Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
File:                     ytp6EgVTRDeaE65t57onjrxRalg.mft (raw, json)
Hash identifier:          10OzKK4f9pdGfypvq82LW9wEqp6nzQOPZfPfn3cZ3mo=
Subject key identifier:   D8:BD:19:CF:8C:A9:60:99:BC:49:D1:5D:A0:3F:55:B0:C2:81:29:9D
Authority key identifier: CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58
Certificate issuer:       /CN=F36C5A07AR/serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
Certificate serial:       0535
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
Manifest number:          0534
Signing time:             Mon 21 Apr 2025 02:37:56 +0000
Manifest this update:     Mon 21 Apr 2025 02:37:55 +0000
Manifest next update:     Wed 23 Apr 2025 02:37:55 +0000
Files and hashes:         1: ytp6EgVTRDeaE65t57onjrxRalg.crl (hash: 1D7cojTKhpn5yySmbAHuOCR7ynUq5J8b8OnBgy4nLFg=)
                          2: D463691425AA11EC929C1A5AD8A014CE.roa (hash: zOn0KCR3WUQ3sl7nvMO+r6apzohvakNE95t03lLWHiA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                          rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1333 (0x535)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5A07AR, serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
        Validity
            Not Before: Apr 21 02:37:55 2025 GMT
            Not After : Apr 23 02:37:55 2025 GMT
        Subject: CN=6805af84-b8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f6:bd:bf:e5:17:8e:f2:c3:49:2f:9c:25:72:
                    92:05:d5:35:2e:1b:8b:74:a5:45:e2:5b:16:90:66:
                    ce:7a:90:a7:44:e5:09:6a:3b:4d:1f:69:46:67:82:
                    d9:b8:ad:1e:94:32:7c:09:f1:34:8e:47:c9:72:d0:
                    f8:50:81:1b:df:14:18:1a:92:2b:07:4e:cf:82:fe:
                    59:bb:00:bc:fb:9f:88:de:34:42:8d:a3:94:53:9b:
                    3d:78:43:d9:dc:62:83:7f:64:f2:6e:09:52:fe:53:
                    88:99:8b:b3:f1:a3:e3:8f:de:27:c1:cc:c3:9e:bc:
                    31:f0:c9:b7:7e:a1:43:d4:1f:ac:f0:00:3b:39:3f:
                    86:b8:ed:b7:5b:c6:44:fd:46:55:a6:3c:78:2c:34:
                    69:f4:bc:1b:9b:9b:52:6c:c6:10:21:64:43:c5:c5:
                    fb:c2:aa:ac:24:97:9c:19:2c:8a:89:c0:8a:9c:1b:
                    36:9f:8d:14:30:09:e9:f8:ec:88:16:98:d4:d3:9f:
                    3a:81:e3:a4:63:16:12:3f:26:e7:c8:6a:39:2f:44:
                    7c:91:fe:f7:8e:7a:71:4f:08:88:12:2d:62:49:fd:
                    bd:fa:9d:64:6c:3c:2c:10:6e:a4:0b:69:52:b7:3f:
                    9d:48:5d:c3:79:e6:81:73:7a:93:37:da:e4:47:b3:
                    14:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BD:19:CF:8C:A9:60:99:BC:49:D1:5D:A0:3F:55:B0:C2:81:29:9D
            X509v3 Authority Key Identifier:
                keyid:CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:9a:55:0a:32:8b:bc:e9:71:23:4b:d7:84:76:b4:1d:52:06:
         52:d8:53:24:24:3d:3d:8a:63:01:b0:7e:b0:54:b0:bb:d3:9d:
         66:04:d1:fb:2d:eb:e0:da:d4:35:9a:21:3b:49:bb:98:0e:75:
         c2:5d:82:ac:15:7a:35:2a:cc:d5:82:cf:f7:fa:b2:57:31:b1:
         2b:65:9e:4a:cd:af:5c:dc:25:91:6a:01:60:fd:25:0c:1a:fa:
         61:5d:49:7c:c5:aa:7f:dc:f4:cb:14:38:61:1e:d5:38:5b:94:
         9d:55:83:f7:0b:7c:29:17:f7:8c:89:46:e0:c6:bb:b6:77:e6:
         1a:71:9e:e2:dc:1b:3a:bd:02:52:2f:89:fe:f3:2b:4c:7b:85:
         67:92:61:01:10:6c:02:80:ce:e8:69:01:4b:46:b4:de:92:f5:
         73:39:c3:23:06:2d:d6:9b:26:30:75:0c:40:08:38:bb:95:f6:
         82:b2:19:62:ff:e6:66:8f:71:65:c9:f5:c3:46:91:67:9b:a1:
         e1:2e:6f:ec:07:52:2c:e5:2b:da:ba:91:a3:be:7c:99:83:39:
         25:9b:1a:9d:e1:93:d9:17:34:14:f1:90:ac:0d:e6:13:dd:f3:
         68:58:ae:74:3d:8b:7c:3b:50:86:5b:2e:56:18:d7:5f:e3:68:
         72:58:85:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:34:30 2025 by rpki-client