Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
File:                     oTgA5gK0z7bek2kV92nQGZHNe-Q.mft (raw, json)
Hash identifier:          I6aEsjDNUFdkxcpcjnIJtUUbWrwL/rot6jSf1Gwxjk0=
Subject key identifier:   1F:D2:2D:77:E9:AA:28:A8:DE:21:90:BD:AA:83:D1:53:3C:66:4F:2F
Authority key identifier: A1:38:00:E6:02:B4:CF:B6:DE:93:69:15:F7:69:D0:19:91:CD:7B:E4
Certificate issuer:       /CN=F36700DBAR/serialNumber=A13800E602B4CFB6DE936915F769D01991CD7BE4
Certificate serial:       057C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/oTgA5gK0z7bek2kV92nQGZHNe-Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
Manifest number:          057B
Signing time:             Mon 28 Apr 2025 02:34:26 +0000
Manifest this update:     Mon 28 Apr 2025 02:34:25 +0000
Manifest next update:     Wed 30 Apr 2025 02:34:25 +0000
Files and hashes:         1: oTgA5gK0z7bek2kV92nQGZHNe-Q.crl (hash: 1n53rF/vjmoBx5RpSfp/qv2PVrMyiJpRxGwlzosGyMA=)
                          2: 31507B3CF50211EBB42A2B05D8A014CE.roa (hash: dfbIWGum/Ucedfg1WNkiFE0ZtwrT4EWBCHH1tmgOCzc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
                          rsync://rpki.afrinic.net/repository/arin/oTgA5gK0z7bek2kV92nQGZHNe-Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1404 (0x57c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36700DBAR, serialNumber=A13800E602B4CFB6DE936915F769D01991CD7BE4
        Validity
            Not Before: Apr 28 02:34:25 2025 GMT
            Not After : Apr 30 02:34:25 2025 GMT
        Subject: CN=680ee932-a5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:2a:f2:32:3f:9d:01:08:5d:3b:ad:d1:6d:
                    25:e4:f7:8c:92:6f:13:b6:b0:f4:6d:3e:1e:5a:42:
                    1f:ec:44:e8:f6:a6:d8:b2:b3:b5:ad:70:ed:a8:61:
                    d1:dd:33:14:55:36:61:33:b8:95:c4:bb:da:ba:c8:
                    80:28:b6:b1:f8:43:0d:f4:11:db:95:be:99:24:5a:
                    b3:08:61:88:05:82:2d:35:a1:4d:47:f3:9c:bc:52:
                    0a:39:9e:66:d7:31:76:f9:16:03:40:2f:86:4d:f3:
                    d0:d7:da:8a:67:ae:7c:d2:16:66:9d:94:87:4d:1c:
                    63:93:07:3b:58:b2:ee:e6:46:c5:48:5f:da:d3:9c:
                    8c:95:4f:2f:fa:0c:db:f0:9d:7f:c5:09:1f:41:9e:
                    2e:a0:73:a4:db:2e:05:e5:de:81:d0:77:1c:41:1f:
                    3d:4f:ea:e6:90:61:8d:f7:ea:ff:d7:c1:7c:00:36:
                    14:64:bf:0e:67:a7:d8:20:42:0e:5d:7e:68:f4:32:
                    61:57:a8:42:93:aa:49:f6:e7:d7:3b:e8:8b:0a:4f:
                    1a:9e:90:b0:19:4c:eb:04:f2:9b:c4:b7:a0:ab:ae:
                    c9:8f:27:ee:b3:3a:8d:cd:05:a9:61:dd:b3:bb:30:
                    0f:0c:ad:86:22:23:60:c8:e9:15:af:08:d3:84:60:
                    11:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D2:2D:77:E9:AA:28:A8:DE:21:90:BD:AA:83:D1:53:3C:66:4F:2F
