Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
File:                     DjU23jQviMVeSslMS36nCgwn6aE.mft (raw, json)
Hash identifier:          xLCF1dc2zvIabuzN73EQ8wkyCcVvrbJzZEci9TvUqg4=
Subject key identifier:   40:34:D0:73:AF:50:16:BF:79:1B:55:4E:BC:AC:AF:CF:A7:2C:9E:3F
Authority key identifier: 0E:35:36:DE:34:2F:88:C5:5E:4A:C9:4C:4B:7E:A7:0A:0C:27:E9:A1
Certificate issuer:       /CN=F36A1CEFAR/serialNumber=0E3536DE342F88C55E4AC94C4B7EA70A0C27E9A1
Certificate serial:       05BD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
Manifest number:          05BB
Signing time:             Tue 17 Jun 2025 02:27:46 +0000
Manifest this update:     Tue 17 Jun 2025 02:27:45 +0000
Manifest next update:     Thu 19 Jun 2025 02:27:45 +0000
Files and hashes:         1: DjU23jQviMVeSslMS36nCgwn6aE.crl (hash: Ck/vzeee9YM/HCaLkjH4r+20UvtuVNJMpQVlAFb9bB4=)
                          2: A6E483ACF13D11EBB28E971FD8A014CE.roa (hash: tXqfjeHuKCyrjlrfXizxneaHbdNneJ3cppKugGAFdHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
                          rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 19 Jun 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469 (0x5bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A1CEFAR, serialNumber=0E3536DE342F88C55E4AC94C4B7EA70A0C27E9A1
        Validity
            Not Before: Jun 17 02:27:45 2025 GMT
            Not After : Jun 19 02:27:45 2025 GMT
        Subject: CN=6850d2a2-ae40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:01:7a:3d:d7:05:03:e8:a2:9a:d8:65:d1:2a:
                    32:c2:f6:ee:4d:e7:e9:84:e6:0f:92:17:5c:ee:03:
                    2e:7f:98:79:3c:45:11:a3:9a:b3:2c:47:25:2f:66:
                    c0:9c:16:8f:fd:b9:5a:5d:b2:3f:3b:19:ae:b4:e0:
                    e1:4f:33:b2:db:ae:33:d6:a3:64:ab:1b:ce:03:6a:
                    05:63:d5:ed:d1:5c:c4:b9:05:43:34:b3:93:2f:d6:
                    82:e6:d0:89:3a:b6:7e:46:6f:1f:9d:62:c8:12:fb:
                    78:5f:d7:7d:c5:25:9a:1c:43:52:f9:28:bc:07:cf:
                    41:fc:6a:08:e0:64:90:b1:78:c2:de:49:b1:01:38:
                    30:00:a7:ca:72:41:7a:2c:97:d0:33:45:e7:2c:ef:
                    67:aa:27:88:d5:42:d4:1e:f1:90:77:40:f3:5d:86:
                    a7:e5:8d:71:da:ef:30:0a:4c:0f:a7:18:cd:1d:8e:
                    a5:74:04:e5:2f:a9:54:f4:58:2c:f6:1a:eb:91:0a:
                    d0:6c:b1:df:1d:1f:5e:35:c2:94:3f:fd:c5:ff:d3:
                    83:c8:6a:3b:4e:85:1c:96:7d:ca:61:5f:4d:70:58:
                    ff:f2:b3:93:d0:0f:36:51:b6:b1:f7:ca:0e:ea:51:
                    77:8e:55:f7:f5:ee:7e:15:5f:a7:75:64:bb:76:17:
                    cc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:34:D0:73:AF:50:16:BF:79:1B:55:4E:BC:AC:AF:CF:A7:2C:9E:3F
            X509v3 Authority Key Identifier:
                keyid:0E:35:36:DE:34:2F:88:C5:5E:4A:C9:4C:4B:7E:A7:0A:0C:27:E9:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DjU23jQviMVeSslMS36nCgwn6aE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A1CEF/73D428FAF13811EBA58CBF17D8A014CE/DjU23jQviMVeSslMS36nCgwn6aE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:9a:af:4b:04:92:fc:17:d3:a7:39:10:72:11:80:15:7e:ba:
         87:10:bd:f1:de:67:a3:b5:de:63:f1:3f:9d:81:03:07:5d:df:
         f8:de:92:a2:b4:2b:d0:05:91:b8:17:d4:7b:92:a5:7d:c5:9d:
         41:9b:f1:22:fb:16:39:8c:cf:ba:0d:55:f6:2d:89:cb:fc:31:
         e2:7b:8d:62:64:49:ed:8e:1e:d5:ce:73:24:5b:54:c0:b7:22:
         b0:4f:cf:11:9a:44:1b:69:04:b1:94:e1:28:78:9b:3b:ac:8f:
         bf:1e:37:72:22:0a:1f:40:ac:c8:af:5b:68:6f:02:23:e4:3c:
         4c:2b:52:1a:b4:61:16:ba:a4:4f:c7:fb:98:fa:0d:cc:6d:87:
         3e:fb:39:48:e1:40:82:db:66:a0:12:98:42:bc:04:7e:b6:37:
         a3:43:41:f2:b0:94:38:b8:f9:cf:8a:cb:d1:34:77:8f:cb:bb:
         2f:18:37:74:e1:bf:d1:21:34:99:e3:f1:f6:da:fe:02:87:57:
         82:62:fd:db:dc:4f:f4:e4:8c:21:8f:f9:42:a9:e9:52:56:26:
         53:f2:62:a4:48:b2:46:d8:dd:5d:c6:77:95:0c:05:71:f8:3d:
         c7:3d:ea:40:7c:46:89:ad:55:27:25:b4:98:55:76:ba:8f:91:
         8f:00:a2:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 16:42:03 2025 by rpki-client