Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
File:                     ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft (raw, json)
Hash identifier:          leT2HQ7OSR8C4b9U/ViVpSDdSSbWcV6oBl0FLCPonxc=
Subject key identifier:   78:30:C5:3F:FA:24:7F:C0:85:1E:AE:1C:EC:BD:C9:E8:27:44:89:DE
Authority key identifier: 8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12
Certificate issuer:       /CN=F3699B8EAR/serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
Certificate serial:       0DCD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
Manifest number:          0DC3
Signing time:             Sat 07 Jun 2025 01:02:25 +0000
Manifest this update:     Sat 07 Jun 2025 01:02:24 +0000
Manifest next update:     Mon 09 Jun 2025 01:02:24 +0000
Files and hashes:         1: ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl (hash: 8Z5SblFIVR2IY5AxlbIjGMn9TB6zaT26AKrPHkMWl24=)
                          2: 8378B942986E11EBA9B2860AF8AEA228.roa (hash: DCXxXlW0spouErSs20DWzGFXGGBNaPXmr93oX+0glto=)
                          3: 90FDB810980F11EBAB14840FF8AEA228.roa (hash: ds3qrAkDtscjN+f/zFO0WydLzwA1BWtOcz3cojiECQw=)
                          4: 256DF7EC042E11EB8295AC11F8AEA228.roa (hash: oTPzm4i8uNZ00YlCZDea9uUazbu6kMoUCNcJkTTMdGU=)
                          5: B13DE26C980F11EBBA26A90FF8AEA228.roa (hash: yCbUwKaqaW0f/0Vl+tcwN9G6XJ8wrDKMmp+woAIv4Rg=)
                          6: 86F1AB563B6911EEA5032D7A4AD9E6FC.roa (hash: tXTkl36K5XLn7WgTr9rni780MBAg7Xu71NqmtnAIntU=)
                          7: 3FEDB4D43B6911EEA1EC28794AD9E6FC.roa (hash: Urr1+RPeSWBQ633dZAK+HE5qMEPCK2i7hu69WdCyFmE=)
                          8: 54554C04042E11EB814EE311F8AEA228.roa (hash: onUIXvOiTLaHtKeCxm3b6uqCM95dsnBo0FQxUaZDWI4=)
                          9: 159996B2082511ED8BA38C86F1222468.roa (hash: EKcGWQb8zxFfpKmxxPcqFEC27AcHuQOygLKxgR7xr7c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
                          rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3533 (0xdcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAR, serialNumber=8A9F86050B4A4E4E925DE6FFD92AC348333E0712
        Validity
            Not Before: Jun  7 01:02:24 2025 GMT
            Not After : Jun  9 01:02:24 2025 GMT
        Subject: CN=68438fa1-e8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fa:92:0b:59:fe:56:49:d3:c5:13:12:11:ef:
                    9f:c7:d5:4b:07:7c:2a:f7:e7:b9:c2:c3:62:6f:47:
                    e1:d4:d6:a5:d0:41:1d:84:e6:b2:d8:54:5f:59:32:
                    94:6a:4b:43:da:cf:04:11:39:90:45:f0:9a:8f:cb:
                    a8:7e:68:7d:fb:e2:8a:dd:a2:1e:b6:b5:b0:b7:5d:
                    75:14:5d:b4:42:32:53:4e:ea:4c:f9:3a:6e:a1:43:
                    7f:13:a1:32:c2:d9:69:2e:f1:d1:ae:14:b2:c2:c5:
                    30:f8:28:a3:1f:6e:de:fd:fa:f5:e4:b4:26:63:f1:
                    73:c2:a5:df:d0:aa:82:d8:5a:38:2d:81:a6:29:4f:
                    62:fb:a5:73:0c:e4:85:e9:0f:d0:7d:8c:d1:07:ff:
                    c3:4d:67:a1:f0:8a:37:95:14:54:d0:4a:ad:68:99:
                    61:7c:c0:a3:38:50:3f:b8:81:a9:9b:2f:1b:22:73:
                    53:71:ac:bb:3c:c6:75:79:7f:cf:73:f4:84:1b:cb:
                    b5:4c:e3:61:e3:22:20:97:98:f1:25:09:0f:ca:30:
                    93:74:bb:5a:23:2b:44:52:fb:7a:43:5d:36:17:5f:
                    9e:0d:86:35:ee:8e:69:11:2b:c8:80:33:8d:eb:f8:
                    38:dc:a7:92:a1:71:a0:cd:a0:a9:8a:4f:43:52:78:
                    4b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:30:C5:3F:FA:24:7F:C0:85:1E:AE:1C:EC:BD:C9:E8:27:44:89:DE
            X509v3 Authority Key Identifier:
                keyid:8A:9F:86:05:0B:4A:4E:4E:92:5D:E6:FF:D9:2A:C3:48:33:3E:07:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ip-GBQtKTk6SXeb_2SrDSDM-BxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/0E47380CB12311E59144614AF8AEA228/ip-GBQtKTk6SXeb_2SrDSDM-BxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:dc:ee:87:c8:18:4b:bd:9b:85:34:0d:67:d7:10:35:3a:da:
         b0:8d:4e:d7:7c:b7:70:38:45:17:a2:21:16:64:9f:32:ba:90:
         f1:71:5f:7e:30:17:cc:71:a0:2e:f1:82:86:90:4f:da:02:cd:
         cb:78:b5:23:c2:76:04:08:40:9a:06:9f:ec:30:90:fc:1a:4d:
         b5:94:58:e1:fd:7e:98:e4:0c:3b:fa:79:f2:3f:e9:e7:0c:6b:
         02:c8:d3:1b:87:fd:e5:61:15:99:09:13:52:b5:0b:e2:c9:a4:
         2d:af:db:a1:2c:10:9d:57:49:95:ab:d3:73:11:33:1a:18:7c:
         18:7d:c1:97:75:2f:36:38:cc:ef:35:f6:a2:93:40:1c:fd:f8:
         78:7b:33:a3:3d:3c:ae:88:13:e9:21:b4:f8:3d:25:1b:ab:44:
         10:5c:57:43:07:a8:5e:52:9d:a3:ca:c1:5b:22:2a:e5:a1:de:
         4b:82:cb:6d:39:67:0a:bb:01:ab:7c:bb:b9:5b:b4:05:09:3f:
         09:c6:c5:91:f4:90:f2:7f:6c:a3:1b:a5:b4:e6:c1:26:c0:40:
         27:cb:14:a3:c0:f6:c6:64:5f:eb:17:91:a6:78:d9:75:29:30:
         36:a0:91:b1:55:76:e4:42:5a:02:a1:d4:65:36:16:2f:09:b3:
         36:9e:79:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:32:52 2025 by rpki-client