Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
File:                     itr_GHci3uuw3c4Fe_PCmNAsfM4.mft (raw, json)
Hash identifier:          WcOoDgiNjcGi+mnzONMcA+VEM7jfAjzCg9ctxlvfm/8=
Subject key identifier:   F1:62:10:1B:E1:A8:63:6A:6D:7D:E9:8B:4A:D5:DD:46:62:6B:25:87
Authority key identifier: 8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE
Certificate issuer:       /CN=F36939A6AR/serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
Certificate serial:       0399
Authority info access:    rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
Manifest number:          0398
Signing time:             Mon 04 Aug 2025 03:32:30 +0000
Manifest this update:     Mon 04 Aug 2025 03:32:29 +0000
Manifest next update:     Wed 06 Aug 2025 03:32:29 +0000
Files and hashes:         1: itr_GHci3uuw3c4Fe_PCmNAsfM4.crl (hash: hIj5WWPu1h2a0FDiiB00an8L+edXlrV7SWk7k7JexB0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                          rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 06 Aug 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921 (0x399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36939A6AR, serialNumber=8ADAFF187722DEEBB0DDCE057BF3C298D02C7CCE
        Validity
            Not Before: Aug  4 03:32:29 2025 GMT
            Not After : Aug  6 03:32:29 2025 GMT
        Subject: CN=689029ce-e24e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4a:8a:1a:bc:ce:fc:78:b9:14:ad:94:06:09:
                    5d:ac:46:28:69:d9:7d:f5:09:a9:07:50:68:fb:e0:
                    fb:48:f6:cc:34:31:ac:7c:58:03:9a:a4:98:2e:be:
                    d0:ad:4b:e8:b9:7f:7e:55:f0:58:25:64:da:fd:23:
                    e8:f8:92:99:d1:d7:d2:97:4b:11:35:2b:d0:85:c7:
                    44:4c:59:d2:27:7b:63:64:78:56:c0:ca:39:79:10:
                    37:99:88:a5:c6:0f:4c:9d:eb:ad:20:9e:6d:96:f1:
                    87:59:4d:07:17:d4:49:8a:ac:34:f5:74:4d:15:c0:
                    a3:8e:eb:16:1d:9e:56:c2:3b:27:cd:2a:6f:a3:1c:
                    0c:7e:be:7b:e4:8e:fb:94:b0:46:0b:bf:a0:19:01:
                    79:51:14:ec:f3:5b:f9:87:15:4a:16:5d:17:c7:24:
                    1b:fb:f5:3c:ad:4c:21:be:b7:74:83:db:d5:ed:b0:
                    95:eb:86:02:84:c3:95:b6:04:8c:88:86:05:0a:5b:
                    54:29:ec:99:8b:a1:10:94:8e:55:be:88:51:5b:bb:
                    eb:12:47:85:c3:88:9f:eb:2f:89:14:e8:5f:88:d1:
                    ca:c9:ec:e9:9b:fd:00:91:33:fd:dc:26:ea:ad:04:
                    8e:f9:07:c5:7e:0e:4b:20:c7:d6:ca:6c:1a:78:e9:
                    9e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:62:10:1B:E1:A8:63:6A:6D:7D:E9:8B:4A:D5:DD:46:62:6B:25:87
            X509v3 Authority Key Identifier:
                keyid:8A:DA:FF:18:77:22:DE:EB:B0:DD:CE:05:7B:F3:C2:98:D0:2C:7C:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/itr_GHci3uuw3c4Fe_PCmNAsfM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36939A6/AD94AA20B5FD11EDBFBA63F1F1222468/itr_GHci3uuw3c4Fe_PCmNAsfM4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:39:3b:5a:ef:ab:a1:a1:ae:62:98:96:bd:6b:f2:42:96:a1:
         ed:d8:5f:19:86:0b:1b:e8:b8:fc:cd:80:07:03:b2:2b:37:b3:
         dd:cf:26:09:d8:3d:66:0f:46:24:13:a1:2a:a3:13:d1:56:6c:
         67:63:d5:8f:1f:ab:7e:2f:54:78:10:36:33:db:03:b9:2a:21:
         8c:ce:e0:d1:93:63:ec:4f:b5:fe:55:1b:51:0f:ab:68:84:5b:
         06:e0:0e:ff:b0:65:bb:8b:25:9e:46:d6:78:b2:dd:e3:e9:c6:
         58:42:1a:ea:8e:5a:cc:1b:73:54:5f:80:fb:f3:bd:c4:a7:48:
         fb:8f:9a:a8:75:ba:38:35:3d:8f:7c:6b:3f:91:4f:3b:dc:0f:
         48:0d:c3:f8:d6:ec:37:58:5a:81:37:43:7a:2d:32:93:44:6f:
         c1:8a:27:e3:b0:5a:f4:a7:91:9e:16:48:ff:b4:b6:1f:ea:5c:
         3c:86:3a:dd:de:f2:4d:0e:2e:20:0a:56:cf:db:90:05:5a:c6:
         fe:9d:a1:a4:22:d3:e7:4e:2e:a0:d4:51:99:c4:f7:2b:35:cc:
         e3:77:c7:10:66:f7:99:f3:83:11:a5:18:de:dc:33:2f:38:7a:
         d7:da:b4:18:62:65:b1:dd:b5:33:de:4e:16:06:13:0f:34:f4:
         16:2e:c7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:01:54 2025 by rpki-client