Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
File:                     LGcfQllwcCcjdUC_YiZaLZfrlcs.mft (raw, json)
Hash identifier:          oHSqM3BE/nlJv9AuAX1mBg6AkZ1840ZuTHHmx7ilmPA=
Subject key identifier:   23:16:9F:FA:1A:A0:91:14:D0:02:39:D4:FE:C7:F5:55:2E:F2:E0:ED
Authority key identifier: 2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB
Certificate issuer:       /CN=F36A34E4AR/serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
Certificate serial:       01EA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
Manifest number:          01E5
Signing time:             Sat 14 Jun 2025 04:26:47 +0000
Manifest this update:     Sat 14 Jun 2025 04:26:46 +0000
Manifest next update:     Mon 16 Jun 2025 04:26:46 +0000
Files and hashes:         1: LGcfQllwcCcjdUC_YiZaLZfrlcs.crl (hash: g03dm0ERqMhKRNg/FmFaRP2J67E5DYmMn+r++Gjs8fA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
                          rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Jun 2025 04:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A34E4AR, serialNumber=2C671F4259707027237540BF62265A2D97EB95CB
        Validity
            Not Before: Jun 14 04:26:46 2025 GMT
            Not After : Jun 16 04:26:46 2025 GMT
        Subject: CN=684cfa07-4801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:4c:dd:5b:7f:77:38:82:fb:a6:08:ed:25:72:
                    71:28:4e:4f:94:dd:30:a0:0b:41:6b:e9:dd:6a:99:
                    ad:9b:70:82:c7:57:fb:dc:8c:e5:81:05:5b:52:c4:
                    a6:59:dd:7a:3f:c1:20:3c:91:34:5c:fa:1a:55:eb:
                    11:a2:7a:c7:24:ef:85:ca:5c:4c:c2:2b:59:42:f9:
                    dc:76:05:4f:56:1a:b5:73:08:b0:ea:d0:29:1b:dc:
                    d1:89:a0:aa:29:10:6e:47:59:ff:48:7f:e2:70:68:
                    a4:25:0b:80:68:a9:30:b5:95:72:bd:93:8d:51:38:
                    55:c7:03:46:57:53:f2:f9:d9:d7:7b:a3:fb:d5:f5:
                    c5:6f:46:1d:34:fd:66:44:de:ff:38:f2:bc:94:41:
                    18:51:a4:1c:6d:31:98:fb:3e:dc:ee:1d:e6:93:e7:
                    b1:7c:40:c5:ef:ee:c1:4e:2e:78:ec:41:bb:f4:9d:
                    f6:11:26:db:32:b3:e4:fb:c1:a2:da:55:f5:50:3b:
                    57:62:7f:c1:9d:33:06:d0:87:7a:07:ca:5c:10:fa:
                    26:9f:70:ad:8e:b0:62:5d:4f:87:2a:4d:56:69:ee:
                    43:17:3e:d2:48:c3:bc:04:02:fa:c9:cc:f9:77:a4:
                    bc:68:71:62:04:31:af:51:71:84:7a:48:1c:bc:64:
                    bc:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:16:9F:FA:1A:A0:91:14:D0:02:39:D4:FE:C7:F5:55:2E:F2:E0:ED
            X509v3 Authority Key Identifier:
                keyid:2C:67:1F:42:59:70:70:27:23:75:40:BF:62:26:5A:2D:97:EB:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LGcfQllwcCcjdUC_YiZaLZfrlcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A34E4/CC8FC36CDA3011EE9E6C98AA775412E6/LGcfQllwcCcjdUC_YiZaLZfrlcs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f2:df:f6:b5:ea:0f:c4:a9:8e:14:4e:38:79:fc:80:0c:d5:
         c8:b9:49:4a:51:a4:91:f5:b4:41:dc:31:1b:aa:89:0a:08:e4:
         9d:95:5f:e6:66:0e:e3:60:e5:4f:c1:35:4f:38:75:d5:b5:54:
         90:20:18:6e:5f:f6:e7:c4:0b:cf:db:e7:98:a7:24:7c:dd:f9:
         fb:c8:a7:f6:a9:c4:fe:90:cb:bd:c9:ea:52:c4:67:89:8a:83:
         36:c4:fe:5b:07:36:1a:14:8c:bb:52:13:41:e7:2d:f1:49:fd:
         9f:e5:31:57:b2:6d:f9:e8:0d:07:ad:c4:a0:53:5d:82:04:b3:
         e0:8f:1c:98:d8:3c:56:62:43:c5:7c:a0:66:b7:74:de:25:62:
         9f:67:94:d1:e1:07:1d:e2:79:81:5c:70:ff:b2:a4:f3:dd:39:
         08:0a:85:84:e2:09:6a:ad:25:d8:9c:55:2c:f8:13:8a:9b:fa:
         e4:b5:5e:71:31:0f:4f:34:fa:23:6b:a7:bd:9f:bc:02:3c:d6:
         2b:86:0d:c6:b1:36:79:9d:d6:90:0d:2a:f2:18:aa:4c:07:cf:
         65:27:70:92:74:f7:71:48:22:db:16:94:aa:7b:47:67:5e:ed:
         6f:56:df:aa:c6:1c:17:2a:81:46:df:e6:e4:c4:2a:fe:d7:ed:
         32:61:e6:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:03:59 2025 by rpki-client