Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.mft
File:                     E3S5w_RfdBg91PcrFhAlKt-xJiA.mft (raw, json)
Hash identifier:          89sjk3dsciQPN7+k2UDMs4WrPvfADjm8pSocNYEGeFw=
Subject key identifier:   E5:D6:FA:2D:D4:A0:62:94:94:77:C9:1C:D3:A8:50:CD:4D:CF:70:D1
Authority key identifier: 13:74:B9:C3:F4:5F:74:18:3D:D4:F7:2B:16:10:25:2A:DF:B1:26:20
Certificate issuer:       /CN=F36B2802AR/serialNumber=1374B9C3F45F74183DD4F72B1610252ADFB12620
Certificate serial:       07E9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/E3S5w_RfdBg91PcrFhAlKt-xJiA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.mft
Manifest number:          07E8
Signing time:             Sun 20 Apr 2025 01:44:36 +0000
Manifest this update:     Sun 20 Apr 2025 01:44:34 +0000
Manifest next update:     Tue 22 Apr 2025 01:44:34 +0000
Files and hashes:         1: E3S5w_RfdBg91PcrFhAlKt-xJiA.crl (hash: sorglHaUQHZUqTzwFM32aF6CcJoA4mVyiw104dJgG20=)
                          2: 0339DB7E0F8C11EAB91E1463F8AEA228.roa (hash: VEE0Ckp6I2VcUJ5B3ZZaJwDqeoS1pgqeABgMWtZnTH8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.mft
                          rsync://rpki.afrinic.net/repository/arin/E3S5w_RfdBg91PcrFhAlKt-xJiA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Apr 2025 01:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2025 (0x7e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2802AR, serialNumber=1374B9C3F45F74183DD4F72B1610252ADFB12620
        Validity
            Not Before: Apr 20 01:44:34 2025 GMT
            Not After : Apr 22 01:44:34 2025 GMT
        Subject: CN=68045183-c8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:0a:b3:aa:63:1f:8c:40:39:51:ff:67:1d:
                    75:a4:57:c7:06:bb:75:6c:ad:58:86:56:e2:c2:d3:
                    01:68:c8:dc:65:33:0a:cf:e1:c4:d6:ac:e6:b8:47:
                    48:c7:d3:89:6e:68:71:15:dc:87:b8:d6:94:e0:43:
                    ad:9f:3f:24:e8:58:bb:80:4b:1e:f8:9d:54:59:c8:
                    67:dd:9d:ec:f4:7b:93:51:f7:ab:21:8d:fb:04:71:
                    40:64:19:b1:da:2c:dd:d1:c1:70:fb:dc:75:50:92:
                    37:03:87:af:43:d8:d9:f7:3c:11:d9:5b:85:34:7e:
                    56:7e:68:0c:a7:ff:ad:5e:98:27:ec:df:55:a1:f9:
                    b9:ad:77:8d:b7:e4:d4:d7:23:3d:38:cc:e1:b2:cc:
                    7e:3d:93:65:db:43:69:59:80:00:bc:77:98:73:7b:
                    37:05:56:4d:d1:98:33:5e:21:44:d6:de:c6:76:d5:
                    90:43:12:c8:a8:ab:75:81:18:34:2a:b7:64:d5:68:
                    43:a2:6c:cd:00:ef:5f:ab:da:bc:3c:4a:0d:cb:87:
                    6c:45:32:c1:78:7e:90:3e:f6:1d:b1:cb:70:f5:fc:
                    b2:a9:75:04:0d:50:3a:e3:e4:43:c4:93:3c:6e:93:
                    a8:64:f0:cf:fa:3d:33:69:4a:07:e3:4a:9e:66:c4:
                    2f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D6:FA:2D:D4:A0:62:94:94:77:C9:1C:D3:A8:50:CD:4D:CF:70:D1
            X509v3 Authority Key Identifier:
                keyid:13:74:B9:C3:F4:5F:74:18:3D:D4:F7:2B:16:10:25:2A:DF:B1:26:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/E3S5w_RfdBg91PcrFhAlKt-xJiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2802/9C4B6D560F8B11EA9ADDAE62F8AEA228/E3S5w_RfdBg91PcrFhAlKt-xJiA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:4a:ee:07:a6:7e:b6:ec:59:2e:30:70:5c:76:2a:a6:2e:d3:
         07:90:6a:03:20:96:3f:c3:74:c2:55:12:2e:ff:ba:a6:2f:c1:
         3c:d4:78:18:bf:8e:56:15:86:d2:f5:ea:73:b4:59:76:be:b3:
         53:e9:00:18:ce:b4:f1:a0:f5:3d:6c:bf:90:8d:0c:4a:7e:a3:
         96:18:9d:8e:cb:76:fe:6c:0d:19:e9:6e:75:04:e8:82:3a:dd:
         23:e3:a9:ca:77:5d:ae:b8:42:03:05:c6:85:50:a0:a3:e3:fd:
         37:3d:2c:6e:ca:33:42:d4:30:a3:06:78:5b:da:13:e7:34:25:
         da:51:76:3d:5d:9d:24:82:dc:90:73:2e:ff:31:64:63:20:ae:
         76:c9:ab:8f:32:b8:e4:64:17:26:10:27:0a:98:5b:f3:93:c2:
         6e:63:c5:cc:7d:fb:28:19:7d:5f:b0:a8:d4:60:0f:4b:b4:47:
         08:9d:ca:bb:4f:03:c3:14:6b:cb:0c:04:c8:43:25:27:56:9f:
         66:d7:f6:ba:4d:02:ec:3f:81:27:6b:d6:35:42:10:b0:fa:d9:
         50:68:41:fd:58:ed:d1:72:a5:88:49:e1:d4:eb:2d:be:56:62:
         3a:cc:11:bc:e5:27:73:2e:cf:d6:b1:a6:92:61:55:fc:21:9e:
         b7:1d:07:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:31:24 2025 by rpki-client