+I+0zIJx1G9cErzZwc0wHwYDVR0jBBgwFoAUitr/GHci3uuw3c4Fe/PCmNAs
fM4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkzOUE2L0FEOTRBQTIwQjVGRDExRURCRkJBNjNGMUYxMjIyNDY4L2l0cl9H
SGNpM3V1dzNjNEZlX1BDbU5Bc2ZNNC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2l0cl9HSGNpM3V1dzNjNEZlX1BDbU5Bc2ZNNC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTM5QTYvQUQ5NEFBMjBCNUZEMTFFREJGQkE2M0YxRjEyMjI0
NjgvaXRyX0dIY2kzdXV3M2M0RmVfUENtTkFzZk00Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDRp0n4+riiYdF1BEreF7t2GSDy8mpIzuK9
bgEQ18JkBOqWeZ7mT8Gfun5w6uii6QornmFoYmATpdw/ih4ANT8KXTXIb8LGBsy/
96EEaDxJcoaMmk6rR6ouhaQHjXoZN4oNtvf2VZRBqJLbSA+adahxl3UUB3vYGoBh
O/9MNyDDIU+gYotXIenMQ+RSx2oFDQCkjvVgckvMTY6IO1BwH1Mfwi+YcaXcBEq9
mt7QNoeBRXf1+uyyPLqeR+MIFyWSDI03N14MAyCQLmJUYghsU4s2CLyS1Pel1ziI
6oKWDJyZLhiS23W8iibHaChPrqRNTPqdHkmHVbGE2exl0Xue+aTo
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:08:03 2025 by rpki-client