Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
File:                     Ijb_q094oHoZuC6P3m3C2wZK278.mft (raw, json)
Hash identifier:          4BzlVIiSwsu5Zy/xHzvyI1NHG5D8iLucQ9ax84Q+ZXo=
Subject key identifier:   0E:6B:2C:88:1B:52:68:33:BA:61:76:8B:D8:22:D7:5B:9B:07:04:B2
Authority key identifier: 22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF
Certificate issuer:       /CN=F36C2BF2AR/serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
Certificate serial:       0187
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
Manifest number:          0186
Signing time:             Sat 07 Jun 2025 04:35:22 +0000
Manifest this update:     Sat 07 Jun 2025 04:35:21 +0000
Manifest next update:     Mon 09 Jun 2025 04:35:21 +0000
Files and hashes:         1: Ijb_q094oHoZuC6P3m3C2wZK278.crl (hash: 819K+F9uGV29bdPdsoi/zDrN+Qv8z+cVXspgKmppAKw=)
                          2: 5E52EDD81C4911EFA98F9E317DDC24C2.roa (hash: Zixh/aFPuo2zs0C1hGvWJdvczTuAhUvvaA1FyHi6zv8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                          rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 09 Jun 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2BF2AR, serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
        Validity
            Not Before: Jun  7 04:35:21 2025 GMT
            Not After : Jun  9 04:35:21 2025 GMT
        Subject: CN=6843c18a-7399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:12:d4:a7:f3:75:91:0b:fa:97:d6:22:5e:53:
                    61:85:ed:e9:a8:2d:28:bc:49:7f:91:a4:71:22:cc:
                    ab:89:1b:63:bc:07:98:f5:3c:e6:a1:b7:2b:0d:4f:
                    18:89:21:66:d2:7d:e7:28:cf:46:52:35:3e:73:d6:
                    8c:4e:ef:34:68:2c:e4:af:93:4a:a0:c9:5c:ac:36:
                    34:0d:f8:4a:8d:42:b2:6e:0a:69:c2:46:3a:db:56:
                    bf:a3:3e:6f:be:ce:0c:3a:ca:a0:f2:bd:37:d1:87:
                    7f:fa:71:89:6b:4e:a7:e6:71:fd:74:28:91:89:b3:
                    b5:3c:55:86:54:09:09:5d:fe:bf:5f:8d:65:c8:11:
                    28:d3:78:20:c5:19:1c:ba:8c:35:5f:26:98:ba:cf:
                    ab:b5:79:61:23:6f:e2:65:a0:ac:37:cd:b7:73:aa:
                    37:15:e8:8e:d9:63:c7:be:68:84:d2:17:83:f8:d9:
                    56:39:86:f0:c2:e2:54:87:9e:53:cd:92:45:54:ed:
                    46:df:b9:c5:42:ef:77:28:37:69:22:be:a0:eb:2f:
                    a6:c2:e6:06:79:13:ab:14:72:49:d4:be:a4:19:d3:
                    9c:03:0a:0b:e0:4c:60:d1:09:da:26:3d:f9:27:f0:
                    26:bc:db:c7:c6:46:5b:1e:64:49:8c:60:6d:fe:10:
                    42:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6B:2C:88:1B:52:68:33:BA:61:76:8B:D8:22:D7:5B:9B:07:04:B2
            X509v3 Authority Key Identifier:
                keyid:22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:8b:33:7b:f3:a8:9b:e2:da:70:7c:36:ac:be:b5:00:81:e3:
         2f:ff:1e:cf:2f:1e:37:d3:40:32:52:92:d8:9e:33:ae:40:a9:
         e2:3f:28:e2:bf:d6:c4:61:58:f7:4c:b9:6a:8e:1f:5f:7a:02:
         e1:67:bf:ff:03:de:3f:4d:a9:dd:f5:a4:da:c0:40:d5:37:92:
         3c:b7:6f:0d:88:af:af:90:ec:64:03:ed:5e:ab:c2:d4:81:c3:
         71:58:68:29:81:ce:4a:57:25:72:81:e5:88:6e:db:b7:e5:90:
         45:31:4f:f4:59:ad:f6:79:47:97:d6:a7:31:df:40:d8:e4:c3:
         0e:3c:c3:e0:9d:80:f8:9d:05:37:4c:9f:bc:6c:9c:47:06:e6:
         c0:38:62:55:99:a8:25:3a:05:a1:c6:d6:41:81:14:8f:07:9e:
         f7:c3:2d:14:84:84:25:b3:94:05:e9:d4:9d:93:be:ce:77:be:
         e5:1d:22:1f:15:f2:4b:12:5e:8f:bd:cf:bd:0e:bd:b4:88:3a:
         20:83:94:60:67:74:fb:47:b3:00:86:cc:24:4c:d9:fc:60:a1:
         4c:e5:9f:51:52:18:06:f1:b7:f8:09:4d:ad:df:38:01:ae:f7:
         fb:3c:6a:9d:d5:ec:63:50:96:84:b8:37:f7:8d:ee:3f:4a:29:
         c0:51:44:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:14:31 2025 by rpki-client