Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
File:                     0sTzVYe07S0EZPKfkswmt10TiZE.mft (raw, json)
Hash identifier:          q1ipHGDClAj5+vP0/69gvC7V4mM3Ywh+AOa3mj/cOMg=
Subject key identifier:   F6:78:FF:DA:B0:AF:D2:DF:27:71:15:60:8F:B8:CC:4F:01:76:30:35
Authority key identifier: D2:C4:F3:55:87:B4:ED:2D:04:64:F2:9F:92:CC:26:B7:5D:13:89:91
Certificate issuer:       /CN=F369859BAR/serialNumber=D2C4F35587B4ED2D0464F29F92CC26B75D138991
Certificate serial:       0144
Authority info access:    rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
Manifest number:          0144
Signing time:             Wed 16 Apr 2025 04:39:09 +0000
Manifest this update:     Wed 16 Apr 2025 04:39:08 +0000
Manifest next update:     Fri 18 Apr 2025 04:39:08 +0000
Files and hashes:         1: 0sTzVYe07S0EZPKfkswmt10TiZE.crl (hash: JQO//jalp4matRAklbEz1YryX5UM/c2BlJlNnGI67wY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
                          rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 18 Apr 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369859BAR, serialNumber=D2C4F35587B4ED2D0464F29F92CC26B75D138991
        Validity
            Not Before: Apr 16 04:39:08 2025 GMT
            Not After : Apr 18 04:39:08 2025 GMT
        Subject: CN=67ff346d-20c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:60:f3:0e:20:66:f4:cb:5c:fb:bc:17:34:
                    ba:f4:84:ae:4b:72:d2:92:4b:fc:e0:d7:4b:d5:72:
                    e4:e0:59:6f:fa:03:d3:40:dd:77:cd:be:2e:e6:99:
                    7c:e3:f6:02:cf:14:bb:17:fc:84:82:e7:3c:55:84:
                    48:67:fe:bf:af:5b:3f:66:30:90:25:66:d4:c0:66:
                    0f:6a:56:6d:74:58:5b:99:17:76:ff:b7:5b:ec:c7:
                    ab:38:e0:b8:06:5b:17:b0:43:16:a7:9f:d1:8d:4e:
                    a9:b2:2a:27:3c:4b:71:77:e7:a3:a8:8a:30:39:f7:
                    8e:0a:48:2c:25:2b:f6:2e:35:a4:37:1d:5a:43:60:
                    44:6a:78:95:1c:fd:9b:49:1a:00:1c:39:6c:a7:42:
                    ef:73:11:91:08:9a:a7:59:c4:de:46:bd:84:cd:28:
                    58:41:71:d2:00:b9:15:c8:3b:31:24:09:f0:51:6c:
                    9c:e1:bf:12:b7:4e:60:e8:24:31:86:53:5f:b2:79:
                    bc:42:43:19:36:76:75:bd:10:1b:43:86:ab:02:8d:
                    0b:05:fe:14:f7:e9:02:39:23:45:75:5b:10:b2:e0:
                    3f:bd:5f:8c:6f:c8:cd:92:fc:ab:d2:3a:01:4a:c1:
                    aa:5b:3d:ec:39:c2:0b:2c:ed:99:95:a0:0d:94:f2:
                    5d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:78:FF:DA:B0:AF:D2:DF:27:71:15:60:8F:B8:CC:4F:01:76:30:35
            X509v3 Authority Key Identifier:
                keyid:D2:C4:F3:55:87:B4:ED:2D:04:64:F2:9F:92:CC:26:B7:5D:13:89:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/0sTzVYe07S0EZPKfkswmt10TiZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369859B/9E1FDF9C241511EFAF40AA347DDC24C2/0sTzVYe07S0EZPKfkswmt10TiZE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c4:c3:57:03:e1:82:29:c7:ba:45:97:76:fc:07:d0:f2:3e:
         5e:15:80:34:48:cb:06:4b:33:b6:6f:99:d1:ba:5e:19:63:0c:
         ee:1b:b9:17:c0:7c:1e:e3:0e:f2:1d:5c:c1:34:5d:40:0b:55:
         4a:c0:0e:62:2d:3d:bc:8f:ff:ea:c7:8c:6d:d6:49:0a:24:bd:
         bd:97:cc:ac:99:cc:ab:4b:8d:79:f2:5c:88:ac:37:e3:ee:9a:
         39:ab:85:2a:37:75:91:b5:a6:87:59:18:05:cf:6d:8a:22:d7:
         9e:2b:6e:1e:1e:ec:eb:20:65:5c:b9:92:4a:1b:0a:f4:95:a3:
         f6:30:bc:78:ac:0f:8f:e9:c5:90:20:26:f1:78:da:11:cf:15:
         ab:12:f8:76:f6:f6:d7:19:21:4c:07:36:4e:39:48:5e:6e:60:
         fb:b0:3d:7a:94:34:0f:24:2f:22:a0:83:a9:1b:21:bf:dc:49:
         b5:d0:f7:b2:a3:89:1e:07:3c:62:d1:ab:80:6c:b2:23:57:88:
         2c:32:05:e2:eb:81:da:36:6e:1a:7f:ff:d0:56:3d:53:74:d6:
         92:d8:d6:b8:fa:65:a8:33:9f:d7:ab:f3:44:06:88:ff:94:af:
         5b:74:5f:39:25:9c:50:c7:ca:3b:b6:63:a6:81:49:fa:03:52:
         98:90:9d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:55:51 2025 by rpki-client