Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
File:                     MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft (raw, json)
Hash identifier:          VP7e3ZmgqczAc/ea47FIRpHbvCaF+wtCHOXS2IFZTVw=
Subject key identifier:   AA:60:38:BA:53:07:DC:FA:01:C7:45:FF:0A:1A:8B:2A:19:B4:6F:3B
Authority key identifier: 33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74
Certificate issuer:       /CN=F3691854AR/serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
Certificate serial:       02A5
Authority info access:    rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
Manifest number:          02A4
Signing time:             Fri 08 Aug 2025 04:06:41 +0000
Manifest this update:     Fri 08 Aug 2025 04:06:40 +0000
Manifest next update:     Sun 10 Aug 2025 04:06:40 +0000
Files and hashes:         1: MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl (hash: s/Cytw0rzkF78JuF0gilTXuM6Qfy19FSMCTsFazSoRk=)
                          2: 2BBC033C71AE11EEA2D2E5354AD9E6FC.roa (hash: 2uI0q3ii9m0usdGfquktABEqM6p1z0wsDQZ+3pXcYh4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
                          rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 10 Aug 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 677 (0x2a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691854AR, serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
        Validity
            Not Before: Aug  8 04:06:40 2025 GMT
            Not After : Aug 10 04:06:40 2025 GMT
        Subject: CN=689577d1-1c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:31:c2:09:ba:ac:92:fd:33:da:33:f8:aa:11:
                    8c:03:6d:f6:4c:a1:65:31:24:e1:6c:f5:81:fe:cd:
                    c2:b2:c9:63:ee:36:b5:f6:0e:71:db:e1:ce:e9:92:
                    3d:eb:f4:ab:52:ce:97:9e:ac:ab:77:98:85:29:99:
                    4c:21:ae:dc:a5:93:a5:6c:af:e5:34:ed:c3:68:e1:
                    28:cc:65:c7:87:09:0f:08:f9:df:21:4e:ca:fd:76:
                    aa:d3:5a:f3:e5:c3:66:24:ec:9c:3d:23:76:dc:3f:
                    f9:5c:78:86:cc:4e:66:75:c6:6f:75:19:3d:de:d2:
                    8f:0d:20:8b:22:60:5a:8f:80:fb:61:64:e1:00:bd:
                    65:00:e7:2f:f9:fd:46:c2:b9:00:f9:26:d6:1f:ed:
                    42:f9:31:c7:0d:84:2a:c1:72:96:06:2d:e1:11:c8:
                    eb:10:6c:c4:aa:b7:73:03:39:32:cf:4d:20:65:6c:
                    d5:1d:ce:ca:56:19:94:7e:8c:54:7e:ba:e4:33:26:
                    53:2c:98:a0:74:b9:e3:0c:a2:43:99:dd:ed:65:c3:
                    d1:ac:1d:10:2f:7d:f7:09:f2:0f:30:7d:d9:c3:30:
                    ef:b7:39:34:89:60:d5:df:dd:84:45:cf:c6:0a:0e:
                    11:a4:b7:db:26:8d:f5:24:cb:b3:ab:b9:c3:c2:08:
                    74:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:60:38:BA:53:07:DC:FA:01:C7:45:FF:0A:1A:8B:2A:19:B4:6F:3B
            X509v3 Authority Key Identifier:
                keyid:33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:14:11:47:8f:5d:a8:b9:80:05:93:7f:c5:4a:0b:00:f1:ed:
         d2:f0:78:74:a8:b5:e3:ed:83:cc:0a:bb:c2:74:ac:32:12:3a:
         c5:42:c9:2e:c5:06:73:20:71:3b:c4:6d:0a:67:35:8b:c7:b6:
         81:1f:d2:c3:c4:26:c3:cc:ae:6c:3c:3b:37:c9:49:41:cb:e1:
         65:b7:ca:d0:1f:78:52:f8:42:00:3a:ac:c3:fa:4d:86:7f:36:
         d9:a5:dd:c2:ea:1d:c1:5c:8a:bf:6e:fb:9a:87:f9:58:c8:b4:
         73:93:07:97:5b:64:f1:4c:2f:fd:6f:f6:c7:9b:52:fd:7d:1f:
         60:96:6b:14:90:5a:6d:23:5f:8f:c7:25:9d:7f:c4:80:75:e5:
         1e:00:af:6f:ef:46:83:b8:f5:97:d8:f1:be:b3:36:39:13:85:
         c2:6f:43:2b:8b:4c:38:80:6f:09:89:9d:09:a8:0b:cd:3d:e3:
         08:bd:0f:e7:1e:80:57:bb:b7:71:b5:6a:bd:e3:55:96:4a:8a:
         dc:71:c8:be:70:78:24:76:25:b9:84:a9:e5:a6:57:8b:27:3e:
         ef:0d:85:77:bb:dd:4d:c7:e8:05:37:59:80:28:4c:b6:9f:f6:
         8a:e2:bb:81:8c:40:47:d2:a4:35:0a:a3:3a:a6:fa:25:6a:4c:
         6a:96:80:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 00:59:45 2025 by rpki-client