Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
File:                     s4rg2ENn30CCL75YUHD2mDzRgFk.mft (raw, json)
Hash identifier:          y2Y6S0yXAAHHsLPL91ncU7n2GipdB3NiEJu2Y1W/Ahc=
Subject key identifier:   95:1B:ED:95:91:8C:69:5A:3D:FD:F9:30:0B:80:C9:3B:39:C4:85:FA
Authority key identifier: B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59
Certificate issuer:       /CN=F3645590AR/serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
Certificate serial:       01B4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
Manifest number:          01B3
Signing time:             Fri 08 Aug 2025 04:37:08 +0000
Manifest this update:     Fri 08 Aug 2025 04:37:07 +0000
Manifest next update:     Sun 10 Aug 2025 04:37:07 +0000
Files and hashes:         1: s4rg2ENn30CCL75YUHD2mDzRgFk.crl (hash: ZuC4mYDWvuEZ3BbXjQ4NokkMk72XFqQpUbiMOrsYkkw=)
                          2: 0630E34C27F911EF99C5B7167DDC24C2.roa (hash: u1Kgum9/rIa3gu9tEpPcpHBCjsDs7Hpw84FU4EIS7uY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                          rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 10 Aug 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 436 (0x1b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AR, serialNumber=B38AE0D84367DF40822FBE585070F6983CD18059
        Validity
            Not Before: Aug  8 04:37:07 2025 GMT
            Not After : Aug 10 04:37:07 2025 GMT
        Subject: CN=68957ef4-1866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:b5:9e:71:d3:20:83:b4:28:30:af:6f:69:f9:
                    ba:ba:4a:01:53:06:5f:18:79:28:0d:ca:aa:38:1e:
                    f9:e5:bd:2b:0c:2b:4a:ff:f6:37:d6:f3:f5:55:2b:
                    e2:8c:9b:44:a4:cf:3f:c5:04:54:90:00:7f:37:9f:
                    0a:cb:6c:f2:53:55:cb:70:a3:8c:0a:1e:51:e6:4a:
                    60:b4:57:5d:62:c0:a8:1a:f1:31:cf:2a:15:f0:e8:
                    c5:2f:71:69:06:c5:f4:ec:f4:71:5e:80:63:f5:36:
                    f3:48:86:83:96:a0:58:b8:74:50:4d:33:37:90:f3:
                    dc:a3:04:14:28:ec:8c:9e:aa:38:64:50:60:00:d7:
                    c0:85:6f:aa:f8:02:8a:1e:d3:fb:e7:07:12:96:8a:
                    4f:44:06:c3:27:b7:08:7e:02:7b:af:06:92:56:2e:
                    5a:b1:cf:c9:2d:be:0d:81:f8:f7:5b:ca:1c:4f:19:
                    cd:28:56:98:c0:c8:3f:9d:d8:5a:f0:be:94:fd:c4:
                    ba:a3:e9:d7:e3:7f:8f:49:ab:f5:a9:28:3c:23:7a:
                    ac:9b:c8:51:c0:40:2b:34:90:16:6b:5d:51:fa:38:
                    53:61:81:28:e1:79:9b:69:76:a7:75:e3:26:82:9d:
                    35:ef:61:00:7b:71:86:b9:cc:54:43:50:77:e4:0a:
                    87:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1B:ED:95:91:8C:69:5A:3D:FD:F9:30:0B:80:C9:3B:39:C4:85:FA
            X509v3 Authority Key Identifier:
                keyid:B3:8A:E0:D8:43:67:DF:40:82:2F:BE:58:50:70:F6:98:3C:D1:80:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/s4rg2ENn30CCL75YUHD2mDzRgFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/761A322227F811EF968FC2157DDC24C2/s4rg2ENn30CCL75YUHD2mDzRgFk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:f6:77:58:d7:00:2a:02:80:28:3c:f0:4c:b8:14:74:2c:dc:
         84:5f:be:4b:f3:0f:e0:0a:39:4c:57:9c:e6:ee:fa:39:66:90:
         d8:12:48:72:be:12:7e:12:fd:f0:28:e1:78:fd:ba:12:8e:05:
         3b:8e:a0:82:aa:c0:12:37:4a:99:b8:3f:8e:b0:dc:77:1a:46:
         74:2d:69:5a:ff:aa:a6:67:b1:39:fc:e9:bd:8f:8c:42:c2:3f:
         27:42:a5:49:3a:69:56:cf:6d:24:a5:ed:32:67:7c:d1:6a:26:
         cf:8b:2c:36:4b:26:e1:91:88:5e:c0:78:dd:df:70:50:89:08:
         e0:bf:0a:d4:11:71:24:ed:4b:63:db:d1:18:b0:d3:02:dd:f4:
         bd:8e:b9:2f:65:c2:69:1e:b5:b1:b8:8b:a4:de:94:1b:a3:d4:
         d0:f9:e7:b3:f0:79:51:0b:d9:18:9d:c0:b1:c2:5e:0d:ce:fd:
         6b:d4:31:8b:58:bb:5b:50:0f:32:fe:50:bf:54:52:f2:2b:03:
         1e:14:55:a2:da:4b:98:51:31:d3:1d:15:67:b5:09:24:bf:76:
         73:2a:3e:f3:75:cd:02:d3:81:4b:d9:cd:1b:62:5d:93:38:b4:
         d2:60:f6:dc:a6:eb:29:6b:e9:52:fc:1f:c1:6d:78:27:72:d0:
         07:d5:98:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 20:46:34 2025 by rpki-client