Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft
File:                     qjkCIoK-Ps773Fjln5ljk4Jku0I.mft (raw, json)
Hash identifier:          g9tup+b5P7Rrmz2xf48k1tg8AAuaOKHYOXBmMUVGmgA=
Subject key identifier:   49:C9:D6:F5:87:2F:BE:51:25:D8:18:5F:D1:F4:1E:7E:45:5F:1E:05
Authority key identifier: AA:39:02:22:82:BE:3E:CE:FB:DC:58:E5:9F:99:63:93:82:64:BB:42
Certificate issuer:       /CN=F369F058AR/serialNumber=AA39022282BE3ECEFBDC58E59F9963938264BB42
Certificate serial:       08D1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/qjkCIoK-Ps773Fjln5ljk4Jku0I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft
Manifest number:          08CE
Signing time:             Sun 06 Apr 2025 01:09:07 +0000
Manifest this update:     Sun 06 Apr 2025 01:09:07 +0000
Manifest next update:     Tue 08 Apr 2025 01:09:07 +0000
Files and hashes:         1: qjkCIoK-Ps773Fjln5ljk4Jku0I.crl (hash: ib8VKrUNh7lD7Gx4RKw1Pcd1Q8kAT3xOQ85RVi8mbCM=)
                          2: 48619D24149E11EF81414965017001B1.roa (hash: 3GarqsJ4VJ1/CLoT1EAlZXSx5zt3151P9uVE5+wGgZ8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft
                          rsync://rpki.afrinic.net/repository/arin/qjkCIoK-Ps773Fjln5ljk4Jku0I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 08 Apr 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2257 (0x8d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369F058AR
        Validity
            Not Before: Apr  6 01:09:07 2025 GMT
            Not After : Apr  8 01:09:07 2025 GMT
        Subject: CN=67f1d433-b2c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:fc:80:d9:77:d1:9e:69:5b:0a:dc:39:77:87:
                    4f:da:fe:20:5c:d7:9f:4b:cd:dd:16:29:32:a9:f5:
                    75:04:65:47:74:24:3a:85:52:33:6c:f1:48:49:61:
                    f6:d1:8a:41:61:85:3e:4d:f4:c4:a5:83:2a:50:49:
                    c8:5d:85:f2:56:be:b9:fd:86:11:de:f1:91:44:1c:
                    3f:ea:52:d2:70:4b:af:cd:97:9f:b5:30:23:f2:2c:
                    d9:13:3d:e0:de:d7:d1:83:51:21:81:a8:3b:1e:55:
                    a4:b1:88:c7:a5:41:69:70:84:bd:fc:47:46:a5:3f:
                    72:b5:1a:35:37:e0:a8:dc:e1:71:1b:a4:f6:8b:6a:
                    31:74:20:b5:74:dc:f2:57:af:67:df:00:e6:be:f1:
                    03:ba:1a:04:2f:05:cb:a2:3d:d2:3c:6b:6e:2f:8a:
                    d8:5e:3d:10:98:f4:58:e1:35:9f:1e:78:23:b8:15:
                    b1:83:6f:d9:fa:00:a9:68:79:a5:7e:c7:03:8d:b3:
                    0b:c6:7d:b6:64:1f:6b:17:26:5e:6f:c1:b6:b3:5d:
                    87:98:f9:35:9f:64:45:94:7b:90:df:09:18:90:24:
                    17:da:24:51:7a:8e:c9:23:e3:a2:c7:01:51:ea:b0:
                    e6:a7:b2:69:e4:72:b6:00:a3:1d:b9:10:a5:d0:4a:
                    12:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:C9:D6:F5:87:2F:BE:51:25:D8:18:5F:D1:F4:1E:7E:45:5F:1E:05
            X509v3 Authority Key Identifier:
                keyid:AA:39:02:22:82:BE:3E:CE:FB:DC:58:E5:9F:99:63:93:82:64:BB:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/qjkCIoK-Ps773Fjln5ljk4Jku0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369F058/9CF6AE44553911E9A315872FF8AEA228/qjkCIoK-Ps773Fjln5ljk4Jku0I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:a2:90:f1:ca:69:2a:d8:6b:a9:0f:09:83:6c:98:27:56:eb:
         06:ba:e2:aa:e6:8a:dd:03:01:2e:4f:cc:12:42:1e:4c:da:9e:
         d4:fe:b8:9f:cb:69:bf:05:d3:04:25:fe:c8:07:76:4e:b9:da:
         0a:c7:ba:03:18:5d:e8:46:b0:87:ee:43:91:a3:7c:c7:e5:29:
         d6:c0:17:ae:86:bb:0b:fe:f7:55:36:cf:d1:d9:d6:95:aa:fd:
         b0:9a:8c:86:1b:79:73:90:32:99:19:b9:d1:65:52:29:ec:bd:
         99:d6:8b:c9:fa:31:6a:50:38:67:dc:c9:b2:f7:2b:a3:5f:d6:
         d1:1c:40:76:98:05:6e:76:c5:55:09:d9:99:eb:9d:89:2b:f8:
         44:ca:5d:2c:48:6f:d3:ac:78:06:64:2e:9e:07:d7:e0:b9:d7:
         1a:94:5c:b2:68:cc:48:5c:b5:b3:1a:8c:28:1d:8c:72:2d:98:
         29:03:bc:9a:c1:29:1d:dd:d7:69:b6:23:79:eb:0a:d3:a0:94:
         53:ca:26:df:2b:4c:ce:82:7c:08:26:da:c3:b6:9d:c3:02:b1:
         5c:54:fa:e9:09:e8:0f:34:0a:9d:23:35:ae:3f:de:3b:3d:5d:
         dd:33:25:32:f2:9e:f5:55:e3:8e:80:7f:b9:b9:4d:54:b6:22:
         20:98:c7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:36:16 2025 by rpki-client