Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
File:                     JlfA2qREzLm--MKoWGoOdJzqm1I.mft (raw, json)
Hash identifier:          Hoo6eFtJzT9Tjw0aTZE2zWjPEUQWwQ5585X0LYqPBFk=
Subject key identifier:   AB:A9:21:F2:68:40:77:15:2B:BF:16:08:AB:FB:96:E2:0D:91:99:4F
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Certificate issuer:       /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial:       0CF0
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
Manifest number:          0CED
Signing time:             Mon 16 Jun 2025 01:05:11 +0000
Manifest this update:     Mon 16 Jun 2025 01:05:10 +0000
Manifest next update:     Wed 18 Jun 2025 01:05:10 +0000
Files and hashes:         1: JlfA2qREzLm--MKoWGoOdJzqm1I.crl (hash: huh0f1gfo6roAqQvIHVtisrLjhRtoNBcd2i/yCycPiY=)
                          2: F4602E7A7D7A11EFAF08EC65762E951A.roa (hash: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=)
                          3: B72B3B7459DA11EC8F6187BD5A40D577.roa (hash: lX5w/V9IxiCR5OIdQ46QZvuvbFy5St8N0ELixEctQHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                          rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Jun 2025 00:26:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3312 (0xcf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AR, serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
        Validity
            Not Before: Jun 16 01:05:10 2025 GMT
            Not After : Jun 18 01:05:10 2025 GMT
        Subject: CN=684f6dc6-cb76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0a:0b:1e:c6:c9:57:fa:5e:4d:b8:49:28:cb:
                    b8:fb:38:5a:20:40:b2:eb:d8:27:e7:5b:1c:5e:90:
                    fc:f6:93:f3:bd:d9:b6:0e:5c:6c:e0:de:35:11:1a:
                    65:06:a7:8b:86:17:47:09:12:0d:f0:d2:a4:23:c2:
                    5f:fb:56:f0:af:f5:85:c5:3d:8b:62:d2:89:a2:92:
                    ab:49:7c:91:e1:0c:75:b4:4f:ac:ff:09:9d:39:1a:
                    96:b6:b6:27:72:4b:36:fb:e4:6f:44:b2:2c:8e:05:
                    38:6e:66:39:d3:e8:5d:03:73:39:10:84:8b:14:41:
                    84:98:cf:fd:eb:37:3c:3c:66:ff:a2:72:3d:12:45:
                    43:ff:ff:cd:99:08:fb:a7:fc:3a:61:04:bc:b4:a4:
                    4b:78:0a:4f:45:bf:12:cc:45:6d:fd:90:cb:f9:71:
                    0b:1b:00:e8:e8:aa:e9:28:62:5f:f5:e7:c7:68:c2:
                    a6:68:bf:e2:65:31:52:cf:78:d7:a6:b8:42:17:46:
                    1e:3b:37:99:11:42:a8:04:e1:9b:c1:17:e9:33:87:
                    f8:c4:0d:15:3c:22:49:93:42:cd:f2:f6:1d:b1:73:
                    79:18:d2:7a:6c:20:17:5a:d5:d4:00:88:6c:77:ab:
                    cc:de:4a:53:b6:20:75:9e:8e:72:a9:2e:f8:ca:80:
                    35:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A9:21:F2:68:40:77:15:2B:BF:16:08:AB:FB:96:E2:0D:91:99:4F
            X509v3 Authority Key Identifier:
                keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:cc:a5:97:1e:95:c0:ad:90:1e:b9:81:b1:b6:5b:3a:42:bc:
         1f:3c:0c:0d:f9:1d:55:2a:82:20:00:09:ad:54:a2:ec:d2:93:
         9d:8a:fc:a0:b3:e8:cf:e9:98:8e:46:f2:a1:0a:60:9e:0c:d8:
         29:3c:ca:67:de:41:23:42:96:50:d2:28:77:af:db:81:72:4d:
         71:52:3a:87:c7:01:e6:48:16:5b:6e:21:24:51:06:64:a4:e6:
         97:78:91:c0:95:34:95:4a:4b:f6:3a:f2:8e:27:a7:2a:39:31:
         93:51:44:98:b4:80:7e:9e:04:b3:20:a6:bb:22:ea:c4:cc:be:
         7b:a0:1e:7c:34:62:c0:23:cb:0a:c9:ca:da:dd:a3:d0:6f:0c:
         eb:02:06:75:4f:3b:89:2b:74:f5:02:7e:94:b0:fc:db:5d:54:
         8a:5a:13:78:f8:d5:d5:5c:f0:45:5d:b3:1f:4e:24:02:1d:a2:
         63:d7:56:3e:07:9e:b1:4a:4a:5c:7e:ef:2e:83:7b:71:f7:36:
         d0:72:0e:67:49:7b:cd:26:d9:e3:a0:87:60:2e:f9:43:fb:5c:
         27:65:9d:67:d6:bd:95:39:ff:dd:07:7c:77:9e:46:bd:31:25:
         e5:8b:6f:b2:a2:10:d8:3d:a4:34:bd:cb:40:6b:5b:a1:6d:4d:
         15:c8:52:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 13:29:18 2025 by rpki-client