Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
File:                     JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft (raw, json)
Hash identifier:          6xNzItfUCVviALrrbXlqO/SQAqehcjXpNI/X7qxb6EQ=
Subject key identifier:   DA:A7:A1:70:EF:FD:2A:87:14:F7:98:6B:84:84:57:11:BE:06:75:C8
Authority key identifier: 25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04
Certificate issuer:       /CN=F3646FFEAR/serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
Certificate serial:       0490
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
Manifest number:          048F
Signing time:             Tue 06 May 2025 02:52:14 +0000
Manifest this update:     Tue 06 May 2025 02:52:13 +0000
Manifest next update:     Thu 08 May 2025 02:52:13 +0000
Files and hashes:         1: JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl (hash: +6R6DtEFA4Ng8qwOpIRjsgPZ171AjWmAmEiJeOKuTjc=)
                          2: 5C5FD3B8B1B811ECBE7762D35A40D577.roa (hash: vGmD4pROB8VFUopnGf6To3GzFkP29HGjp5Gl6MpnPn0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                          rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 May 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1168 (0x490)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646FFEAR, serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
        Validity
            Not Before: May  6 02:52:13 2025 GMT
            Not After : May  8 02:52:13 2025 GMT
        Subject: CN=6819795e-c5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7d:0d:30:07:0a:27:e9:4d:7f:cb:53:f0:3a:
                    7e:89:f1:f8:47:c4:92:d2:f6:64:23:8c:fc:7e:2b:
                    59:a9:24:23:1b:e9:b4:e8:a3:94:43:18:56:5e:08:
                    64:98:65:bb:47:d6:5b:ed:d2:ec:20:11:c6:49:90:
                    cf:ea:13:f5:36:31:9d:bb:dd:49:6e:fe:dd:7f:da:
                    cb:6a:35:6a:51:bb:ba:17:bb:09:33:b2:e6:51:78:
                    70:1b:a1:56:2b:86:6e:26:d3:0e:b2:12:dd:d0:f9:
                    55:44:0f:de:b6:9f:35:cc:b3:ab:e2:1a:84:52:eb:
                    0e:25:1a:79:3c:fb:ee:c9:f7:c2:49:a0:ce:c9:82:
                    22:a2:44:59:9d:1d:d4:07:31:d4:3b:e5:76:72:b4:
                    45:e4:8e:cd:d0:4f:cc:4a:50:5f:b0:25:a3:a3:57:
                    d8:1f:50:d1:78:ad:31:4f:6f:2c:0d:04:d1:ff:ff:
                    c9:9b:24:d4:56:4b:6f:ae:be:dd:13:3a:53:27:36:
                    97:bb:32:cc:fa:d9:d5:c4:b5:7c:e5:83:e0:2c:25:
                    ca:46:12:36:b9:1a:bb:fc:7c:e3:a3:ce:73:7a:bc:
                    e1:ac:bb:18:4a:4a:dc:be:45:f5:6e:96:61:e9:14:
                    18:ef:60:aa:04:01:f3:6b:a4:a1:05:33:f1:e9:5f:
                    1e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A7:A1:70:EF:FD:2A:87:14:F7:98:6B:84:84:57:11:BE:06:75:C8
            X509v3 Authority Key Identifier:
                keyid:25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:3d:8c:a8:95:db:a2:e0:2e:4c:f4:93:f8:bb:5c:5b:13:10:
         e6:ba:95:67:02:ad:b1:44:03:be:41:df:d2:09:d3:7a:84:b6:
         e2:c1:5a:8e:70:b2:e7:94:72:0a:74:66:e5:d2:4e:0b:4c:9c:
         49:c8:30:60:91:bd:7a:74:5b:00:40:52:e8:b2:22:3b:ff:24:
         a7:ec:b9:d3:b1:55:bd:56:2c:7b:37:a8:58:d8:60:f1:5c:90:
         c2:c1:0b:b0:e7:47:fa:e9:e1:a3:68:7c:c4:4e:36:ee:91:8f:
         77:0c:da:7b:96:8e:b4:9f:ba:d6:3c:d3:86:61:a5:c6:07:15:
         cd:5a:13:37:d4:7c:8c:21:88:9e:25:5d:10:6e:65:8e:a5:3d:
         84:47:8c:7b:ce:23:4f:29:26:10:3a:02:56:02:74:99:45:63:
         03:b1:41:33:a7:fd:ec:4e:00:e6:8a:bf:86:50:7b:97:24:ef:
         52:27:80:e9:3b:a3:13:f2:5b:95:66:db:c5:e5:65:8e:bb:81:
         7b:c8:fe:1a:df:49:cd:a2:6e:14:7f:57:1d:e9:8e:62:40:11:
         69:d6:6f:f4:b3:ba:19:14:34:4d:8d:c2:33:a6:05:43:ad:9f:
         e6:35:20:20:49:d0:07:2a:a2:4e:b4:71:47:9f:e1:40:33:9e:
         02:b8:e7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:12:27 2025 by rpki-client