Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
File:                     JlfA2qREzLm--MKoWGoOdJzqm1I.mft (raw, json)
Hash identifier:          kQ2yWY7+GbVyQvtvUqod7Gnun2gN4YMwOvPmH1Lqydo=
Subject key identifier:   FF:F5:51:AB:B3:7E:C2:37:5F:1C:A0:67:DF:5D:B2:2A:B2:61:01:D8
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Certificate issuer:       /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial:       0CC2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
Manifest number:          0CBF
Signing time:             Thu 01 May 2025 01:04:04 +0000
Manifest this update:     Thu 01 May 2025 01:04:03 +0000
Manifest next update:     Sat 03 May 2025 01:04:03 +0000
Files and hashes:         1: JlfA2qREzLm--MKoWGoOdJzqm1I.crl (hash: MLGOkgMqstjTaol8JK2xPfkc6RjYKsLCgzS+fnc7lLM=)
                          2: F4602E7A7D7A11EFAF08EC65762E951A.roa (hash: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=)
                          3: B72B3B7459DA11EC8F6187BD5A40D577.roa (hash: lX5w/V9IxiCR5OIdQ46QZvuvbFy5St8N0ELixEctQHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                          rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 May 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3266 (0xcc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AR, serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
        Validity
            Not Before: May  1 01:04:03 2025 GMT
            Not After : May  3 01:04:03 2025 GMT
        Subject: CN=6812c884-b5ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:78:68:d2:a6:94:20:30:0e:4d:a4:3d:be:f8:
                    ab:6a:d1:69:29:bd:8f:d5:73:10:83:e8:47:da:c3:
                    ed:a4:5d:41:f7:1d:05:61:0f:14:82:46:f9:89:66:
                    f7:24:e1:3c:aa:6e:ea:75:4f:20:9a:b1:1c:9c:86:
                    ed:3c:8a:4d:e6:56:82:29:bf:db:99:3b:d7:86:0b:
                    b2:ef:94:b8:3f:98:fe:9d:17:95:1a:4e:5b:a0:b9:
                    11:df:9b:3c:66:db:d6:97:00:51:61:20:3e:52:33:
                    7c:ae:04:67:fa:13:07:a3:44:6d:da:7a:1a:e5:62:
                    af:8a:02:8d:f0:20:c5:f2:4b:05:97:5d:6b:35:69:
                    8e:88:69:cc:20:c3:61:d8:78:c3:0c:b0:80:62:28:
                    14:4c:36:ff:04:bc:44:88:cc:80:97:2f:38:2e:5c:
                    1b:a7:30:aa:a4:a3:18:2a:ba:13:db:d6:00:5c:79:
                    80:db:bc:db:0f:62:dc:dc:17:78:fb:a8:dc:fa:ee:
                    c8:c6:23:f9:43:a5:53:34:0b:81:5d:85:a3:18:05:
                    e3:37:e3:97:55:59:84:f3:9b:cf:f4:41:95:c2:b8:
                    88:ae:8a:62:49:c5:08:7b:54:2e:8c:2d:f7:de:79:
                    c3:73:90:11:61:79:61:b0:93:40:f7:62:b8:75:62:
                    77:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:F5:51:AB:B3:7E:C2:37:5F:1C:A0:67:DF:5D:B2:2A:B2:61:01:D8
            X509v3 Authority Key Identifier:
                keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:97:ae:96:39:fb:ca:28:90:27:c7:c0:f2:02:8e:4a:99:54:
         2f:49:d6:0c:30:e5:4a:62:16:7f:9b:02:71:51:21:9d:de:f1:
         7c:58:82:81:c3:9e:0f:5f:f2:ab:d5:34:07:67:f9:09:c7:7c:
         63:f1:29:46:ad:71:06:7b:ca:e5:35:db:3f:1a:18:4e:b8:74:
         22:8c:5c:cc:e6:d8:96:7e:a4:cc:58:52:6e:83:7e:5c:22:b6:
         65:4a:3c:ce:23:84:bb:23:bf:21:2e:84:51:72:e8:4e:eb:bb:
         48:71:21:74:da:bc:86:56:41:fe:e1:c2:09:67:cd:ff:b4:0d:
         cd:66:47:2b:38:bd:bd:ff:11:4e:7d:3a:bb:a3:78:96:8d:fc:
         87:a9:8c:3f:98:c9:1f:14:4f:58:07:74:69:26:00:0a:f2:69:
         02:e5:c8:4f:f8:5c:a7:16:bc:a6:c1:f7:a8:78:11:30:0f:bd:
         29:42:32:a9:e7:36:b0:a6:cb:ef:77:73:32:8d:07:91:c0:2f:
         f6:28:0b:08:af:3b:4a:6e:2f:10:80:82:ee:9c:7e:a4:b1:c0:
         49:10:3f:71:5f:23:66:ad:28:a0:f5:c0:b2:2b:38:6f:e5:9c:
         84:2a:ba:31:62:58:cd:e0:79:bc:76:f7:47:09:96:5b:fc:11:
         22:da:51:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 02:52:08 2025 by rpki-client