Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
File:                     OckZvvVPpaxnw34-dWyhP7I0tT8.mft (raw, json)
Hash identifier:          FRTS1Y8dC2dPBp/XswKq61u+ve2NCjvqjE+uIkyZIcg=
Subject key identifier:   C5:E6:26:89:00:E0:CD:A6:FD:10:05:B2:C3:C7:53:31:CF:E4:4A:2C
Authority key identifier: 39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F
Certificate issuer:       /CN=F36F68F4AR/serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
Certificate serial:       01FA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
Manifest number:          01F8
Signing time:             Fri 06 Jun 2025 04:21:22 +0000
Manifest this update:     Fri 06 Jun 2025 04:21:21 +0000
Manifest next update:     Sun 08 Jun 2025 04:21:21 +0000
Files and hashes:         1: OckZvvVPpaxnw34-dWyhP7I0tT8.crl (hash: lRMeDcMsIytnGt7TqkwCjUC2Jh8VnEzfc3olNoL/Hp8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
                          rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 08 Jun 2025 04:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F68F4AR, serialNumber=39C919BEF54FA5AC67C37E3E756CA13FB234B53F
        Validity
            Not Before: Jun  6 04:21:21 2025 GMT
            Not After : Jun  8 04:21:21 2025 GMT
        Subject: CN=68426cc1-c9ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9e:ce:e5:e8:b4:2a:e1:e9:8b:4f:72:c9:9d:
                    46:71:ec:ec:ea:16:36:d5:3a:70:44:cc:19:a2:22:
                    10:cc:19:cf:9e:cd:b3:1b:9f:ee:ce:08:58:08:e9:
                    2a:ed:d4:f7:a8:0a:f2:6d:56:82:24:7e:81:55:df:
                    5d:39:32:df:b0:18:ac:ca:c5:c4:df:51:92:2c:13:
                    37:ae:5a:98:68:40:aa:b8:f2:d1:52:45:5f:e8:c7:
                    1d:9f:30:09:b7:1e:a8:9f:71:d3:63:fc:6c:af:02:
                    7d:9c:27:bf:af:d9:3f:d4:4b:dc:ef:dd:95:1a:68:
                    8e:63:ef:f7:ea:9e:5b:d6:52:53:e1:6a:7c:54:28:
                    63:2d:23:b1:35:64:41:e6:d4:97:e0:a0:6c:c5:40:
                    18:b4:67:b1:94:f5:29:5e:47:ad:3e:17:4c:cd:3f:
                    4f:73:6d:b3:42:8a:fd:d2:ce:a9:6c:76:76:d7:31:
                    2f:e0:fa:fb:51:ad:6a:4e:26:06:a3:90:87:7f:dd:
                    6d:69:81:00:a7:11:de:d1:a8:07:7f:f2:53:ca:73:
                    76:05:05:1a:95:88:bb:dd:a3:3c:66:88:f9:a3:0d:
                    a4:77:2e:8b:43:23:91:1f:6b:8a:3e:7e:68:d4:4b:
                    35:2f:65:04:d7:08:44:5d:02:9b:03:a6:26:8b:e6:
                    d2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E6:26:89:00:E0:CD:A6:FD:10:05:B2:C3:C7:53:31:CF:E4:4A:2C
            X509v3 Authority Key Identifier:
                keyid:39:C9:19:BE:F5:4F:A5:AC:67:C3:7E:3E:75:6C:A1:3F:B2:34:B5:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/OckZvvVPpaxnw34-dWyhP7I0tT8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F68F4/66F3832AC67311EEB3DB73A5775412E6/OckZvvVPpaxnw34-dWyhP7I0tT8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f3:b3:27:4b:33:c1:fb:68:1d:6c:76:0c:6b:2a:29:58:3a:
         fa:35:8d:b0:54:7e:b5:8d:67:fa:c5:72:19:29:26:1f:3c:61:
         06:55:ef:76:5f:f5:e6:5e:7e:3d:ee:f8:7d:47:e7:a9:7b:7f:
         c2:f5:b4:5f:b6:ef:e0:a4:85:77:7c:d2:74:a0:7c:d4:24:4b:
         6d:34:60:f0:70:2d:07:e7:ae:33:85:10:48:a7:9b:48:e4:98:
         08:10:51:ab:ba:97:f1:52:84:45:e7:07:47:f5:81:21:23:49:
         42:07:2e:b7:37:b3:5d:b8:dd:d1:73:e5:67:3f:f5:5c:81:64:
         f1:02:38:f7:0a:ce:7f:ea:b9:c1:00:14:c5:e2:cc:a3:ce:0e:
         3d:e4:5b:f3:dc:72:b8:41:f2:79:67:69:a5:1c:36:11:23:e7:
         12:c4:18:22:81:90:55:a0:14:e1:e3:07:d3:4a:47:a0:35:18:
         54:ed:71:cc:d7:b3:f0:87:4d:ad:12:8c:d2:d7:69:f4:d5:f3:
         a4:1d:6f:31:01:d5:6d:73:ef:d3:d7:cb:b9:0e:bb:23:a1:5e:
         9f:55:26:88:f7:b0:18:d3:ac:b8:4d:b7:52:e5:10:50:a6:4b:
         4f:30:96:61:cc:5f:ab:c8:2c:f8:e0:06:3e:fe:f1:96:b7:ac:
         0e:3b:87:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:51:54 2025 by rpki-client