Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
File:                     3MPWc23vjmmxdsLjgI6oQGpetKE.mft (raw, json)
Hash identifier:          cAr0c/Ab0CwjmlfZl2BR+6eMk1KVhNweMsKPXgUTa8M=
Subject key identifier:   1F:B3:A4:11:0C:4A:F9:17:88:0B:8A:B3:7E:DF:F5:92:67:58:4E:30
Authority key identifier: DC:C3:D6:73:6D:EF:8E:69:B1:76:C2:E3:80:8E:A8:40:6A:5E:B4:A1
Certificate issuer:       /CN=F36A2F84AR/serialNumber=DCC3D6736DEF8E69B176C2E3808EA8406A5EB4A1
Certificate serial:       0581
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
Manifest number:          057E
Signing time:             Mon 21 Apr 2025 02:26:46 +0000
Manifest this update:     Mon 21 Apr 2025 02:26:45 +0000
Manifest next update:     Wed 23 Apr 2025 02:26:45 +0000
Files and hashes:         1: 3MPWc23vjmmxdsLjgI6oQGpetKE.crl (hash: fUJ5KzJEscR+EitLCdYi43PgcR9cLV975mSU9oDxvkI=)
                          2: 5F04C4C62D9B11ECA647564FD8A014CE.roa (hash: zW0DV4hdw90fXmQHrES0qIG730a3Er4NWHsJMqXehd8=)
                          3: 09859B12EEB511EBAC07A132D8A014CE.roa (hash: QJgNFrSSnI5wUL7064SxE7ymTJEcB6oc8kqJd8ZGe2E=)
                          4: D68FB06AEEC011EB8A6E3C44D8A014CE.roa (hash: FZohHGP60efclGdlHNaaNbxSbBTri6OJhgg/NinDFR0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
                          rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1409 (0x581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2F84AR, serialNumber=DCC3D6736DEF8E69B176C2E3808EA8406A5EB4A1
        Validity
            Not Before: Apr 21 02:26:45 2025 GMT
            Not After : Apr 23 02:26:45 2025 GMT
        Subject: CN=6805ace6-9629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:de:22:13:bb:e2:9e:12:5b:88:73:2f:b5:37:
                    05:ba:57:62:7a:59:e0:79:fa:dc:4f:1e:4f:2b:40:
                    0a:ad:83:59:ff:62:dc:27:b2:20:e8:fb:6f:9a:52:
                    7e:02:bd:49:24:5a:11:c6:ed:92:ac:87:54:90:c8:
                    09:99:e3:3e:33:78:bd:36:f6:65:37:01:46:4a:31:
                    4e:03:b1:ae:b3:9b:2d:ad:69:e5:0f:45:8b:a1:24:
                    16:45:ff:1f:41:92:e4:cd:78:3c:f4:d7:cf:5b:c0:
                    3e:0a:b6:a5:5e:a3:80:a1:7c:51:ea:6c:68:e3:3d:
                    46:0e:d7:56:43:3c:2f:ea:6f:94:01:84:64:4c:7a:
                    6d:13:b1:0e:e1:e4:80:c9:95:52:fe:af:a1:0b:bb:
                    7a:1c:d6:06:08:28:23:60:96:a0:7b:12:52:2a:76:
                    a1:d1:0e:0c:c0:00:ba:d9:c6:d0:53:49:18:90:4b:
                    66:4f:5e:a6:9b:d4:01:bc:03:93:1a:10:21:ee:21:
                    c6:ac:04:2c:75:5a:4f:5c:21:1d:3f:b7:de:ae:a6:
                    77:be:0b:98:82:87:4c:02:f9:6b:b9:17:56:db:a5:
                    2a:78:d6:bc:98:14:f1:ac:9a:45:4a:95:dd:3c:2e:
                    c9:fe:21:a6:77:2c:cc:a1:d1:4b:df:f6:83:80:82:
                    9b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B3:A4:11:0C:4A:F9:17:88:0B:8A:B3:7E:DF:F5:92:67:58:4E:30
            X509v3 Authority Key Identifier:
                keyid:DC:C3:D6:73:6D:EF:8E:69:B1:76:C2:E3:80:8E:A8:40:6A:5E:B4:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:20:25:0e:a3:06:71:87:1b:01:1a:3d:44:8f:01:9e:1e:4f:
         83:b5:4d:d5:ff:e3:b9:b9:74:9e:5d:a1:22:24:51:6c:57:ec:
         4e:ee:3c:7d:e0:05:9e:9e:48:83:ba:53:94:1a:02:d6:51:89:
         b6:25:4f:3f:6f:94:5e:70:16:2c:cf:b2:0d:59:59:85:5b:73:
         cf:16:09:54:fd:d0:db:3f:64:12:b5:06:d2:8a:5e:b6:43:c5:
         9a:51:66:b5:72:0c:c5:75:85:47:8b:8f:26:47:c3:aa:08:f1:
         2a:e1:f5:e3:13:97:86:14:c5:29:56:7c:9c:25:38:e5:64:28:
         15:7b:8d:d3:dc:52:0d:5f:32:1a:07:75:40:f9:e4:fa:bb:89:
         2a:6c:dd:ae:81:87:e3:82:ea:b5:80:f0:a1:72:ab:dd:00:1a:
         80:a1:22:12:07:3c:c3:b5:69:2e:2b:67:94:42:be:76:79:8c:
         e7:0d:cd:18:41:1c:97:d8:e3:06:ee:5b:c0:bd:8d:7e:3a:78:
         f3:31:e3:8d:08:55:61:80:ae:f6:09:8b:93:41:20:96:db:fc:
         82:85:b1:d5:9a:1f:49:3f:38:5a:7c:ad:0b:55:17:a6:ec:70:
         79:38:7d:9d:f5:85:e1:0d:1b:6e:22:21:5e:7c:12:7b:ee:62:
         81:f9:6f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:12:42 2025 by rpki-client