Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
File:                     IirjAYKHNx04yuMYdAoctSsF2bo.mft (raw, json)
Hash identifier:          AqcD8Xll/bfipTHaIAHAy7b6dOloD14VQNGC04B4IXk=
Subject key identifier:   F6:D6:15:52:45:72:56:58:89:90:96:BF:94:B0:34:41:FF:D1:21:B2
Authority key identifier: 22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA
Certificate issuer:       /CN=F36999E0AR/serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
Certificate serial:       05B0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
Manifest number:          05B0
Signing time:             Thu 31 Jul 2025 02:34:41 +0000
Manifest this update:     Thu 31 Jul 2025 02:34:40 +0000
Manifest next update:     Sat 02 Aug 2025 02:34:40 +0000
Files and hashes:         1: IirjAYKHNx04yuMYdAoctSsF2bo.crl (hash: jXzdobhgu3zAVYCPZppbkhBOP0nd3p/wMaY+Urd4was=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                          rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1456 (0x5b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36999E0AR, serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
        Validity
            Not Before: Jul 31 02:34:40 2025 GMT
            Not After : Aug  2 02:34:40 2025 GMT
        Subject: CN=688ad641-24d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6d:6e:ec:b8:97:50:f1:e1:5a:cb:a3:ba:97:
                    20:cc:c4:76:45:c7:d7:24:1a:b3:ef:b7:ed:82:2d:
                    44:31:5e:15:bc:4e:cb:df:9d:59:42:a6:08:b8:5a:
                    42:5a:31:ac:f0:39:31:8e:fc:9c:8d:03:ea:9f:d5:
                    87:70:6c:8a:4b:78:6d:a7:f3:73:1a:0d:47:f7:25:
                    5a:8d:9c:ee:eb:0c:2d:dc:a1:af:06:5b:a6:f5:ef:
                    3d:ca:2e:87:eb:0c:6e:12:a8:e9:82:36:8d:10:bf:
                    21:e7:e0:15:f6:f2:17:f7:54:83:82:21:a2:6f:b5:
                    a2:27:a4:5f:d5:9c:70:e3:33:4a:37:a3:92:2d:8b:
                    9a:ec:88:0d:92:90:31:9b:7a:d9:56:f6:ff:52:9d:
                    63:d7:b5:87:44:b6:02:ea:8d:75:ac:f0:e8:77:46:
                    58:db:c4:28:8e:e2:6f:c4:37:31:3d:c3:6c:03:2a:
                    1a:a3:ce:0e:23:60:a9:1e:84:a0:be:a1:e6:d8:a2:
                    3e:5c:e0:f5:2f:29:bc:43:af:5f:b3:22:87:2d:57:
                    5d:06:1e:e6:cc:13:29:c9:31:84:8f:ea:84:2f:32:
                    db:74:d9:fd:1a:cc:21:ce:41:2a:67:13:c5:c0:6c:
                    ce:82:59:3d:9f:82:f0:41:b9:a2:d3:53:f4:b8:78:
                    fa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D6:15:52:45:72:56:58:89:90:96:BF:94:B0:34:41:FF:D1:21:B2
            X509v3 Authority Key Identifier:
                keyid:22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:72:6c:b3:45:50:45:b3:69:57:98:73:c4:37:67:ba:6d:9f:
         f2:64:2a:b2:33:8f:8b:4a:29:23:45:35:4c:7f:f8:9d:3d:6f:
         50:94:64:93:da:29:c6:46:37:1f:e3:e0:1a:c6:45:46:02:a5:
         e4:31:15:c8:bd:72:34:c3:d9:96:e0:01:8c:11:65:fc:f0:7b:
         09:36:c9:dd:c9:5d:0c:cf:0a:20:af:3b:bf:7c:0f:00:f4:95:
         b2:78:d9:24:e6:48:f7:6d:f8:ff:ba:2f:3a:df:b1:77:48:2e:
         4f:44:f9:6e:6b:29:a9:ca:4e:24:af:3f:df:f9:f7:77:13:7f:
         f2:64:46:fe:ce:13:07:46:b5:bd:19:80:fc:15:7d:84:ef:b9:
         6f:4f:2e:08:ae:e8:31:b7:92:b7:74:90:54:bb:a7:31:9a:41:
         b4:61:20:02:40:20:9c:a9:c7:8e:01:3a:53:24:f2:70:b9:cc:
         6e:bb:03:2c:43:7b:5b:64:cc:b6:9c:73:9f:28:ea:0c:89:e1:
         95:da:f7:7c:85:de:9f:62:34:be:f3:a9:3e:84:7d:2c:bc:68:
         e5:33:d3:2a:4e:71:5d:64:3a:9a:bd:cf:4b:fb:55:22:9a:1a:
         d8:cd:3a:05:83:44:5c:16:2c:f4:37:b1:6b:d2:ab:9d:66:9f:
         03:ec:c2:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 13:42:24 2025 by rpki-client