Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
File:                     DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft (raw, json)
Hash identifier:          foQo6Nzr77qjrcCTEwcmv4A8pKHsEYui7sFMYB5Fp/g=
Subject key identifier:   0D:1D:32:17:EF:0A:F3:3D:80:80:53:FF:8A:1E:23:8C:85:7F:4B:5C
Authority key identifier: 0D:27:39:4E:9C:DE:92:15:5E:45:99:D6:84:10:99:2D:70:8B:F2:44
Certificate issuer:       /CN=F364C81DAR/serialNumber=0D27394E9CDE92155E4599D68410992D708BF244
Certificate serial:       08ED
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
Manifest number:          08E6
Signing time:             Fri 20 Jun 2025 01:32:03 +0000
Manifest this update:     Fri 20 Jun 2025 01:32:03 +0000
Manifest next update:     Sun 22 Jun 2025 01:32:03 +0000
Files and hashes:         1: DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl (hash: vUeLuqaBF49h8xr5qpvsjIS/Cu7MVH9uD9SQFTTjmg0=)
                          2: 74AA29FC3E9A11EFB1E37554762E951A.roa (hash: WV585CADX8C6BW4JHivJOJddO/5hxxRDI5ze3ORaNIk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
                          rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 22 Jun 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2285 (0x8ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364C81DAR, serialNumber=0D27394E9CDE92155E4599D68410992D708BF244
        Validity
            Not Before: Jun 20 01:32:03 2025 GMT
            Not After : Jun 22 01:32:03 2025 GMT
        Subject: CN=6854ba13-fe51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:3a:46:1e:b9:3c:07:b4:6f:8b:3f:5b:e7:
                    be:47:19:1f:e1:c2:4d:e7:c8:fd:59:8d:c9:48:fe:
                    99:ef:51:53:c4:89:c5:eb:e7:5e:02:d3:c5:d9:c5:
                    e1:a8:90:09:3a:f9:b5:89:4d:76:d2:47:85:7e:96:
                    b7:c2:83:fc:04:1d:1f:67:0e:fd:01:0f:70:6d:0f:
                    8e:35:b3:9f:8a:4c:d7:89:34:ee:56:8a:db:4f:9f:
                    90:1c:80:b7:9a:49:e2:09:62:7d:fa:2f:d1:9f:7f:
                    b3:fe:79:d9:12:8f:c5:e6:0b:96:42:da:88:72:9f:
                    78:db:2f:7d:89:4a:b5:5d:ca:f7:84:98:7e:61:8e:
                    3b:33:46:a4:0e:f7:05:e0:56:06:6a:04:d7:f9:0e:
                    98:08:16:7a:05:59:d3:bb:6b:7b:0b:4b:fd:b0:88:
                    fc:e6:cd:b8:d0:90:28:8a:d6:f8:89:df:3c:fe:4a:
                    e5:f7:5f:64:85:17:f1:34:3f:2e:0f:7d:f2:92:b9:
                    a6:52:c7:1a:f7:8b:d9:2e:fa:5f:83:c9:5b:14:d6:
                    cd:12:92:08:55:f5:ee:3f:7f:3b:84:7c:ed:e6:9a:
                    f2:c5:1a:67:50:aa:dc:e3:fa:3c:16:b4:ca:f9:77:
                    29:07:0e:6a:30:22:b7:3b:54:5a:b0:6b:1a:48:f4:
                    90:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1D:32:17:EF:0A:F3:3D:80:80:53:FF:8A:1E:23:8C:85:7F:4B:5C
            X509v3 Authority Key Identifier:
                keyid:0D:27:39:4E:9C:DE:92:15:5E:45:99:D6:84:10:99:2D:70:8B:F2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:f7:97:66:29:57:b4:fe:f8:ee:a1:f4:18:94:46:61:37:93:
         68:4c:96:eb:30:1c:38:a4:20:13:09:31:bf:cc:5b:b1:13:52:
         ab:40:c4:d3:d3:0e:76:55:c6:9e:65:67:5f:80:06:12:f1:cc:
         0b:62:8c:e2:f5:5e:b2:99:c6:c5:77:13:82:c6:d8:27:66:b8:
         1b:c1:90:03:c1:e9:e0:34:83:d2:f5:b1:0c:36:e8:55:55:5a:
         b1:b2:aa:40:bf:c7:35:50:93:a5:e2:a5:91:5c:05:fe:bf:42:
         1d:dd:5e:f6:d1:70:9d:be:06:1c:71:4b:59:75:36:3e:1e:03:
         ed:d8:07:8d:27:75:c4:05:ce:4a:a2:d1:0c:2e:58:64:5a:ba:
         91:b6:7e:86:79:6a:7b:d8:d6:f6:97:7d:f0:12:39:9f:75:01:
         e7:da:fe:f6:34:1f:33:3a:7b:8b:7d:59:39:ae:f9:90:a2:74:
         b0:ba:81:4b:61:48:75:61:1c:46:7b:e0:b2:fa:42:bf:59:6b:
         22:2f:d4:e4:a0:c3:08:a1:5b:50:d1:80:56:77:df:b5:be:57:
         56:5f:d6:99:1c:22:15:08:92:04:f2:bb:73:94:1b:60:53:1d:
         79:8e:8a:07:13:4e:57:c2:d7:fd:6e:78:79:46:53:66:62:5f:
         1b:1c:01:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 15:20:49 2025 by rpki-client