Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
File:                     BoarqsOL5_GqLSv8WD8tN9iLpEI.mft (raw, json)
Hash identifier:          1/Xwdy24VYOAgU/efQkBwOfJ7POv3nxZdCzeXLz/fD4=
Subject key identifier:   88:14:CA:2E:43:F4:2E:32:E4:64:B6:E7:38:DA:7A:49:85:42:47:A9
Authority key identifier: 06:86:AB:AA:C3:8B:E7:F1:AA:2D:2B:FC:58:3F:2D:37:D8:8B:A4:42
Certificate issuer:       /CN=F3660C14AR/serialNumber=0686ABAAC38BE7F1AA2D2BFC583F2D37D88BA442
Certificate serial:       08ED
Authority info access:    rsync://rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
Manifest number:          08ED
Signing time:             Wed 06 Aug 2025 01:36:37 +0000
Manifest this update:     Wed 06 Aug 2025 01:36:36 +0000
Manifest next update:     Fri 08 Aug 2025 01:36:36 +0000
Files and hashes:         1: BoarqsOL5_GqLSv8WD8tN9iLpEI.crl (hash: 2/u6wl3Tb7HehpjRIQrrKo9G1PCmtUHBus3yKeelBUU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
                          rsync://rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 08 Aug 2025 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2285 (0x8ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AR, serialNumber=0686ABAAC38BE7F1AA2D2BFC583F2D37D88BA442
        Validity
            Not Before: Aug  6 01:36:36 2025 GMT
            Not After : Aug  8 01:36:36 2025 GMT
        Subject: CN=6892b1a5-e9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7f:33:86:38:c6:b8:73:0a:7a:64:5b:ee:57:
                    e6:90:f6:fc:ed:07:56:98:7c:35:c1:d2:62:c5:ea:
                    50:79:19:b4:65:e9:a0:1b:00:65:9f:cd:f4:23:c5:
                    9e:b8:77:9a:48:21:46:9b:0a:2d:5c:24:d0:9f:03:
                    68:4b:e5:11:b6:b2:bd:c5:89:1d:a4:c4:96:90:49:
                    73:14:8f:fc:af:fe:b6:72:b7:d1:c1:ed:65:48:cd:
                    73:c6:13:2a:35:6b:dd:5e:b9:2f:fa:c1:43:bd:ef:
                    8d:47:cd:5e:a2:02:4b:0c:eb:3f:6a:e4:38:e6:7f:
                    03:0b:7d:3d:e2:48:0d:d0:b3:da:70:56:85:67:76:
                    84:c5:65:e0:30:5f:fd:9f:46:b7:32:ed:db:bf:f4:
                    65:43:17:da:26:7a:0d:92:8c:38:8b:74:50:e9:a1:
                    b1:e0:64:4e:87:cd:b6:4b:49:0e:cf:ec:8c:f0:85:
                    85:d3:72:12:13:5d:09:6b:a6:d7:4b:f2:c8:83:26:
                    85:1b:75:24:ac:68:69:06:ca:e5:45:d0:c3:b9:52:
                    ad:65:4b:6f:62:42:d2:b6:a9:b7:dc:9c:94:19:23:
                    40:f8:2f:de:c5:5e:92:ad:a2:b3:37:ba:54:03:d5:
                    b0:ae:9f:1c:e9:ab:97:c1:96:63:c8:6f:ef:d5:58:
                    24:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:14:CA:2E:43:F4:2E:32:E4:64:B6:E7:38:DA:7A:49:85:42:47:A9
            X509v3 Authority Key Identifier:
                keyid:06:86:AB:AA:C3:8B:E7:F1:AA:2D:2B:FC:58:3F:2D:37:D8:8B:A4:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/BoarqsOL5_GqLSv8WD8tN9iLpEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/DC72841E9BFA11E98352DF79F8AEA228/BoarqsOL5_GqLSv8WD8tN9iLpEI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:70:c7:87:de:a1:56:7c:cd:31:de:96:cf:04:f0:d2:8b:65:
         70:50:15:da:ef:29:b1:b9:37:b9:75:23:15:fe:82:d6:50:f5:
         02:7d:fd:59:06:73:c0:b7:99:4c:f9:1d:29:12:ea:35:fa:ac:
         5c:67:07:96:eb:79:72:01:3e:bd:c5:29:90:22:c1:d5:37:ec:
         e4:d6:32:f3:22:a2:3f:9a:5d:17:18:05:8d:eb:8a:f6:6d:45:
         41:89:b5:9c:0c:3f:a5:79:36:69:47:bf:1b:65:4c:9c:df:82:
         28:44:ea:d5:b5:b5:af:bc:6b:07:65:27:9e:c2:ae:e9:ee:75:
         12:c7:b4:38:6f:f2:c3:90:5d:d5:b0:b9:7f:b6:2b:f1:49:98:
         9c:fd:8e:c8:50:96:45:fb:5f:94:4a:30:c8:5d:0d:2e:97:99:
         31:ec:ad:1c:b3:38:9e:fd:97:1c:22:a6:73:0b:8f:11:93:57:
         e8:09:04:2a:fd:50:1c:88:d0:df:60:a2:d0:97:4b:0e:71:16:
         dd:01:06:aa:d2:cb:5f:55:1c:f0:76:52:c7:c7:57:e4:13:a3:
         d7:22:2f:00:fb:df:8e:ca:ee:7d:c2:f3:ce:96:8d:49:24:29:
         31:e3:58:2b:d0:58:78:e4:aa:27:62:d0:df:d9:8b:7d:cc:5a:
         03:53:cf:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:59:35 2025 by rpki-client