Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
File:                     yD3GjOK-QyU6qlUariL5Wh8drSs.mft (raw, json)
Hash identifier:          9ja5rKQwu82qOAwjy+EjPFqJgn6Uvc3NeXIHYZ7IdVo=
Subject key identifier:   55:36:79:39:22:27:B4:AD:F0:0E:7F:65:BB:1A:A8:4C:9A:55:36:CA
Authority key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
Certificate issuer:       /CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Certificate serial:       0412
Authority info access:    rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
Manifest number:          0410
Signing time:             Thu 01 May 2025 03:06:09 +0000
Manifest this update:     Thu 01 May 2025 03:06:08 +0000
Manifest next update:     Sat 03 May 2025 03:06:08 +0000
Files and hashes:         1: yD3GjOK-QyU6qlUariL5Wh8drSs.crl (hash: tM+0ttmH4gdTu7sTbfRLm0u97pfFssuDltKEM7s0ZAs=)
                          2: B1BFBFEA278711ED8808E3CDF1222468.roa (hash: Assvrj8OD6s30X7gj/5howMI7VisH2Gq7WxHn9j6+kQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                          rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 May 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042 (0x412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671DBDAR, serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
        Validity
            Not Before: May  1 03:06:08 2025 GMT
            Not After : May  3 03:06:08 2025 GMT
        Subject: CN=6812e521-fcab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:ff:67:1e:3e:94:84:33:04:33:08:44:30:
                    78:61:8b:f9:74:6f:ca:62:10:a2:4f:b6:c5:27:77:
                    16:2a:38:59:d7:df:f4:55:f3:1d:1e:25:40:3d:0c:
                    60:67:dc:c9:e5:79:82:5e:f7:86:27:45:85:74:8d:
                    2a:52:51:9b:b7:8f:95:92:7e:e2:80:61:e9:11:93:
                    56:bc:00:ed:82:1d:be:df:f9:cc:3b:44:4b:83:35:
                    5d:d1:2e:e8:f3:20:2b:31:99:7f:ba:4d:6a:8b:34:
                    03:0a:32:d6:35:45:d7:4c:ea:4a:7d:7c:82:cc:e1:
                    1b:00:62:b0:aa:dd:0a:8d:8b:28:1c:67:53:ed:92:
                    27:41:a5:a5:1f:c2:45:71:cc:2c:32:b7:0a:7b:8c:
                    f1:25:57:67:81:2d:a8:e4:3c:cf:03:78:ae:d8:b4:
                    5d:da:71:5f:b8:b6:bb:c7:f2:54:87:f6:76:79:10:
                    4f:85:0b:18:b5:55:8f:3b:e5:03:e9:40:97:56:2b:
                    23:22:1d:ba:e7:fc:ab:f0:69:12:65:c9:82:bf:d5:
                    05:71:1a:5e:a5:d3:ba:7d:39:82:b6:1a:d2:68:f9:
                    77:8a:8d:15:8a:d7:18:6f:76:db:b7:4c:84:a2:1c:
                    e0:7e:a7:c0:86:ee:ed:14:1d:ea:b3:12:48:bb:98:
                    ae:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:36:79:39:22:27:B4:AD:F0:0E:7F:65:BB:1A:A8:4C:9A:55:36:CA
            X509v3 Authority Key Identifier:
                keyid:C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d3:f3:48:28:5a:5a:15:75:8f:71:f5:69:a1:ef:a5:62:25:40:
         31:82:53:7e:11:45:b7:e2:dc:44:a6:dc:95:00:f2:41:d9:f9:
         7c:f5:f3:7f:6d:98:83:6d:f6:c2:68:01:cc:a6:d8:55:c1:ee:
         f1:b8:a1:1e:05:89:37:b0:4d:3f:9a:61:6b:1f:b7:df:9c:4e:
         ec:f4:51:73:bc:75:35:cb:24:73:79:b9:ef:5f:b0:e5:7e:aa:
         a4:7f:96:db:dc:fc:57:fe:25:27:ff:7c:d0:55:d0:79:5d:6f:
         c7:cd:d3:56:9d:c8:bb:f5:c8:46:2a:97:ec:37:64:56:a8:50:
         67:89:b8:81:3b:f5:3b:37:af:8b:fa:b9:52:6a:8d:7b:ee:b6:
         bf:d1:d3:2a:9d:df:c1:91:4f:70:68:3f:a5:c4:61:03:18:1f:
         44:a5:ea:d6:74:ed:fb:96:b5:09:54:2a:9a:5f:91:25:54:e9:
         89:c2:fa:c8:a2:21:2a:da:1d:f0:2e:70:31:49:22:05:5b:51:
         a1:88:6d:96:de:29:ab:d1:66:09:70:01:a2:8e:23:9d:fb:13:
         32:da:3d:59:ca:75:22:09:a4:7a:22:63:a4:c4:d4:4e:83:25:
         a9:61:c1:63:25:f1:d6:ef:79:7a:51:04:c5:b4:79:44:ed:62:
         f4:c9:cc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:22:31 2025 by rpki-client