Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
File:                     hgwk5dUBPSMjsLq0BphmwNwK7m0.mft (raw, json)
Hash identifier:          dsqHL6vPiyXhOu+VrYjahS3PY49aYsq7Qr2X9s71dLE=
Subject key identifier:   4F:88:55:9F:13:7D:52:6E:40:CD:1B:51:D7:05:E5:B1:6C:18:24:0D
Authority key identifier: 86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D
Certificate issuer:       /CN=F361F1DAAR/serialNumber=860C24E5D5013D2323B0BAB4069866C0DC0AEE6D
Certificate serial:       0235
Authority info access:    rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
Manifest number:          0234
Signing time:             Sun 27 Apr 2025 04:06:06 +0000
Manifest this update:     Sun 27 Apr 2025 04:06:05 +0000
Manifest next update:     Tue 29 Apr 2025 04:06:05 +0000
Files and hashes:         1: hgwk5dUBPSMjsLq0BphmwNwK7m0.crl (hash: bdy4oBk+yWRHPNOqwZqgUwyb3OoKsOcdOcAsrli6cGM=)
                          2: B2B100A8960311EE9DAC9C0ED25BE465.roa (hash: oJ8IY/etJV+KmOnt6rOLNi+N6bGbXrWs5HWdSZ42ZyE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
                          rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F1DAAR, serialNumber=860C24E5D5013D2323B0BAB4069866C0DC0AEE6D
        Validity
            Not Before: Apr 27 04:06:05 2025 GMT
            Not After : Apr 29 04:06:05 2025 GMT
        Subject: CN=680dad2e-fd18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:48:08:92:e8:69:8b:f9:84:19:e5:53:5a:05:
                    96:d1:38:ef:ff:86:f9:83:8a:16:38:e6:d8:b3:c9:
                    5a:36:01:38:a9:cd:af:71:a2:ba:af:5c:14:8e:ef:
                    89:99:b9:c1:c7:44:a3:66:d2:a3:87:e0:e6:5c:47:
                    0f:25:a6:de:b9:0f:17:2c:7a:e9:2f:a7:cb:21:04:
                    cc:6d:b0:e2:db:d5:7a:7f:d8:5d:e5:a3:03:a3:ac:
                    98:95:7a:d4:02:89:a4:3e:5a:99:d3:a7:f0:33:c3:
                    46:6f:8a:3f:29:a3:bf:45:2e:82:14:bb:50:d7:68:
                    65:e1:af:d6:f6:6f:0e:6c:5b:ff:08:4d:4b:44:0e:
                    be:6d:36:85:fe:25:36:24:1c:0f:77:39:dc:7b:20:
                    2a:f0:77:da:db:ab:0c:cb:89:20:b2:6b:4d:46:8c:
                    36:74:9c:20:dd:9e:36:6d:2f:c4:6d:62:a8:e8:70:
                    b2:d9:d5:6f:0f:90:4a:b4:fb:bb:0a:ce:14:4c:d9:
                    1c:06:57:e3:b7:20:e6:c2:6d:a5:56:85:88:ee:ce:
                    a1:e2:ba:f6:70:81:a7:88:91:ff:13:ca:9d:c8:c8:
                    c0:6d:3f:aa:d2:7b:e5:fe:7e:94:76:4e:b9:64:8b:
                    76:6c:68:a4:8b:c9:f6:10:75:f1:8b:81:e9:65:9b:
                    f9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:88:55:9F:13:7D:52:6E:40:CD:1B:51:D7:05:E5:B1:6C:18:24:0D
            X509v3 Authority Key Identifier:
                keyid:86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:39:3e:80:e7:c5:4c:80:77:64:13:c3:f5:e9:2e:ac:9e:57:
         3e:a7:94:24:33:fc:c9:e5:4f:e6:91:64:3a:7c:57:e4:43:fb:
         7d:b0:32:85:18:d9:a3:26:e2:3d:da:e3:49:b5:20:39:77:7e:
         98:ae:a9:60:f1:10:a1:d3:72:9d:3f:1f:6e:1e:d2:76:07:75:
         63:f7:ae:55:90:52:07:46:a0:3f:7f:5e:a9:76:b5:20:4d:6d:
         02:b6:8b:bb:23:9b:4c:be:42:cf:fe:65:91:c6:44:6f:cc:5b:
         99:48:51:f3:c8:1b:7b:e2:e0:50:41:20:b9:79:10:21:91:fb:
         43:64:16:d6:70:2a:08:27:78:6d:62:ff:f8:36:7d:b5:ea:4e:
         69:9f:31:c3:09:b9:cf:1b:ca:eb:5b:94:a1:d2:25:dd:63:91:
         dd:da:f7:cf:25:97:93:d6:5e:16:5f:4d:31:e4:a0:16:34:86:
         34:49:d4:17:31:02:4d:eb:51:8c:f8:5a:85:a8:7a:8b:ac:ff:
         2c:b3:1c:44:ee:ca:f8:c2:18:7c:89:6e:2d:71:d2:3a:e9:29:
         f3:16:7d:0f:e3:34:68:50:ca:48:b3:e7:d0:56:3a:5d:d5:67:
         9c:4f:40:af:30:fc:c8:56:c5:b7:2d:e3:64:a6:16:fa:e1:dd:
         90:50:ee:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:19:16 2025 by rpki-client