Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
File:                     nLoUINchzAMCPFAG0iUcILr0yII.mft (raw, json)
Hash identifier:          kgQUzIG33v/q8EYYS2OOR4/LhoGKUgbv3o+IdNHsVmA=
Subject key identifier:   A7:86:9A:64:19:B5:95:E9:57:56:3B:A2:A2:B6:17:B4:1E:12:B7:73
Authority key identifier: 9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82
Certificate issuer:       /CN=F3651E73AR/serialNumber=9CBA1420D721CC03023C5006D2251C20BAF4C882
Certificate serial:       0CB5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
Manifest number:          0CAF
Signing time:             Thu 01 May 2025 01:05:28 +0000
Manifest this update:     Thu 01 May 2025 01:05:27 +0000
Manifest next update:     Sat 03 May 2025 01:05:27 +0000
Files and hashes:         1: nLoUINchzAMCPFAG0iUcILr0yII.crl (hash: ugYK2skZd1uGuelpqeGfgDBr7bLyXJvxPQ8EBXMR6tg=)
                          2: D365A0ACF80D11EFBEB14452762E951A.roa (hash: Am6JfmXKv4DHhKvXRKWcitTRJPjjXl+0+2dzYYkuDLU=)
                          3: 35AAF9269B8511EC9C57BEA05A40D577.roa (hash: IkRiEA4+pjihvXLHrg2ngxaBC/GnITy6qHEusBSCBlo=)
                          4: FE7EF4DEA9A011EA8E58EF35F8AEA228.roa (hash: N7Iw9MeumlpaJ1CJWOcoOBYQ72/5ZVnOPL/BKPNdyjA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
                          rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 May 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3253 (0xcb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651E73AR, serialNumber=9CBA1420D721CC03023C5006D2251C20BAF4C882
        Validity
            Not Before: May  1 01:05:27 2025 GMT
            Not After : May  3 01:05:27 2025 GMT
        Subject: CN=6812c8d8-a9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e0:f8:51:3f:26:a2:d3:eb:dc:70:93:e1:bb:
                    12:5b:2c:0e:c5:f5:4f:69:f2:0d:71:3b:37:19:6c:
                    96:ae:c6:92:12:fe:b1:f1:57:80:db:19:26:83:af:
                    a0:b0:20:d0:85:93:4c:53:65:27:a2:04:05:50:ee:
                    bc:cc:28:16:87:b8:04:b3:47:fa:42:5f:4b:2d:33:
                    51:42:df:7e:b0:08:e2:29:b2:de:77:87:98:11:02:
                    de:ba:f4:b2:c2:b2:dc:64:8b:da:b2:0d:59:dc:c2:
                    aa:5f:e4:2f:eb:22:75:ea:e7:45:4b:90:cd:45:d3:
                    6e:b8:12:40:71:8f:e5:3a:41:a9:08:bc:25:b6:52:
                    47:6e:8a:c0:1d:9a:b1:86:48:bd:b2:8f:5e:c1:2d:
                    ff:5a:46:7b:b0:43:91:f8:66:f2:b0:59:95:01:3e:
                    d3:f1:11:c6:86:d1:2c:82:af:e5:84:51:38:69:50:
                    03:62:1a:f0:cc:c0:07:4a:13:58:37:4e:1a:49:cb:
                    9f:6a:f2:41:12:6f:44:7b:94:e7:87:de:ee:80:75:
                    04:75:aa:3e:d6:fa:99:cd:18:0e:84:69:48:cc:70:
                    53:cf:18:0c:1b:b6:8a:8d:8e:a3:d3:40:25:56:16:
                    27:22:29:93:a2:a8:77:1a:47:8e:cf:0d:07:33:a3:
                    d2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:86:9A:64:19:B5:95:E9:57:56:3B:A2:A2:B6:17:B4:1E:12:B7:73
            X509v3 Authority Key Identifier:
                keyid:9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:49:3a:5e:c3:ad:60:ad:d5:4c:3f:cb:0c:99:76:69:19:40:
         e1:82:7e:69:be:69:96:e9:0b:48:f0:ba:98:69:ed:b2:6f:9d:
         47:91:f0:58:69:4c:bf:11:ae:35:d1:62:82:57:5b:c9:77:28:
         a7:5c:62:0d:8b:4d:08:df:82:44:22:b6:e7:aa:6b:c1:2f:12:
         98:46:de:95:48:32:4a:7e:e7:0a:ba:72:aa:75:01:7c:cf:5a:
         04:1f:49:0b:84:ff:06:46:a7:2e:53:01:fc:71:78:f4:7d:f5:
         d8:6a:ca:9f:19:a4:49:08:e1:5d:49:2b:df:f8:fd:51:96:75:
         93:b9:f9:e4:4f:5c:d8:b2:85:ca:52:3e:c6:b7:81:99:e7:92:
         c4:cd:2b:28:65:f5:09:f6:1d:09:90:15:a0:c0:43:03:a7:d5:
         db:7d:96:9c:de:d7:89:bd:ea:fc:72:0a:b9:91:45:6c:56:21:
         4c:fe:ff:12:70:ad:d1:2f:ce:81:dc:32:e2:98:d1:c0:30:2b:
         6c:df:3c:16:ec:d2:52:b7:b0:82:4b:c6:88:35:78:06:d1:80:
         f4:4d:3a:d6:6b:5c:50:19:b0:10:c0:e9:9d:14:fe:32:0c:a0:
         62:1f:9e:1f:20:13:8e:50:2f:dd:87:1a:96:77:6d:b3:65:c6:
         44:07:f9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:48:07 2025 by rpki-client