Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
File:                     DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft (raw, json)
Hash identifier:          2JHXtA5DJ4rAb3aOva/Q0H4WuruGOEq9jdBQWHVkDPE=
Subject key identifier:   C3:13:58:B4:D5:47:55:C3:C6:A0:CA:46:D2:38:01:2E:D2:77:29:10
Authority key identifier: 0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9
Certificate issuer:       /CN=F3639A71AR/serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
Certificate serial:       01EC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
Manifest number:          01EB
Signing time:             Sun 27 Apr 2025 04:15:10 +0000
Manifest this update:     Sun 27 Apr 2025 04:15:09 +0000
Manifest next update:     Tue 29 Apr 2025 04:15:09 +0000
Files and hashes:         1: DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl (hash: RCNBQaSjqryh9WcdNz7/mIDLAK8Muh8ANzesnzfCjlc=)
                          2: CE2F2690AD5311EE8E27B3B1775412E6.roa (hash: 8IJ5uu88BzDrvRLts60KNKjSTABo8XS/43EbjaMJPDo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                          rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 492 (0x1ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AR, serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
        Validity
            Not Before: Apr 27 04:15:09 2025 GMT
            Not After : Apr 29 04:15:09 2025 GMT
        Subject: CN=680daf4e-eab8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5b:ee:f3:25:12:de:9d:4f:a7:0f:43:86:b2:
                    4d:34:bb:77:af:50:dd:13:d0:54:95:44:9c:38:04:
                    21:d9:cd:70:3c:40:c4:28:6e:96:70:75:73:5c:c1:
                    26:13:9e:47:23:83:5d:9b:50:94:f5:65:32:3a:73:
                    ac:a3:a4:dc:4b:e5:75:21:93:e0:66:10:74:50:4b:
                    50:19:82:c3:af:87:06:84:95:b4:a7:87:f7:6f:f8:
                    f5:fa:42:1b:70:6a:70:9e:9c:f6:6f:31:6d:88:fe:
                    67:da:4f:65:dd:3a:35:04:ec:0a:ae:46:e1:4c:5f:
                    93:87:d2:15:c2:03:dc:87:cb:df:f2:db:5e:f4:57:
                    5f:e5:ee:46:2b:d8:89:4f:85:3f:c6:e3:2a:12:14:
                    b6:14:22:3d:0a:22:0b:e4:00:00:3f:79:dd:ea:7f:
                    a4:c2:15:7c:2a:55:3e:c8:98:49:aa:b5:7a:eb:ea:
                    e5:b3:17:e8:1f:2d:21:08:19:66:8e:ad:3c:9a:21:
                    d6:89:59:bf:e9:3d:3c:70:b9:e6:c6:f4:5c:7c:a8:
                    f5:c9:02:af:66:0f:a9:29:74:5d:12:71:d3:81:1d:
                    90:e3:41:49:9e:84:23:cf:58:32:8a:f9:2a:6a:67:
                    3e:f4:b5:9e:93:a3:7c:32:b4:9e:52:bd:15:b8:53:
                    63:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:13:58:B4:D5:47:55:C3:C6:A0:CA:46:D2:38:01:2E:D2:77:29:10
            X509v3 Authority Key Identifier:
                keyid:0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:dc:21:c4:f7:64:13:c0:ac:f4:c2:af:ab:62:2f:e5:45:da:
         dd:9e:30:57:f8:07:01:ae:eb:e0:9c:0c:3a:18:89:44:a2:94:
         93:5b:3e:f7:19:6b:79:e6:25:f4:38:83:82:54:4c:84:b8:da:
         cb:d8:e0:01:83:be:5a:7b:b6:39:dc:83:1d:03:f0:67:8a:da:
         14:0c:a1:a4:ee:8a:87:9c:8d:f4:cd:f0:20:9d:49:fa:7c:1d:
         af:5e:8b:d9:2f:74:e1:3b:e6:3d:08:f6:2d:12:79:7e:e2:fe:
         e4:f7:ef:04:96:8f:af:ed:9b:b4:53:49:02:19:a6:46:37:45:
         4a:97:a1:c6:92:b4:cb:c2:89:cd:cc:76:af:ce:a8:89:6e:b4:
         19:9c:65:58:17:34:44:82:96:12:9a:9a:ac:09:f0:5b:e3:04:
         d7:73:b1:8d:3a:86:9f:78:2c:b1:34:2c:8b:cb:14:ce:84:e1:
         15:51:9b:7b:f0:fc:2f:6c:4e:a4:2c:d8:55:7c:3b:09:4b:2d:
         0e:4d:d8:aa:e1:8e:2b:70:91:28:c0:5b:9f:c9:f6:28:7b:00:
         23:2d:9a:a5:7b:4c:ad:3e:ad:ea:1f:e3:09:f8:17:9a:b2:91:
         bd:20:b8:e2:d5:a4:35:d1:a6:c7:da:4b:c6:5d:ae:90:03:cd:
         f6:dd:23:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:27:18 2025 by rpki-client