Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
File:                     IirjAYKHNx04yuMYdAoctSsF2bo.mft (raw, json)
Hash identifier:          QIjwO8hi8yTNkYYjT4V6aTuO+nVTZRutzmbYukIGSC0=
Subject key identifier:   53:98:0A:14:23:18:4A:F5:D4:D6:21:C0:D0:5D:E1:06:D8:96:64:BE
Authority key identifier: 22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA
Certificate issuer:       /CN=F36999E0AR/serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
Certificate serial:       0555
Authority info access:    rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
Manifest number:          0555
Signing time:             Fri 02 May 2025 02:31:26 +0000
Manifest this update:     Fri 02 May 2025 02:31:25 +0000
Manifest next update:     Sun 04 May 2025 02:31:25 +0000
Files and hashes:         1: IirjAYKHNx04yuMYdAoctSsF2bo.crl (hash: b7tEXutknaTk9FbHS9fk+l/dyiL4/HLr9KoLwTpDAMI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                          rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1365 (0x555)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36999E0AR, serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
        Validity
            Not Before: May  2 02:31:25 2025 GMT
            Not After : May  4 02:31:25 2025 GMT
        Subject: CN=68142e7e-5b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:6a:8a:63:c6:ca:f1:8f:3b:02:48:f4:9e:4e:
                    8b:8e:1c:1c:8d:03:b3:e3:a5:2c:9d:f7:aa:4c:1b:
                    ba:e0:f3:30:fa:bc:54:cc:1a:ad:8a:bb:20:ea:86:
                    91:4d:2a:58:f2:9a:24:71:b8:12:00:de:49:d4:df:
                    7a:b3:22:bc:05:9a:c9:ec:98:5f:8f:e3:10:55:0f:
                    dc:0b:ab:06:b5:2b:c0:9e:93:cb:e7:64:8e:08:8a:
                    65:bb:bc:83:b1:ec:8c:f2:78:9a:31:51:01:a1:31:
                    01:f1:17:ff:3f:ee:5f:0d:f9:fa:59:a3:53:65:e7:
                    63:e7:2c:f7:c8:78:b0:dd:41:33:8f:3f:5b:2f:d3:
                    97:5e:a3:8f:20:3d:43:91:83:e2:35:4c:22:0b:55:
                    b0:b9:07:9c:2b:35:2e:7d:37:02:be:53:43:2c:af:
                    20:76:f1:3b:28:94:6f:06:b5:56:52:9b:d3:01:46:
                    8e:65:5d:a9:e0:27:4f:64:63:c6:fb:6f:b0:b4:79:
                    57:6d:a0:1d:1d:8b:35:3d:b9:53:f2:94:1c:9d:30:
                    b0:32:60:ef:61:aa:bd:30:70:bd:f5:a5:3d:d2:a0:
                    f3:9e:95:11:13:38:af:2e:ff:87:2b:d2:5f:68:30:
                    8b:e0:3c:c3:6f:66:53:aa:84:90:64:55:de:58:83:
                    7b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:98:0A:14:23:18:4A:F5:D4:D6:21:C0:D0:5D:E1:06:D8:96:64:BE
            X509v3 Authority Key Identifier:
                keyid:22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6a:1a:56:88:7a:3c:e9:7f:99:ba:47:d4:04:79:83:fd:c0:
         f2:b9:db:4d:21:fc:09:85:09:58:a6:34:36:10:81:7d:1d:6c:
         0a:0f:c0:d0:45:fe:92:b0:95:8a:2c:85:69:f4:63:8c:f4:79:
         aa:df:a3:52:73:8f:f2:b7:f6:41:fd:3c:8a:4e:d8:17:1c:24:
         a2:6a:64:4b:e5:09:bd:4d:90:d3:d4:ff:f2:68:03:65:f0:5a:
         60:fc:67:aa:77:bf:e6:48:f8:8a:5a:03:fb:41:be:be:c6:76:
         1a:55:e1:6a:f7:76:80:cf:ba:67:73:47:f2:0f:49:9d:32:59:
         02:38:5f:e1:16:9d:50:2e:30:7e:2f:00:ad:25:24:be:57:b9:
         07:d0:3e:d2:b9:1f:6a:0b:69:82:e4:3e:be:6b:75:8c:d9:9e:
         2a:3a:30:bf:9e:e9:4c:da:66:5a:21:40:c2:5a:a8:1d:0e:1f:
         5f:29:1d:70:40:17:b7:50:a1:ae:5c:b9:28:cc:f9:ac:7c:eb:
         d7:70:c1:30:4f:54:2a:bf:88:00:d2:5b:1b:14:ce:4c:1f:7b:
         d2:42:64:fc:33:0b:a4:ce:e8:4c:90:4c:bc:1c:78:89:4c:f6:
         c7:72:3d:1a:ca:fb:bf:7b:81:30:f7:82:59:53:b9:ac:d3:6b:
         c1:fc:53:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:24:38 2025 by rpki-client