Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
File:                     LjUlNVWULww8pjeATUbZWgKk-ek.mft (raw, json)
Hash identifier:          i3JIhGO8DoGBFjSpSt1x0teUfmyr6+UjxfDOHuMry3I=
Subject key identifier:   6D:2B:AD:23:23:80:12:5E:F4:27:BB:9F:6F:A1:C8:C4:8F:DA:E2:D7
Authority key identifier: 2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9
Certificate issuer:       /CN=F3627BD6AR/serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
Certificate serial:       0D0C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
Manifest number:          0D08
Signing time:             Tue 29 Apr 2025 01:03:39 +0000
Manifest this update:     Tue 29 Apr 2025 01:03:39 +0000
Manifest next update:     Thu 01 May 2025 01:03:39 +0000
Files and hashes:         1: LjUlNVWULww8pjeATUbZWgKk-ek.crl (hash: hmnXJcijlwNEdQS9FXXSRNEmHaJbJarmJRT3Oba0p5M=)
                          2: 6FAF8B00619B11EDB6AEE1D6F1222468.roa (hash: /1/Pa04qpcI/k7X0iybt5AEzlNkplFgiGrqG6zpxJw0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
                          rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 May 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3340 (0xd0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627BD6AR, serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
        Validity
            Not Before: Apr 29 01:03:39 2025 GMT
            Not After : May  1 01:03:39 2025 GMT
        Subject: CN=6810256b-c19a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:cb:55:c2:0f:70:b1:56:9c:a0:e5:05:22:c2:
                    d8:8a:6c:fc:db:ca:45:ea:0c:f7:5a:ce:11:2e:07:
                    53:08:fb:0f:9e:18:59:d9:22:3a:b4:c0:44:28:0c:
                    72:13:cd:fe:c8:14:98:b2:38:5e:a7:ae:ef:ce:62:
                    ca:c7:62:8d:95:41:fa:d2:11:94:7c:34:6a:c6:b3:
                    30:1b:36:28:bf:cf:97:1b:e3:ee:0f:81:65:35:ef:
                    66:ac:32:11:13:80:19:81:ff:47:08:f2:dc:c9:8a:
                    74:b5:a9:40:cd:20:11:15:fa:f9:d3:53:43:21:9e:
                    49:b1:9e:c9:9d:f3:7b:0c:4d:5e:53:ed:58:d2:9b:
                    09:34:ba:bb:71:ff:cf:70:b0:45:b8:19:00:b9:9f:
                    1d:26:4c:ba:b6:18:e3:0e:39:2e:ce:9a:92:c1:c8:
                    16:55:8f:c6:e2:fc:a9:63:9b:44:64:c7:90:9c:78:
                    5d:1d:c6:8b:33:44:6e:b7:8f:4d:de:8d:d1:74:ad:
                    18:37:e4:b7:4c:ab:cf:aa:3c:78:af:8d:96:8a:52:
                    54:6a:e2:49:bb:24:26:51:12:0c:47:8f:e0:9c:45:
                    74:68:b4:28:1f:f9:90:2e:fb:3d:bb:41:8e:69:19:
                    d5:3f:10:1d:63:a1:fe:89:69:0c:9e:92:1e:06:f9:
                    e5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:2B:AD:23:23:80:12:5E:F4:27:BB:9F:6F:A1:C8:C4:8F:DA:E2:D7
            X509v3 Authority Key Identifier:
                keyid:2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:19:0a:0a:d1:da:7f:70:88:5b:b3:45:04:e5:1b:a1:84:28:
         c1:a8:71:84:e1:7d:6b:08:07:2e:25:57:f5:11:56:be:35:b5:
         d8:4b:ce:49:dd:2d:92:e0:0d:16:4b:39:43:24:12:c2:56:27:
         51:e5:df:84:4c:0a:f6:b0:27:82:26:2c:88:3d:fc:ee:90:3d:
         3a:8c:9d:f6:37:c6:5d:e9:37:75:14:23:3b:b9:ec:18:92:76:
         71:ec:0c:56:d5:bb:df:16:13:52:de:b1:d2:93:ca:f7:98:5e:
         41:ba:32:57:1d:52:03:cc:b4:48:a1:10:0f:81:5b:a4:2e:18:
         52:a3:61:07:17:ab:89:74:a0:1a:61:11:8f:e8:e3:8c:9f:c2:
         86:0d:67:02:5c:59:7b:7c:17:ba:40:1c:3b:02:7f:07:5d:84:
         0c:62:d5:64:3a:4c:95:60:5b:41:18:1f:91:99:e7:15:b1:5f:
         75:2a:8e:e4:54:b6:19:04:43:f6:76:4a:70:20:0b:2c:1d:4e:
         f3:10:e9:52:7e:fd:85:d0:73:80:24:17:65:4a:13:cc:9c:46:
         bb:81:5c:67:24:8e:f5:38:95:49:7e:e2:ce:7d:87:25:16:db:
         39:74:29:b6:76:aa:e2:f9:fd:c2:18:20:19:d8:a8:24:85:42:
         4e:8a:f6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:36:46 2025 by rpki-client