Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
File:                     qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft (raw, json)
Hash identifier:          B+j+/cpFLRtdHdIjBsUNdtfTJKJ0dsyatFXe6GtUsKY=
Subject key identifier:   18:9C:03:ED:5E:73:A7:4C:2D:4B:60:44:E3:11:55:CA:F4:4D:23:EC
Authority key identifier: AA:4A:8F:FF:1B:18:06:24:D7:51:00:3D:21:65:AC:AF:AE:90:43:6A
Certificate issuer:       /CN=F3676EF0AR/serialNumber=AA4A8FFF1B180624D751003D2165ACAFAE90436A
Certificate serial:       F8
Authority info access:    rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
Manifest number:          F7
Signing time:             Mon 28 Apr 2025 04:55:26 +0000
Manifest this update:     Mon 28 Apr 2025 04:55:25 +0000
Manifest next update:     Wed 30 Apr 2025 04:55:25 +0000
Files and hashes:         1: qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl (hash: LBAKsn1nRhGPxeVGUhUz6ScaBf6q7lhdZhiVvb3qGk8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
                          rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 04:55:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676EF0AR, serialNumber=AA4A8FFF1B180624D751003D2165ACAFAE90436A
        Validity
            Not Before: Apr 28 04:55:25 2025 GMT
            Not After : Apr 30 04:55:25 2025 GMT
        Subject: CN=680f0a3e-54ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:87:eb:d7:c6:eb:f3:83:01:55:01:81:3b:
                    7e:9d:83:20:f0:68:55:36:19:33:22:52:72:29:88:
                    32:88:84:84:0b:2f:a5:74:fe:03:f9:ca:b2:ca:85:
                    c2:d9:4a:5c:3f:e7:6f:e4:4b:5c:dd:be:fd:60:32:
                    d9:b9:26:54:85:98:56:84:ba:f2:34:06:9a:30:ae:
                    ab:de:0b:8b:3d:ef:c3:d1:5b:13:ea:91:00:d5:86:
                    c1:62:ea:cd:b8:15:83:8d:e5:f1:27:48:25:9e:98:
                    8d:db:23:f8:3f:2b:21:f8:b5:0f:af:96:32:c0:98:
                    37:f9:b7:b1:5f:18:06:43:6e:8d:cf:d7:03:d4:10:
                    ce:d7:1e:af:77:16:c6:25:9a:3b:17:7a:45:34:c5:
                    a3:8f:e1:24:d0:8c:35:3e:9d:e2:17:21:aa:b9:b7:
                    3a:59:29:00:f8:9b:83:03:4e:91:0e:ff:48:95:7e:
                    fc:b8:79:43:75:52:b3:8e:5e:d4:5c:2b:2b:a5:16:
                    f3:fe:b7:40:ad:1e:b0:ed:6e:92:b5:61:a9:90:98:
                    f9:e2:29:0a:d5:06:d4:c1:34:cc:87:d7:8c:22:6d:
                    b4:5b:18:90:56:b2:4a:c5:32:66:82:2f:05:b5:66:
                    f3:c9:7c:3b:8d:11:56:ac:b6:87:35:f4:7c:cf:a8:
                    ff:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9C:03:ED:5E:73:A7:4C:2D:4B:60:44:E3:11:55:CA:F4:4D:23:EC
            X509v3 Authority Key Identifier:
                keyid:AA:4A:8F:FF:1B:18:06:24:D7:51:00:3D:21:65:AC:AF:AE:90:43:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:fe:8d:e1:5a:0d:ae:59:18:5f:fc:cf:f8:6c:bd:2c:b0:ca:
         8f:15:7c:e5:fa:27:25:8c:6b:03:cd:68:20:e4:a5:19:d6:db:
         7a:88:05:d5:37:45:1f:68:01:dc:e2:d5:37:68:7b:fc:dc:88:
         87:db:f0:a1:f5:60:69:03:02:c5:f9:d5:82:36:21:6f:5c:66:
         67:78:bc:ea:11:78:cf:e3:04:a3:4f:0c:e1:ab:2d:13:c7:5a:
         a0:76:cf:fa:6c:df:e8:90:13:36:47:4e:54:62:5d:fe:b4:19:
         ef:4d:ca:3e:5b:b6:91:10:02:b2:48:c5:32:4a:55:63:4d:dd:
         68:d9:d2:6b:96:29:fb:10:f9:af:70:7c:e0:b0:62:23:4c:09:
         06:de:38:bc:6e:4c:bb:ae:4a:d8:24:82:6d:7a:c0:62:ac:46:
         3a:a4:26:ae:b6:12:0b:b3:29:47:93:e9:1b:15:23:c2:f3:33:
         f5:1e:7a:f6:fa:22:8f:e9:9a:ad:c6:01:fb:60:4a:23:c9:21:
         05:7c:0d:11:c7:7c:89:e9:6e:b0:72:bb:79:71:2b:bd:49:bb:
         01:74:69:fb:23:5e:3e:2b:b9:63:4b:ab:17:d2:bd:d8:a0:55:
         a8:e9:7f:0e:67:6c:2a:11:a9:1d:92:9d:2d:22:92:29:62:21:
         94:a5:45:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:24:26 2025 by rpki-client