Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
File:                     0sTzVYe07S0EZPKfkswmt10TiZE.mft (raw, json)
Hash identifier:          44bf84nb+dUEwfIP0Npu5PIEyQ5Gw73Cwf5/JYWWV38=
Subject key identifier:   B9:1A:FE:88:7C:9E:D4:19:A1:57:A6:9C:B8:7F:76:AC:A4:7D:6E:0A
Authority key identifier: D2:C4:F3:55:87:B4:ED:2D:04:64:F2:9F:92:CC:26:B7:5D:13:89:91
Certificate issuer:       /CN=F369859BAR/serialNumber=D2C4F35587B4ED2D0464F29F92CC26B75D138991
Certificate serial:       0179
Authority info access:    rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
Manifest number:          0179
Signing time:             Sun 08 Jun 2025 04:34:10 +0000
Manifest this update:     Sun 08 Jun 2025 04:34:10 +0000
Manifest next update:     Tue 10 Jun 2025 04:34:10 +0000
Files and hashes:         1: 0sTzVYe07S0EZPKfkswmt10TiZE.crl (hash: J9rTueUeatSM6d2Rauo0J+s+/jfHa5UB+kpUkd5hpZc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
                          rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 10 Jun 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369859BAR, serialNumber=D2C4F35587B4ED2D0464F29F92CC26B75D138991
        Validity
            Not Before: Jun  8 04:34:10 2025 GMT
            Not After : Jun 10 04:34:10 2025 GMT
        Subject: CN=684512c2-49a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:89:7e:71:1f:f8:83:8d:fa:8e:2a:1a:ab:
                    ef:68:64:86:31:1b:1f:0c:f3:9e:81:ec:87:ba:ac:
                    43:03:05:85:b8:bc:68:c4:c2:de:31:87:e2:e6:46:
                    1b:09:6e:7d:ec:05:5c:98:76:c7:e4:50:a4:dc:96:
                    0e:61:c9:74:c0:84:35:28:45:8d:f4:2d:2f:38:b8:
                    0b:ac:2d:cf:3c:0d:bc:27:1e:75:fd:c2:23:de:92:
                    1d:aa:2d:b6:1f:f2:42:35:71:0f:53:af:2d:32:d0:
                    c4:5b:62:62:d1:be:ec:ec:52:f9:7b:30:b8:a2:e7:
                    bb:98:55:d0:1b:fc:8e:75:82:d9:ca:49:d8:93:24:
                    fa:4e:26:2e:97:92:80:3a:46:24:8b:95:7a:f8:e6:
                    77:cd:eb:d3:ff:a2:8a:23:99:50:98:ef:f9:8a:20:
                    be:be:b2:d5:05:59:bc:62:58:a0:52:34:d6:92:5c:
                    87:58:39:04:86:4e:30:f3:e2:ea:32:c6:0c:e6:7f:
                    d2:05:5d:00:8f:5d:7e:8a:d8:86:22:9b:18:74:84:
                    8f:a2:b8:ea:17:84:e3:4b:e7:27:c6:d5:99:58:24:
                    d6:8a:ce:e1:67:53:40:b5:e2:f5:09:99:f7:0a:79:
                    00:cb:9f:56:ed:79:fa:1d:7b:13:1f:cb:9f:d7:5d:
                    58:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:1A:FE:88:7C:9E:D4:19:A1:57:A6:9C:B8:7F:76:AC:A4:7D:6E:0A
            X509v3 Authority Key Identifier:
                keyid:D2:C4:F3:55:87:B4:ED:2D:04:64:F2:9F:92:CC:26:B7:5D:13:89:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:d3:84:6a:cb:ad:86:86:2b:31:b7:26:7c:d4:0b:8e:14:e4:
         64:72:ac:68:c4:ea:f3:52:6f:35:09:bd:36:76:3e:6d:fa:38:
         fb:db:3e:ff:6e:69:8d:f4:61:77:5e:8c:3c:ca:aa:29:a9:d5:
         1a:e3:e0:60:07:21:e2:39:cb:9c:0a:af:2b:bc:73:9b:9a:fa:
         cf:f3:92:cc:16:e4:02:4b:84:03:c1:79:82:21:93:60:22:b0:
         d4:79:41:65:0a:fb:6b:f5:40:a6:6b:04:29:d0:35:b6:00:0b:
         c2:de:19:ec:ec:dd:95:c0:31:93:d3:8e:57:bf:ac:f8:a5:2d:
         15:45:9e:d6:e7:fa:e2:8e:8e:02:bd:70:e8:9d:16:d7:4b:14:
         52:a6:e0:87:13:ae:f0:25:22:c2:e2:97:12:3a:ef:7f:eb:d9:
         45:94:83:8a:fb:0c:da:3b:1d:1e:cf:68:94:6b:b5:6f:e8:c5:
         3f:a8:d2:70:49:87:50:1a:77:60:ec:47:d4:60:9f:50:97:c6:
         b7:4c:63:cd:94:65:ac:37:9d:28:e3:4f:6b:1f:52:d5:cf:61:
         60:1e:67:49:a7:76:39:9a:94:ee:65:4e:42:17:0a:8e:60:1f:
         7c:97:18:83:3e:38:bd:27:59:8f:1f:1e:99:65:91:3b:b6:b2:
         26:ed:74:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:08:56 2025 by rpki-client