Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
File:                     dF3XcQDluqV1XTuTwPQnTCebbdc.mft (raw, json)
Hash identifier:          bIcMQrGbeevyYNu6pweOvFLCpuiyUTiPbErSi/bUQzY=
Subject key identifier:   D7:E3:92:FB:5F:48:21:CD:F0:5B:5A:EC:DB:01:D3:3A:AF:44:99:09
Authority key identifier: 74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7
Certificate issuer:       /CN=F36A39CEAR/serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
Certificate serial:       0322
Authority info access:    rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
Manifest number:          0321
Signing time:             Thu 31 Jul 2025 03:53:06 +0000
Manifest this update:     Thu 31 Jul 2025 03:53:05 +0000
Manifest next update:     Sat 02 Aug 2025 03:53:05 +0000
Files and hashes:         1: dF3XcQDluqV1XTuTwPQnTCebbdc.crl (hash: nb+UalsbLy3CapmaO898x7SWFyvYSYN2mDjy/W+idVY=)
                          2: 9D1F1EF4403611EF977FF944762E951A.roa (hash: hLeObmsi90Fg8VBqFqxqwLqUBn1VTFF0SZa65WhAxQ4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
                          rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 802 (0x322)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A39CEAR, serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
        Validity
            Not Before: Jul 31 03:53:05 2025 GMT
            Not After : Aug  2 03:53:05 2025 GMT
        Subject: CN=688ae8a2-0033
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a4:90:1e:c5:f9:d4:bc:01:af:30:46:33:ae:
                    b9:1a:59:6b:a9:f2:8c:bb:36:9b:16:45:5e:54:4e:
                    ba:ee:82:f7:2b:eb:98:f7:7f:56:8d:b3:6f:f7:7d:
                    fd:57:38:37:6a:55:88:70:0b:65:f2:0e:1e:1e:2a:
                    9b:2f:f7:22:f0:cb:85:32:08:c5:9b:85:7d:3c:fd:
                    30:3b:89:ed:90:f8:73:7a:6d:aa:f9:51:31:1f:fa:
                    2c:89:f6:5d:a3:8c:93:29:f1:60:e9:80:7c:ad:5e:
                    f8:6f:e5:6c:63:ed:bf:1b:39:e1:60:1d:8e:4f:cb:
                    d0:45:fb:18:c0:6f:f3:41:65:59:d5:5f:ee:fd:9f:
                    a5:8f:67:b4:a3:7e:81:a1:f4:d5:34:af:aa:39:5c:
                    16:f6:6a:6f:97:c3:38:9c:8d:4c:14:35:83:eb:44:
                    63:da:53:6a:d7:ef:30:58:8d:e5:c2:4c:ff:c3:67:
                    23:56:71:38:8b:98:fd:05:46:19:13:91:07:cd:3a:
                    76:92:c7:56:78:e7:e4:c8:68:e1:6d:62:43:ad:77:
                    94:b6:35:56:cc:44:bc:60:93:5d:5d:0c:ed:34:00:
                    a1:75:a3:ef:90:4f:ea:43:69:cb:a7:1e:01:53:d9:
                    15:60:2d:21:d8:eb:76:70:cb:f8:dc:93:04:b7:d6:
                    0c:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E3:92:FB:5F:48:21:CD:F0:5B:5A:EC:DB:01:D3:3A:AF:44:99:09
            X509v3 Authority Key Identifier:
                keyid:74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:31:3b:7e:1e:37:b0:c2:d4:e8:cb:71:8d:b7:2e:c3:38:5d:
         e5:13:fe:d2:f3:fe:b9:52:e5:c5:8d:f3:48:28:79:a9:99:02:
         38:3d:c4:09:18:6e:ce:93:60:41:22:28:79:73:76:f1:f6:a8:
         bc:85:b8:e4:5d:8e:17:8a:50:a6:5d:2c:d0:e2:a8:63:47:82:
         78:27:72:c3:43:08:9f:e7:78:df:e2:a2:18:7a:43:19:c4:2c:
         ab:fa:83:10:ca:f6:1f:ed:3c:2b:a6:e9:7b:cc:e1:8c:96:75:
         f5:01:5d:fd:82:3b:da:98:35:24:ca:2d:d3:82:f2:bc:45:21:
         2c:e3:c7:1c:93:3d:7f:e8:03:b3:4f:b0:e5:d6:fb:96:35:9d:
         88:5b:b4:f4:fa:9c:d5:81:92:02:86:8e:17:14:a7:bc:21:3b:
         9e:b8:b2:c0:44:b7:83:5c:78:91:0f:2e:48:c3:7d:14:f6:6a:
         4c:52:ae:fc:54:c6:9d:7e:00:5b:71:ab:36:ea:c7:fe:b4:ac:
         7d:33:65:0a:bb:33:0f:e0:b6:59:c8:74:c4:af:fb:44:1d:37:
         e4:a9:5f:9d:7d:f1:cf:d7:26:79:8a:74:80:ba:fd:22:48:1d:
         67:ee:29:a1:0c:83:e8:e4:b0:bb:5b:c0:56:21:4f:f5:1d:32:
         dd:48:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 13:08:55 2025 by rpki-client