Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
File:                     16R0hb-cpGerJ5HbX06JVar0dkA.mft (raw, json)
Hash identifier:          Y3he7B4LB/DDHay5jjkrCQKHR4DFWit20Jj+iHklFmA=
Subject key identifier:   ED:08:FE:EE:DC:E7:6F:00:53:A0:1B:53:BF:C7:F7:19:30:17:98:CF
Authority key identifier: D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40
Certificate issuer:       /CN=F3614F54AR/serialNumber=D7A47485BF9CA467AB2791DB5F4E8955AAF47640
Certificate serial:       0597
Authority info access:    rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
Manifest number:          0596
Signing time:             Mon 28 Apr 2025 02:28:22 +0000
Manifest this update:     Mon 28 Apr 2025 02:28:20 +0000
Manifest next update:     Wed 30 Apr 2025 02:28:20 +0000
Files and hashes:         1: 16R0hb-cpGerJ5HbX06JVar0dkA.crl (hash: +vp5v+qAs/4dF31au2F/uQTadDPeP6aQKqYiL2sN1bA=)
                          2: 115C93BAE16111EB96804153F8AEA228.roa (hash: vVJYRPavoXyCLCs90IUxYtns4SSgNRSaXSbPs6FZN1c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
                          rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1431 (0x597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614F54AR, serialNumber=D7A47485BF9CA467AB2791DB5F4E8955AAF47640
        Validity
            Not Before: Apr 28 02:28:20 2025 GMT
            Not After : Apr 30 02:28:20 2025 GMT
        Subject: CN=680ee7c6-c9ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:22:b7:f6:ff:47:91:cf:35:12:20:66:19:56:
                    99:da:f1:5d:c1:2f:77:d3:13:15:18:e9:1c:e7:db:
                    04:23:b2:a3:75:25:c1:4d:a5:aa:b6:04:08:7c:88:
                    51:d8:01:69:aa:c6:60:88:40:53:1b:5b:67:8d:99:
                    94:b6:e8:70:e0:ac:70:c1:29:e2:7b:22:50:b3:a9:
                    b4:b4:39:6c:da:39:63:3c:73:ba:e1:63:83:95:d5:
                    53:04:37:a2:1f:39:12:bc:ad:b7:48:94:83:f1:7d:
                    b1:cc:ac:54:02:5f:c5:71:df:ed:4d:5b:2e:68:eb:
                    28:32:a1:33:22:20:1a:13:d3:58:64:fb:86:71:f9:
                    b8:a2:be:3e:2f:24:8e:98:72:0b:ad:66:0b:26:ea:
                    78:7a:c3:af:4d:0d:7c:89:98:d8:30:09:40:25:67:
                    ff:ca:71:0f:3f:af:16:d1:e8:0f:82:61:2e:2c:6e:
                    5a:4b:1c:d6:5a:d5:25:a9:e0:cc:32:61:a3:bf:b8:
                    c6:64:20:2f:28:2d:1f:be:10:82:44:25:1d:62:b7:
                    73:e3:c5:7c:a3:d0:ee:0c:b9:d1:71:e2:ea:19:8f:
                    90:fb:2a:d0:b3:b5:d1:94:72:93:ea:40:91:5a:2c:
                    f7:6c:60:80:c8:a2:96:17:d8:48:07:6c:11:2f:a8:
                    fd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:08:FE:EE:DC:E7:6F:00:53:A0:1B:53:BF:C7:F7:19:30:17:98:CF
