Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
File:                     IirjAYKHNx04yuMYdAoctSsF2bo.mft (raw, json)
Hash identifier:          rCb7k7ImW82mIV18hMUhZ6DmU6GGqiJv9h+tBJYS628=
Subject key identifier:   F7:79:41:80:42:49:29:B3:B7:A3:F7:6A:8A:E3:C5:42:D1:8A:3D:78
Authority key identifier: 22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA
Certificate issuer:       /CN=F36999E0AR/serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
Certificate serial:       05BA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
Manifest number:          05BA
Signing time:             Sun 10 Aug 2025 02:36:06 +0000
Manifest this update:     Sun 10 Aug 2025 02:36:04 +0000
Manifest next update:     Tue 12 Aug 2025 02:36:04 +0000
Files and hashes:         1: IirjAYKHNx04yuMYdAoctSsF2bo.crl (hash: 3q6H8L0c+4wt3E58Q7xhlmzxwgElZwzts3dSBw3E30E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                          rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 12 Aug 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1466 (0x5ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36999E0AR, serialNumber=222AE3018287371D38CAE318740A1CB52B05D9BA
        Validity
            Not Before: Aug 10 02:36:04 2025 GMT
            Not After : Aug 12 02:36:04 2025 GMT
        Subject: CN=68980595-4d19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cd:23:4b:ae:6c:cd:db:bb:ee:17:a2:07:0a:
                    6c:8b:2d:96:59:2e:33:ca:2d:64:a1:f6:18:79:64:
                    bf:ff:da:93:fd:a5:b3:68:4e:ba:09:79:9c:61:71:
                    bf:2c:80:c1:0d:94:21:2c:1f:9c:d4:c3:1b:49:48:
                    1d:5c:d7:d9:d6:7a:c2:64:32:95:ff:4a:78:f7:57:
                    d8:a2:86:99:ce:82:c4:21:b1:ca:c6:22:d1:b6:12:
                    45:84:8b:0b:9d:3e:6f:97:2d:8c:c8:f6:b0:1a:6d:
                    65:f2:68:4e:c1:3c:43:85:b5:e8:a3:4f:e2:0d:a4:
                    18:39:7b:44:e6:a3:97:bd:d5:18:46:a4:96:e7:45:
                    5e:0f:fb:2c:f0:53:91:c6:22:52:fa:4f:56:28:e2:
                    3f:32:ad:f7:9f:a5:91:17:4a:79:f5:d9:cc:ba:0f:
                    5b:02:b7:be:ba:c8:e5:01:60:34:4d:17:1c:07:bf:
                    4f:5f:09:23:eb:ed:4d:c6:1d:65:76:9d:9f:cb:bd:
                    aa:d8:5b:1b:dd:33:6e:ea:5e:a3:7b:97:6b:fe:84:
                    0a:d7:e2:5d:e1:e6:d0:60:7e:f2:57:8c:cb:6e:95:
                    bc:a8:68:7b:c1:3a:93:be:d9:2e:69:e0:64:d1:33:
                    e9:e4:af:24:7a:12:ee:f1:e9:c6:35:20:ab:5c:99:
                    71:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:79:41:80:42:49:29:B3:B7:A3:F7:6A:8A:E3:C5:42:D1:8A:3D:78
            X509v3 Authority Key Identifier:
                keyid:22:2A:E3:01:82:87:37:1D:38:CA:E3:18:74:0A:1C:B5:2B:05:D9:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/IirjAYKHNx04yuMYdAoctSsF2bo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36999E0/BCE1D6FC146311EC85223B33D8A014CE/IirjAYKHNx04yuMYdAoctSsF2bo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:1a:bf:7b:49:91:fc:57:12:c3:5b:aa:99:86:21:07:2c:2e:
         65:5f:ca:22:62:20:85:20:d2:85:6a:59:73:1a:c3:d4:03:a5:
         9f:0c:2c:cb:2f:db:d7:09:da:d9:f0:0c:34:86:f8:a1:8c:a3:
         70:15:eb:b3:38:84:07:0c:a6:a1:a2:9a:62:01:06:aa:d1:8a:
         d7:83:a3:68:a2:3a:2d:5b:aa:b7:ff:0c:33:ab:4a:c3:a6:ce:
         7b:1c:a6:86:c1:61:56:8a:dd:a0:a8:8c:dc:95:d0:ca:2e:8c:
         20:cc:d2:8a:f7:6e:55:15:33:5e:0d:ea:99:99:2f:eb:2b:cb:
         bf:d2:5c:0e:82:a8:f7:73:b1:3c:35:76:26:5d:b8:f1:ec:a5:
         7d:c3:02:6b:7c:87:db:d8:e7:da:21:16:15:10:4b:6d:c2:ca:
         a1:69:31:ae:19:d4:20:5d:4b:f8:bf:4b:10:07:ec:7b:71:50:
         e3:60:42:a3:80:5b:0c:90:51:db:30:41:69:2b:d1:3a:6e:c3:
         f9:b7:fb:56:1e:79:65:9c:f1:26:7f:50:b7:8d:bd:5b:23:6c:
         90:77:c5:7f:05:f0:c9:04:73:e8:e7:40:f7:74:9c:0a:92:69:
         bf:1d:99:0e:4d:9d:2a:2b:bd:9c:43:b2:cf:f3:97:b1:1e:15:
         b1:27:4f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:17:13 2025 by rpki-client