Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
File:                     otd9qqMurfowwn_FTDYvrBwxtaM.mft (raw, json)
Hash identifier:          FGWIIdCi6TGKqEgJwROoYsCezsv0y0BDrNXHQ2woGNY=
Subject key identifier:   DE:32:E1:70:59:B7:4C:46:94:DD:36:3D:2B:5B:80:82:BC:3F:4B:F7
Authority key identifier: A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3
Certificate issuer:       /CN=F36A15D5AR/serialNumber=A2D77DAAA32EADFA30C27FC54C362FAC1C31B5A3
Certificate serial:       088A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
Manifest number:          0888
Signing time:             Sat 14 Jun 2025 01:38:18 +0000
Manifest this update:     Sat 14 Jun 2025 01:38:17 +0000
Manifest next update:     Mon 16 Jun 2025 01:38:17 +0000
Files and hashes:         1: otd9qqMurfowwn_FTDYvrBwxtaM.crl (hash: HPuaTIt8PpwPw36HUrcvepJy8DyG+v69A8BAU5zIaAQ=)
                          2: 9965A5A606AE11EA96066744F8AEA228.roa (hash: wIbFP7nt0VapeRtyrT6a4GxS47/3LZ5/NRY7qSwEjUk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
                          rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Jun 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2186 (0x88a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A15D5AR, serialNumber=A2D77DAAA32EADFA30C27FC54C362FAC1C31B5A3
        Validity
            Not Before: Jun 14 01:38:17 2025 GMT
            Not After : Jun 16 01:38:17 2025 GMT
        Subject: CN=684cd28a-62f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2d:b6:a9:9b:4b:cb:8a:ae:52:18:96:71:e0:
                    22:b3:e8:a0:c7:44:40:d9:a3:4d:fc:94:e4:1b:00:
                    04:a1:b4:46:6f:e0:47:50:bb:f0:21:11:2a:78:f2:
                    06:cb:62:0b:ae:6b:89:ff:9f:74:a4:ac:20:1e:ab:
                    35:92:05:f3:ee:d6:64:4c:5f:05:75:bb:7b:f8:ca:
                    ee:ca:53:e9:dd:6d:61:f9:fc:3d:60:2e:e2:dd:a7:
                    7c:d2:e7:cc:aa:ca:da:3c:12:3c:94:a8:a0:91:6e:
                    b9:36:55:7b:79:c1:4f:7f:a3:e2:8c:af:f2:64:37:
                    54:45:62:92:f5:a8:74:fc:cc:b6:6c:95:6c:5e:55:
                    7f:ab:07:22:24:c2:41:2f:bb:7d:97:30:a0:91:56:
                    35:a1:18:40:1c:6a:b6:7a:a0:3b:85:be:e6:56:95:
                    1a:90:d1:5d:3c:4a:4b:36:7e:e9:b6:1c:69:70:ce:
                    88:0d:c4:85:a8:ee:24:11:c6:2b:fa:6e:ae:b4:cd:
                    b6:74:4c:f8:24:8b:c8:8f:d6:57:29:fd:7c:c2:3f:
                    7f:29:a9:e3:f4:03:a5:9e:40:ee:55:a6:df:10:15:
                    ab:43:b6:60:c1:76:57:2d:25:1c:4d:ce:0f:7e:50:
                    57:e5:b0:de:ef:18:69:e5:12:bc:72:d6:46:17:11:
                    42:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:32:E1:70:59:B7:4C:46:94:DD:36:3D:2B:5B:80:82:BC:3F:4B:F7
            X509v3 Authority Key Identifier:
                keyid:A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:2c:93:6b:51:45:40:eb:df:92:83:9a:dc:7e:cf:63:df:60:
         38:71:43:21:e7:bb:42:81:11:cd:0c:8d:cc:0f:2d:13:12:e1:
         92:17:91:6f:ea:e3:a7:fa:66:12:1c:4e:2d:78:13:4a:20:91:
         2a:e0:ec:4e:d8:43:d5:3c:4e:9a:60:64:69:a0:9d:4b:13:c9:
         c8:30:2d:6a:61:d4:ec:7b:d5:95:58:50:7d:79:a3:48:35:70:
         9f:31:2c:9e:88:81:a0:12:e4:f3:6c:ea:03:95:f9:f1:3b:5d:
         10:21:a1:01:86:e0:9c:98:6e:54:e4:41:a1:1c:d6:61:90:63:
         f3:6d:ac:bd:6e:da:5a:0a:8a:ad:84:1b:33:23:96:3e:f1:04:
         46:00:a4:fe:4a:3c:a8:f0:ac:10:bd:19:49:b0:4b:f9:01:fe:
         5b:20:6e:a3:cb:ee:c6:ca:19:4e:1e:7f:8b:4f:2f:02:f3:49:
         3b:9f:b4:36:de:75:0d:09:29:36:e5:a6:6a:1d:4e:0f:35:f0:
         fa:ac:55:7b:9a:53:fa:fe:23:9a:3a:1a:8c:48:63:49:d9:9f:
         5e:c4:36:ca:43:d0:14:33:22:f6:91:44:8b:f0:3c:25:ef:8b:
         d6:d9:b8:63:50:6f:71:7e:db:3a:05:a2:17:c1:72:a2:22:02:
         31:4b:f7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:49:26 2025 by rpki-client