Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
File:                     IirjAYKHNx04yuMYdAoctSsF2bo.mft (raw, json)
Hash identifier:          9Dvx00/guFk010xGdoSBJJijvs5QRHJNMimDiYWz6TQ=
Subject key identifier:   67:4D:15:31:9E:09:08:C4:65:B5:D6:35:97:CD:BD:E0:68:15:CE:73
Authority key identifier: 22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA
Certificate issuer:       /CN=F36999E0AR/serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
Certificate serial:       05DF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
Manifest number:          05DF
Signing time:             Tue 16 Sep 2025 02:23:35 +0000
Manifest this update:     Tue 16 Sep 2025 02:23:35 +0000
Manifest next update:     Thu 18 Sep 2025 02:23:35 +0000
Files and hashes:         1: IirjAYKHNx04yuMYdAoctSsF2bo.crl (hash: AvzKbc+OoOUOrvcI4C36bGaULskT6CNcNH/YDqh9zIY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                          rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1503 (0x5df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36999E0AR, serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
        Validity
            Not Before: Sep 16 02:23:35 2025 GMT
            Not After : Sep 18 02:23:35 2025 GMT
        Subject: CN=68c8ca27-2459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:d9:1e:89:81:d0:34:c2:b5:83:5a:e2:6f:54:
                    12:96:f9:33:9f:51:fd:d3:32:f1:da:c0:7a:4d:9d:
                    56:5e:e7:ff:ce:0b:29:cf:9a:c7:a5:3c:73:39:60:
                    38:74:c1:6c:cb:69:7a:43:86:86:03:f9:d1:82:93:
                    e9:9a:b1:11:0e:68:79:57:d9:a8:2f:6d:d4:3c:f5:
                    c2:03:3d:30:da:e0:a6:6d:05:91:67:3a:db:2f:d1:
                    fa:ad:fe:f6:a7:36:93:ea:79:ae:0c:91:bc:2d:e3:
                    cc:68:7c:0e:3c:ae:26:19:1e:89:da:12:14:a8:82:
                    d0:3a:99:98:26:32:e7:ca:03:00:f5:82:48:23:c2:
                    b7:e6:95:a0:f7:00:c0:07:ec:2f:8c:66:46:de:1d:
                    f0:96:91:5c:20:cc:ea:7d:98:70:ff:51:b6:ef:5f:
                    f6:3f:e2:b1:fd:df:87:f4:4e:84:8c:7a:fc:19:96:
                    56:55:82:98:b1:5a:08:9e:50:e4:8b:de:6b:be:c9:
                    fe:6d:e2:00:22:cf:10:14:2d:11:96:f1:1c:35:ec:
                    01:9f:45:d5:3e:f8:b1:4d:71:0c:86:61:91:74:8f:
                    f0:ce:fb:be:b5:a5:85:7c:aa:30:ff:4a:6e:df:eb:
                    98:69:9c:6b:f1:b1:18:fc:17:cd:9b:26:7d:96:d5:
                    0f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4D:15:31:9E:09:08:C4:65:B5:D6:35:97:CD:BD:E0:68:15:CE:73
            X509v3 Authority Key Identifier:
                keyid:22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:73:df:8e:ed:cc:98:63:69:16:6b:ae:5a:14:a7:76:5b:17:
         63:84:0b:e6:3f:c6:86:49:54:ea:4d:fb:59:35:f6:7c:a4:d0:
         04:0d:86:ed:58:30:15:f3:1f:71:8c:2a:0f:c2:b1:08:18:a6:
         33:1e:a6:16:19:60:4d:be:26:a2:97:2d:0a:02:c3:ca:59:f1:
         f5:f1:4e:75:45:d7:99:88:fc:05:e5:9e:73:cc:82:9c:72:fd:
         16:84:dd:c8:67:78:05:9e:fe:3a:74:46:f9:e3:42:c1:8a:69:
         70:b8:2e:98:cb:ab:80:0a:ef:dc:b2:72:4b:4b:c3:92:d6:7d:
         1e:fd:b6:07:a2:77:4f:db:1d:11:77:4d:fa:2f:87:10:e5:98:
         d5:f9:e9:ee:5f:70:8d:01:b6:34:d9:ad:38:3e:87:17:34:c3:
         4f:18:85:9e:ee:d1:89:3b:d9:12:42:d3:86:5d:90:01:e4:f9:
         47:ac:3b:0a:08:f8:8a:df:b0:d0:66:7c:46:85:7b:f5:89:d8:
         45:44:12:6f:bb:c9:dc:b5:c6:6c:2d:8b:be:55:3b:5b:00:8d:
         99:be:a1:b8:be:80:95:c1:2d:28:2a:84:12:bd:b9:5c:6a:e1:
         12:d7:2b:74:9b:26:81:fc:38:70:b6:75:44:50:f7:6c:dc:43:
         59:c4:c3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 18:17:15 2025 by rpki-client