            X509v3 Authority Key Identifier:
                keyid:D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:36:ca:26:27:45:21:38:60:2a:c2:7a:75:6d:b8:34:99:73:
         1e:a7:4c:4d:02:f5:7b:52:93:02:32:95:3a:62:cf:80:d9:d9:
         30:8d:6b:8a:b0:af:07:3b:75:3e:4c:0a:41:33:3f:70:e0:f2:
         42:1a:dc:54:29:b6:10:e9:7f:77:8c:f0:bf:67:3c:89:71:7b:
         b3:11:87:c5:f1:65:f2:69:c5:bf:41:85:b4:e3:a1:e9:c7:dd:
         6d:ca:9f:7f:5b:f2:ab:c1:bd:db:6d:61:90:aa:11:22:7d:e9:
         b6:ae:2c:ec:74:f1:84:15:ab:96:8e:6f:92:9f:3f:c3:d1:74:
         03:ce:ac:a6:ba:86:1f:e7:10:b6:65:14:0d:3c:15:27:00:01:
         16:8f:1b:e8:58:46:0b:60:05:91:7f:be:fb:3e:af:0b:bd:5a:
         00:d2:9f:a2:34:ac:f0:32:b6:54:c7:ad:b0:1d:11:fb:1b:51:
         08:86:91:4a:72:b9:88:c7:ec:3a:20:8c:79:e0:87:fb:40:10:
         98:81:b0:94:8c:b3:98:60:32:e4:6e:98:e6:43:30:f3:79:68:
         ad:75:a2:b9:39:a8:be:c9:bf:fe:ec:45:1e:e2:d4:9f:0d:b2:
         81:d7:7d:0b:ae:70:00:5a:10:3d:c1:02:a1:f8:f6:53:c7:48:
         fe:4e:84:1b
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBZcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTRGNTRBUjExMC8GA1UEBRMoRDdBNDc0ODVCRjlDQTQ2N0FCMjc5MURCNUY0RTg5
NTVBQUY0NzY0MDAeFw0yNTA0MjgwMjI4MjBaFw0yNTA0MzAwMjI4MjBaMBgxFjAU
BgNVBAMTDTY4MGVlN2M2LWM5ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCmIrf2/0eRzzUSIGYZVpna8V3BL3fTExUY6Rzn2wQjsqN1JcFNpaq2BAh8
iFHYAWmqxmCIQFMbW2eNmZS26HDgrHDBKeJ7IlCzqbS0OWzaOWM8c7rhY4OV1VME
N6IfORK8rbdIlIPxfbHMrFQCX8Vx3+1NWy5o6ygyoTMiIBoT01hk+4Zx+biivj4v
JI6YcgutZgsm6nh6w69NDXyJmNgwCUAlZ//KcQ8/rxbR6A+CYS4sblpLHNZa1SWp
4MwyYaO/uMZkIC8oLR++EIJEJR1it3PjxXyj0O4MudFx4uoZj5D7KtCztdGUcpPq
QJFaLPdsYIDIopYX2EgHbBEvqP0XAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU7Qj+
7tznbwBToBtTv8f3GTAXmM8wHwYDVR0jBBgwFoAU16R0hb+cpGerJ5HbX06JVar0
dkAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE0RjU0L0ZBMDlGRTFBRTE1RjExRUI4OTJFQzY1MUY4QUVBMjI4LzE2UjBo
Yi1jcEdlcko1SGJYMDZKVmFyMGRrQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
LzE2UjBoYi1jcEdlcko1SGJYMDZKVmFyMGRrQS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MTRGNTQvRkEwOUZFMUFFMTVGMTFFQjg5MkVDNjUxRjhBRUEy
MjgvMTZSMGhiLWNwR2VySjVIYlgwNkpWYXIwZGtBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBpNsomJ0UhOGAqwnp1bbg0mXMep0xNAvV7
UpMCMpU6Ys+A2dkwjWuKsK8HO3U+TApBMz9w4PJCGtxUKbYQ6X93jPC/ZzyJcXuz
EYfF8WXyacW/QYW046Hpx91typ9/W/Krwb3bbWGQqhEifem2rizsdPGEFauWjm+S
nz/D0XQDzqymuoYf5xC2ZRQNPBUnAAEWjxvoWEYLYAWRf777Pq8LvVoA0p+iNKzw
MrZUx62wHRH7G1EIhpFKcrmIx+w6IIx54If7QBCYgbCUjLOYYDLkbpjmQzDzeWit
daK5Oai+yb/+7EUe4tSfDbKB130LrnAAWhA9wQKh+PZTx0j+ToQb
-----END CERTIFICATE-----
Generated at Mon Apr 28 05:36:35 2025 by rpki-client