            X509v3 Authority Key Identifier:
                keyid:A1:38:00:E6:02:B4:CF:B6:DE:93:69:15:F7:69:D0:19:91:CD:7B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oTgA5gK0z7bek2kV92nQGZHNe-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:56:34:0e:4f:f6:fa:c1:1f:73:b2:9a:27:b4:9d:97:6f:f8:
         ba:c7:ca:50:91:56:28:d6:19:be:1b:52:93:48:69:51:36:15:
         50:f2:70:9e:f6:9b:82:ef:fc:3d:a2:5f:aa:66:6d:c5:ec:cf:
         fe:c9:69:08:d2:14:cd:c9:6e:f6:3c:26:87:69:45:0e:79:ab:
         28:20:7c:6f:66:06:0b:cd:71:de:3c:a8:1a:95:7c:8a:92:09:
         4c:cc:05:1c:61:29:33:56:93:f8:ea:7b:f7:33:ca:22:c8:27:
         cf:74:a6:b4:17:fa:c7:ba:42:ef:f9:1f:cf:eb:63:99:51:b9:
         8c:3c:53:0e:9d:4f:09:0a:5e:3e:e8:3e:5f:1d:44:06:7c:79:
         71:f0:f2:fa:27:0b:97:10:40:11:1e:ae:05:35:1f:51:e8:3e:
         52:51:48:80:81:cc:32:7a:fd:58:8d:db:0b:58:70:37:4c:8d:
         86:4d:e3:53:cd:fa:5c:d9:e3:ef:70:1c:2c:11:80:68:32:70:
         94:49:20:18:3b:65:ec:e0:19:f2:96:89:b6:a0:91:14:67:5e:
         98:c5:93:40:d6:86:d8:ff:17:a4:a4:89:c6:e0:4d:53:50:e0:
         fe:f8:e5:32:76:9d:f9:0b:3b:1c:7f:bd:bd:5a:ac:e9:5d:65:
         30:75:12:a9
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBXwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzAwREJBUjExMC8GA1UEBRMoQTEzODAwRTYwMkI0Q0ZCNkRFOTM2OTE1Rjc2OUQw
MTk5MUNEN0JFNDAeFw0yNTA0MjgwMjM0MjVaFw0yNTA0MzAwMjM0MjVaMBgxFjAU
BgNVBAMTDTY4MGVlOTMyLWE1ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6oyryMj+dAQhdO63RbSXk94ySbxO2sPRtPh5aQh/sROj2ptiys7WtcO2o
YdHdMxRVNmEzuJXEu9q6yIAotrH4Qw30EduVvpkkWrMIYYgFgi01oU1H85y8Ugo5
nmbXMXb5FgNAL4ZN89DX2opnrnzSFmadlIdNHGOTBztYsu7mRsVIX9rTnIyVTy/6
DNvwnX/FCR9Bni6gc6TbLgXl3oHQdxxBHz1P6uaQYY336v/XwXwANhRkvw5np9gg
Qg5dfmj0MmFXqEKTqkn259c76IsKTxqekLAZTOsE8pvEt6CrrsmPJ+6zOo3NBalh
3bO7MA8MrYYiI2DI6RWvCNOEYBHDAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUH9It
d+mqKKjeIZC9qoPRUzxmTy8wHwYDVR0jBBgwFoAUoTgA5gK0z7bek2kV92nQGZHN
e+QwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcwMERCL0VFMENBNkQ0RjUwMTExRUJBMEY3QjIwNEQ4QTAxNENFL29UZ0E1
Z0swejdiZWsya1Y5Mm5RR1pITmUtUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L29UZ0E1Z0swejdiZWsya1Y5Mm5RR1pITmUtUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NzAwREIvRUUwQ0E2RDRGNTAxMTFFQkEwRjdCMjA0RDhBMDE0
Q0Uvb1RnQTVnSzB6N2JlazJrVjkyblFHWkhOZS1RLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQACVjQOT/b6wR9zspontJ2Xb/i6x8pQkVYo
1hm+G1KTSGlRNhVQ8nCe9puC7/w9ol+qZm3F7M/+yWkI0hTNyW72PCaHaUUOeaso
IHxvZgYLzXHePKgalXyKkglMzAUcYSkzVpP46nv3M8oiyCfPdKa0F/rHukLv+R/P
62OZUbmMPFMOnU8JCl4+6D5fHUQGfHlx8PL6JwuXEEARHq4FNR9R6D5SUUiAgcwy
ev1YjdsLWHA3TI2GTeNTzfpc2ePvcBwsEYBoMnCUSSAYO2Xs4Bnylom2oJEUZ16Y
xZNA1obY/xekpInG4E1TUOD++OUydp35Czscf729WqzpXWUwdRKp
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:54:21 2025 by rpki-client