Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
File:                     mpAdFskLYBlnVD3tV83q800LJz4.mft (raw, json)
Hash identifier:          Yq82U1Mpes77V+V1yPznDDbhA5b1ZE56tnQ444jJmcc=
Subject key identifier:   3F:05:92:39:3D:23:BA:29:36:BD:6E:48:04:7B:BD:FA:58:27:5E:38
Authority key identifier: 9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E
Certificate issuer:       /CN=F36ED442AR/serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
Certificate serial:       0E32
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
Manifest number:          0E32
Signing time:             Thu 12 Jun 2025 00:57:44 +0000
Manifest this update:     Thu 12 Jun 2025 00:57:43 +0000
Manifest next update:     Sat 14 Jun 2025 00:57:43 +0000
Files and hashes:         1: mpAdFskLYBlnVD3tV83q800LJz4.crl (hash: rpgHSk07wy/Dh2OG3gSzTV2EkbwMsYLZi8vpMJLOWyQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                          rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 14 Jun 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3634 (0xe32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED442AR, serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
        Validity
            Not Before: Jun 12 00:57:43 2025 GMT
            Not After : Jun 14 00:57:43 2025 GMT
        Subject: CN=684a2608-0956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:37:3b:f9:9e:ed:65:5f:27:39:5b:b6:4d:c2:
                    c5:72:6c:99:d2:40:1c:4f:b9:f9:fc:55:b6:18:38:
                    f2:b3:16:85:6a:f7:e6:82:90:39:24:72:da:bc:fe:
                    de:a4:2c:a2:01:ae:ca:09:8b:9f:07:7a:fc:8c:26:
                    ba:94:40:77:b3:f0:95:c3:c7:ff:f9:81:f2:a5:a4:
                    42:0f:08:c1:83:58:c6:f7:4b:ac:6b:63:0d:22:14:
                    92:20:7c:fb:59:05:0f:e3:79:66:28:59:a9:66:5c:
                    92:f8:bc:5d:20:dd:c9:27:33:48:f0:14:5f:ab:e0:
                    14:d4:e2:6b:5d:05:b4:f4:2f:fa:28:06:59:75:a0:
                    9d:65:8d:12:78:45:9e:78:c3:4c:6f:0b:07:69:c1:
                    32:d2:d8:1f:c5:92:fb:54:6d:a0:3b:8f:a6:d6:da:
                    4b:22:dc:4b:cc:7e:fe:2a:86:66:77:8b:9b:b0:30:
                    06:14:48:c4:8c:4f:be:a9:b6:38:73:a4:fd:e0:7d:
                    61:7e:78:0d:8b:fb:36:2c:d9:fc:b4:b0:0c:78:74:
                    7d:4b:a8:f0:6d:4f:8f:94:b5:12:55:d3:38:18:cc:
                    d1:d6:bc:f8:29:af:1a:bb:70:29:b4:b6:e1:bd:9d:
                    b3:ff:f7:d6:eb:11:00:0c:11:14:34:46:38:ad:87:
                    de:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:05:92:39:3D:23:BA:29:36:BD:6E:48:04:7B:BD:FA:58:27:5E:38
            X509v3 Authority Key Identifier:
                keyid:9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ff:b4:de:04:96:ea:b3:f1:30:f1:5e:b8:3f:c6:4e:30:84:
         13:1e:57:cf:df:1c:c0:e6:8c:ee:70:56:15:20:cb:83:b6:ed:
         b0:55:0b:05:a3:df:79:1f:e8:9b:e1:6d:31:ed:59:b5:23:cd:
         18:c5:39:76:71:c6:04:a1:8a:a4:0d:f0:49:2b:72:c0:5d:66:
         7c:df:c6:88:0a:b7:c6:6f:f1:e3:16:ee:a9:f2:74:8a:2e:04:
         ed:6b:cc:ba:bc:8e:8e:32:1e:7a:4e:02:61:f2:d6:34:e3:97:
         2f:65:76:8b:b8:fd:ba:03:51:73:3a:75:42:fb:b9:ae:f6:09:
         38:09:4a:52:e8:17:66:54:0d:ca:ea:11:4e:fe:3d:7c:f2:ce:
         24:27:1a:64:57:69:20:25:9d:db:c2:19:95:4e:fc:c2:44:48:
         5d:1e:97:2f:c5:e9:c9:f3:08:ca:05:ef:60:79:b3:f3:68:b5:
         81:96:f3:67:46:af:12:4c:11:c4:ab:47:d9:5a:92:bf:58:50:
         5b:b6:7f:ac:ee:da:70:8b:be:d4:8e:ff:36:fd:53:df:e4:02:
         43:59:2c:ee:43:5f:f2:be:1e:29:55:ac:9f:8f:db:ec:c2:d3:
         86:8c:0e:7b:11:bd:2c:ae:1d:c8:5b:e2:5a:3b:e9:75:2f:08:
         25:84:ce:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 17:47:55 2025 by rpki-client