Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
File:                     cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft (raw, json)
Hash identifier:          z2+A2aLNknj7RSl7bd/Ea0ofOSBaG3hEUHViv6c8iMk=
Subject key identifier:   FD:18:1E:41:F8:47:61:10:B1:8D:2C:AF:A5:14:B0:22:E4:D5:97:6E
Authority key identifier: 71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
Certificate issuer:       /CN=F364E67CAR/serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
Certificate serial:       0925
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
Manifest number:          0924
Signing time:             Tue 06 May 2025 01:20:00 +0000
Manifest this update:     Tue 06 May 2025 01:19:59 +0000
Manifest next update:     Thu 08 May 2025 01:19:59 +0000
Files and hashes:         1: cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl (hash: N8/3AM21dWoNQWYRWrXKz1U1VOClvriBl7kicyQfWgU=)
                          2: 8506A5F2291811E9A5145C67F8AEA228.roa (hash: e7GGX/SmpzChmh64zBM/POWgME/v0x9TPuUkVYW9+Pg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                          rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 May 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2341 (0x925)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E67CAR, serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
        Validity
            Not Before: May  6 01:19:59 2025 GMT
            Not After : May  8 01:19:59 2025 GMT
        Subject: CN=681963c0-bbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:38:94:2d:0d:42:2e:d5:cf:33:9f:6f:be:65:
                    70:f9:58:21:bc:cb:28:b4:cb:03:8c:2c:cf:d2:18:
                    5a:e8:07:14:03:da:30:40:e9:91:64:a9:75:b3:2d:
                    7e:80:e0:b5:38:b1:ab:fb:0c:7b:e7:a6:c2:fc:4a:
                    1b:94:46:f1:b3:13:5b:cc:5c:37:82:39:23:c4:7d:
                    b9:48:82:28:b8:0c:d1:f1:7a:bc:11:a8:1e:76:64:
                    32:9b:aa:ee:6a:5a:5f:ad:29:75:d4:91:51:b1:17:
                    5e:4a:73:c1:e3:09:ae:0e:ab:8b:ee:d1:7c:41:02:
                    28:30:fc:75:00:d5:a4:5c:eb:3e:82:01:20:31:17:
                    25:49:68:e8:55:30:ef:65:d3:ae:92:57:6f:b2:df:
                    d8:e0:16:73:d8:78:bb:2b:4a:20:cd:53:23:14:4c:
                    e2:ad:57:49:b5:40:c1:3b:9d:f5:6b:2b:17:c3:05:
                    59:03:01:88:ce:a8:90:55:ca:87:db:6c:0a:93:a6:
                    09:25:0a:1e:7c:1d:3c:fb:72:91:78:c1:f1:68:41:
                    c9:8e:d3:0f:91:09:01:b7:a2:da:3b:2f:b0:2d:ba:
                    09:d7:5a:85:b7:5f:ab:b6:01:18:39:b5:67:f6:8d:
                    5e:f8:0e:83:5a:95:77:9a:dc:6a:c6:60:96:c4:ad:
                    be:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:18:1E:41:F8:47:61:10:B1:8D:2C:AF:A5:14:B0:22:E4:D5:97:6E
            X509v3 Authority Key Identifier:
                keyid:71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:22:f6:23:46:df:7f:a6:31:25:cd:5e:f4:67:ce:7c:bf:34:
         70:28:04:f9:a2:5f:3e:52:39:e7:7c:38:2d:c2:cf:39:da:c6:
         a1:31:3c:b3:e1:a8:35:d8:cf:39:c2:1a:94:cb:85:9f:b6:e7:
         91:f8:38:91:2d:d4:0f:90:94:39:96:3b:2e:da:cc:d5:b2:4e:
         92:46:a7:ff:db:d8:0d:72:39:e4:d0:9e:46:4a:b9:9b:0d:31:
         f3:a9:f9:e7:aa:75:c6:49:ba:3d:65:03:d7:7a:78:5c:68:94:
         47:46:43:a8:49:34:4c:99:75:f3:47:65:09:5e:83:f4:10:5c:
         49:4b:91:04:56:42:5b:cd:d2:cc:d4:a2:95:10:aa:80:75:1e:
         c2:93:04:de:6d:ca:84:4e:db:37:b0:e8:32:b6:94:b7:49:72:
         51:da:f6:f3:51:0f:27:44:47:af:75:52:57:33:ab:78:47:64:
         4e:52:ea:c0:4f:f3:6b:78:95:6a:71:2c:c2:ec:06:49:a2:a3:
         8d:0d:f5:3d:cf:3b:3e:14:70:b4:fb:d7:95:19:6e:30:5e:26:
         b0:bf:7c:a4:c4:14:0c:7a:c7:5f:e9:b9:aa:bb:6d:87:5c:41:
         81:1d:93:5c:b4:a9:70:6d:a6:e8:b0:d5:04:3d:7b:90:fd:01:
         b4:46:90:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 16:01:00 2025 by rpki-client