Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
File:                     4xEv77cGGMJWaxygluyNG7Xzucs.mft (raw, json)
Hash identifier:          tf0cxWmKcn3o+o68zjDKbaqbrn98E/gMQms93mGf6aI=
Subject key identifier:   7C:5E:08:CE:E3:1E:08:08:44:1A:67:F7:F7:11:52:5E:EC:E7:B6:B0
Authority key identifier: E3:11:2F:EF:B7:06:18:C2:56:6B:1C:A0:96:EC:8D:1B:B5:F3:B9:CB
Certificate issuer:       /CN=F367FC4FAR/serialNumber=E3112FEFB70618C2566B1CA096EC8D1BB5F3B9CB
Certificate serial:       0C8B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4xEv77cGGMJWaxygluyNG7Xzucs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
Manifest number:          0C8A
Signing time:             Sun 27 Apr 2025 01:06:43 +0000
Manifest this update:     Sun 27 Apr 2025 01:06:42 +0000
Manifest next update:     Tue 29 Apr 2025 01:06:42 +0000
Files and hashes:         1: 4xEv77cGGMJWaxygluyNG7Xzucs.crl (hash: y5nJCf5mLAP/y+xoAq4++MMZtvj46EXn4Ycsaf5SW7I=)
                          2: CF0B622680CF11E6B85F0616F8AEA228.roa (hash: 1lI0Ic1CEtnqLpkbf3wsFe/5DRUyxbUGqpE48sR72kQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
                          rsync://rpki.afrinic.net/repository/arin/4xEv77cGGMJWaxygluyNG7Xzucs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3211 (0xc8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC4FAR, serialNumber=E3112FEFB70618C2566B1CA096EC8D1BB5F3B9CB
        Validity
            Not Before: Apr 27 01:06:42 2025 GMT
            Not After : Apr 29 01:06:42 2025 GMT
        Subject: CN=680d8323-b808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:46:28:98:98:cb:67:76:4a:48:c6:05:09:
                    6b:3f:c6:b9:4b:fb:54:4e:22:84:87:67:eb:62:b3:
                    78:ee:27:26:1c:af:4e:ba:79:84:4a:6c:aa:44:30:
                    a2:10:cf:30:50:5c:df:2a:e3:98:00:df:72:68:70:
                    98:09:c0:de:35:cd:e0:1c:e7:d0:e1:e5:85:88:ec:
                    66:5c:16:14:73:36:02:c2:df:5f:e3:86:81:97:43:
                    34:59:c5:e4:95:8f:72:01:57:33:e2:3d:88:e3:90:
                    0e:6a:39:52:db:a9:14:d9:e1:76:c3:cb:9b:dc:ef:
                    74:f5:2e:87:b7:f9:f5:0c:99:de:d5:d6:66:c1:d5:
                    4b:9a:49:b6:dc:4a:d3:f9:60:53:87:83:43:21:97:
                    61:17:20:49:97:b0:60:02:9f:39:97:52:c1:87:5b:
                    1e:31:5d:69:35:43:cc:5f:31:ff:7c:2d:61:b9:e2:
                    a5:41:73:11:c0:a5:c9:ef:17:07:e6:b9:98:3f:b7:
                    e8:1c:89:92:06:e6:c2:08:77:74:2e:59:61:cc:74:
                    c5:8e:3f:28:29:50:3f:71:2c:97:d4:5f:cb:5d:36:
                    e7:2f:89:71:61:7a:85:d8:12:47:e2:9f:cc:34:4e:
                    aa:6a:71:ad:e8:77:bc:ad:4d:e3:c9:63:2c:8a:19:
                    bf:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:5E:08:CE:E3:1E:08:08:44:1A:67:F7:F7:11:52:5E:EC:E7:B6:B0
            X509v3 Authority Key Identifier:
                keyid:E3:11:2F:EF:B7:06:18:C2:56:6B:1C:A0:96:EC:8D:1B:B5:F3:B9:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4xEv77cGGMJWaxygluyNG7Xzucs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/59C96FCC80BF11E69BC8B87EF8AEA228/4xEv77cGGMJWaxygluyNG7Xzucs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:f3:db:2b:6b:07:63:93:87:05:d0:57:1d:9b:dc:94:22:94:
         28:80:ca:78:16:70:e7:7f:76:e3:fd:19:82:46:d6:7f:c0:38:
         42:f8:1c:a9:76:1f:63:2c:69:93:a7:37:7c:7b:49:45:9a:f4:
         6e:70:bc:3e:cf:a0:cb:c8:89:ee:48:43:3c:1b:82:16:bc:27:
         f7:eb:89:80:42:d7:7a:02:72:4c:80:b0:4f:f3:11:19:78:f1:
         e2:95:c9:98:f7:fd:cf:4b:75:25:93:dc:90:c8:f4:c2:a4:fc:
         1c:31:d7:8a:3d:44:6e:39:92:dd:d2:3a:e6:0d:cf:4f:ec:ef:
         ad:d3:5e:59:19:25:ec:39:63:f2:c5:c9:70:f2:1b:14:3c:5b:
         e3:44:d4:8c:9b:2f:a3:f5:34:f7:57:d7:8e:c6:19:b0:05:2f:
         5f:32:9b:98:64:58:a5:9f:f1:37:0f:40:ab:80:77:13:14:c1:
         75:72:9c:66:ec:b2:c0:c0:f8:bb:4b:16:d6:83:e4:7c:05:99:
         83:b9:81:93:4e:52:36:58:d6:5a:f0:01:8d:03:03:b3:fb:c0:
         bc:96:6e:20:eb:10:2f:2f:37:22:05:9b:e1:13:88:23:fa:cd:
         ac:6b:a1:d9:6b:5d:3c:92:31:d7:6d:5b:dc:5f:6f:75:dc:b1:
         5d:4f:24:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:32:45 2025 by rpki-client