Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft
File:                     F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft (raw, json)
Hash identifier:          dIyBASlkMgpAza9gJsD0NGhofKsA63oLeKpCuUnM4b8=
Subject key identifier:   82:BC:9F:89:45:20:50:7A:0E:C3:5E:FF:49:25:6E:72:FB:5A:6D:3E
Authority key identifier: 17:CB:18:43:BC:A4:72:24:35:28:80:56:07:0A:06:71:56:07:7F:F8
Certificate issuer:       /CN=F36EC460AR/serialNumber=17CB1843BCA4722435288056070A067156077FF8
Certificate serial:       04C4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft
Manifest number:          04BE
Signing time:             Sun 20 Apr 2025 02:47:35 +0000
Manifest this update:     Sun 20 Apr 2025 02:47:34 +0000
Manifest next update:     Tue 22 Apr 2025 02:47:34 +0000
Files and hashes:         1: F8sYQ7ykciQ1KIBWBwoGcVYHf_g.crl (hash: gHqEVvmLk3DOn/bEfj7gmZBBWj8sbrSfptwVhwdDsHQ=)
                          2: F54BCED8037411EEB65CC71D4AD9E6FC.roa (hash: y3ZcOlV2XAYu6FcG4OWjKOuralzgKPHqgta3o0WG3QI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft
                          rsync://rpki.afrinic.net/repository/arin/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Apr 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1220 (0x4c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC460AR, serialNumber=17CB1843BCA4722435288056070A067156077FF8
        Validity
            Not Before: Apr 20 02:47:34 2025 GMT
            Not After : Apr 22 02:47:34 2025 GMT
        Subject: CN=68046047-74aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:55:12:60:85:7e:3f:8d:89:a1:51:21:88:16:
                    f8:82:60:6d:68:e2:b5:76:95:7b:fe:63:c5:94:67:
                    31:de:89:c0:ac:9d:ea:c8:f9:1a:86:8d:1f:25:50:
                    cd:1d:93:d0:dc:ac:ac:99:49:ed:9d:15:3c:6c:5e:
                    6f:71:6f:1e:d1:ca:13:c3:22:87:24:03:98:77:17:
                    ea:b9:b1:9e:0b:1e:02:91:e7:25:fc:33:ba:39:02:
                    3e:87:15:0f:78:7a:6d:06:94:b3:25:6f:79:d3:9e:
                    6c:eb:41:6c:5a:2a:df:bf:94:a0:96:2f:90:2a:6a:
                    de:e4:c4:02:6b:25:f6:a9:3b:e5:a0:b3:25:94:c5:
                    59:38:ce:11:3c:57:5a:40:9f:81:4f:4e:85:78:04:
                    3a:e6:1d:f7:53:2a:78:f5:b8:6a:25:00:f2:dd:24:
                    3e:96:c6:3d:77:61:c8:e4:7c:84:0e:91:14:4d:a0:
                    6c:09:fd:9e:16:b8:63:43:7d:94:8e:9b:c0:64:9a:
                    1a:2e:51:6d:36:88:fe:26:c6:6e:09:da:dc:d5:53:
                    ff:39:92:3e:e2:8b:38:d3:d4:55:8a:56:1b:11:0c:
                    9a:a1:22:c2:e7:bd:3d:0d:be:2d:bc:5f:e6:00:56:
                    ec:04:00:b2:a3:af:39:9a:8b:0a:ff:83:77:8c:68:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:BC:9F:89:45:20:50:7A:0E:C3:5E:FF:49:25:6E:72:FB:5A:6D:3E
            X509v3 Authority Key Identifier:
                keyid:17:CB:18:43:BC:A4:72:24:35:28:80:56:07:0A:06:71:56:07:7F:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC460/982107B4898111EC906D03B45A40D577/F8sYQ7ykciQ1KIBWBwoGcVYHf_g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:c7:8d:0a:30:d3:65:7b:48:54:1f:a7:56:b9:62:5c:85:91:
         83:79:16:2a:35:57:eb:10:6c:94:c2:02:be:f3:2a:5d:95:eb:
         62:d2:01:c6:0b:ac:ba:3e:d2:a4:c4:a1:46:c9:c3:d5:9e:31:
         d9:78:d0:e2:f1:b6:07:a0:81:51:af:1b:28:7f:04:1e:7e:ce:
         50:fd:d8:12:e5:d7:a8:8a:be:1e:f4:f8:1f:21:8c:f3:e3:d8:
         68:0f:0d:65:33:d3:84:de:37:9a:d2:86:e9:c5:99:77:b5:4b:
         66:83:30:c3:21:e9:4f:97:fd:1b:f3:f8:15:8c:2c:7d:85:50:
         2c:04:ce:4a:4b:eb:81:40:a0:e1:13:90:3a:6e:cd:42:f9:27:
         c7:9a:1e:c9:79:3e:69:fc:cf:2d:56:61:90:32:7b:56:94:11:
         66:d8:2b:4f:53:7c:de:28:b5:80:05:79:17:a5:cb:dd:2a:1e:
         58:96:48:2b:c7:32:2a:8f:62:19:e0:8a:7e:ef:5c:47:a8:9c:
         f2:3c:17:ff:d0:df:85:0a:94:58:09:da:4d:49:da:41:89:8a:
         01:45:79:62:3c:9c:76:de:8b:8f:e5:f5:fd:00:64:53:27:01:
         4b:00:ea:f5:a9:77:e1:f1:73:b1:84:3e:3a:f0:cc:35:80:af:
         51:6e:35:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:05:11 2025 by rpki-client