Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
File:                     l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft (raw, json)
Hash identifier:          om1z7Hxb2oyTa0j6EOAeAtYDxJ+INYiDerWuY9dEGkU=
Subject key identifier:   70:50:15:E6:E8:E0:44:7C:80:81:65:CC:5E:B8:22:F8:6B:00:64:F0
Authority key identifier: 97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
Certificate issuer:       /CN=F36882A1AR/serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
Certificate serial:       0628
Authority info access:    rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
Manifest number:          0626
Signing time:             Tue 12 Aug 2025 02:21:27 +0000
Manifest this update:     Tue 12 Aug 2025 02:21:26 +0000
Manifest next update:     Thu 14 Aug 2025 02:21:26 +0000
Files and hashes:         1: l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl (hash: nfuWx6uh3b8hUH8wUUWGeawrK9uFS031+nQsieHeknc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                          rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 Aug 2025 00:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1576 (0x628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36882A1AR, serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
        Validity
            Not Before: Aug 12 02:21:26 2025 GMT
            Not After : Aug 14 02:21:26 2025 GMT
        Subject: CN=689aa527-0469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cc:60:bd:38:b7:59:ba:c1:96:0b:a2:59:97:
                    22:89:9a:ed:cd:63:99:f2:25:57:16:fb:fd:ad:f5:
                    6c:fd:99:5f:59:58:00:0f:1e:d2:81:cd:ba:ef:60:
                    c9:98:73:c3:c2:10:76:8e:6d:e5:cf:44:3f:7e:26:
                    7a:84:ee:11:1c:02:cd:44:7d:ed:de:b2:bf:68:3d:
                    39:94:78:26:02:c8:85:38:5e:93:39:37:b1:07:f8:
                    0d:60:30:77:0a:56:88:8a:d8:a3:a7:38:44:5d:64:
                    21:e1:db:2b:0d:52:24:a1:95:cf:27:16:64:a5:f1:
                    07:94:8e:91:0e:4e:fb:ce:62:20:e3:2f:8c:72:97:
                    c7:69:65:6d:13:af:a9:58:cc:f6:6f:45:60:a4:25:
                    65:b1:dc:05:ba:53:69:51:3f:22:07:19:5d:42:86:
                    2c:e6:db:4d:72:a2:7f:24:b2:7a:68:59:eb:cd:16:
                    fd:9e:f2:fb:66:f7:55:d5:3b:88:e8:36:28:b2:a9:
                    2d:13:02:6f:24:f1:bc:1c:4a:5c:27:5f:da:23:62:
                    df:b1:5a:f7:46:5f:e0:da:c5:e8:a1:6a:ac:12:12:
                    ed:78:d0:a8:ca:60:b1:8b:cf:db:2c:98:00:72:bf:
                    30:b8:e9:7e:bb:d7:11:e4:cd:99:e8:a6:59:00:a6:
                    f0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:50:15:E6:E8:E0:44:7C:80:81:65:CC:5E:B8:22:F8:6B:00:64:F0
            X509v3 Authority Key Identifier:
                keyid:97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:15:f2:30:3a:61:86:01:92:59:a9:bc:7c:49:1f:1d:4b:31:
         9d:eb:64:78:1a:9f:65:7c:0e:56:5d:11:52:9f:45:a1:6d:6c:
         cf:f7:ca:01:6d:87:fa:d3:9d:9a:c0:85:42:62:17:e5:19:32:
         21:05:5a:ec:c6:cf:83:de:ac:7b:d8:39:be:32:de:7c:a6:6c:
         09:4e:a8:99:e4:7e:a8:57:b1:f7:31:0b:65:d8:9a:9f:ca:c0:
         1e:a1:37:b2:b7:bb:84:22:53:52:72:9b:81:6d:75:7f:6b:f9:
         8a:23:8b:57:f5:f4:49:ae:7d:76:e8:6d:0f:24:39:37:95:77:
         82:3f:54:ea:c1:17:4b:9c:4c:c2:74:a1:55:f6:1a:f0:04:59:
         b5:6e:d0:b0:a7:10:64:4c:ac:7c:67:a8:33:70:b1:23:3d:f1:
         7f:33:dc:fa:2b:a3:45:b3:dd:cf:42:69:67:e6:ad:08:e5:26:
         83:59:16:f3:47:df:56:94:2b:b0:2a:fc:33:07:3f:69:9b:9d:
         bd:9a:56:1b:4d:4d:7a:e3:42:5a:ea:b5:8f:c9:2f:c8:a2:97:
         59:9e:a6:41:b2:a6:cd:a9:32:99:b3:78:6a:e7:55:6c:93:24:
         14:7e:03:29:82:9f:d8:e1:ff:86:7c:53:7f:b3:c5:8a:a2:62:
         cf:4f:2b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 00:38:04 2025 by rpki-client