Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.mft
File:                     XVF78Pc5Gfdta8kSUmnO62DdUyw.mft (raw, json)
Hash identifier:          y99N1IeZDdLA+IX/UIzkdd3lLOPE8f2PgBBlq/ZKsFU=
Subject key identifier:   85:0B:9D:FC:97:48:A3:A4:71:F9:E2:37:F1:6F:30:53:17:4D:36:1A
Authority key identifier: 5D:51:7B:F0:F7:39:19:F7:6D:6B:C9:12:52:69:CE:EB:60:DD:53:2C
Certificate issuer:       /CN=F36AC63AAR/serialNumber=5D517BF0F73919F76D6BC9125269CEEB60DD532C
Certificate serial:       028F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XVF78Pc5Gfdta8kSUmnO62DdUyw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.mft
Manifest number:          028B
Signing time:             Fri 02 May 2025 03:58:16 +0000
Manifest this update:     Fri 02 May 2025 03:58:15 +0000
Manifest next update:     Sun 04 May 2025 03:58:15 +0000
Files and hashes:         1: XVF78Pc5Gfdta8kSUmnO62DdUyw.crl (hash: UT1Fbz/8W1g910mQBNoymPuk1jJWHbiz15uRH6lNPVg=)
                          2: 698E9F34419411EEACB6225E4AD9E6FC.roa (hash: Do8surr/Om2q4tT9UI+z5gRxR2ztOA+6DaMkNjqE0sI=)
                          3: 2848E24A419F11EE84EBC77E4AD9E6FC.roa (hash: 31vEi8mw6ILLVWMlSZQg7FufWrxLwP4Iw+HRKtKDgR0=)
                          4: B47043E640C611EE86E5AE4E4AD9E6FC.roa (hash: UWusm55Cxzo56WDe90pWaCjCCJ7TZM8kcbllrJbesr4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.mft
                          rsync://rpki.afrinic.net/repository/arin/XVF78Pc5Gfdta8kSUmnO62DdUyw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 04 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AC63AAR, serialNumber=5D517BF0F73919F76D6BC9125269CEEB60DD532C
        Validity
            Not Before: May  2 03:58:15 2025 GMT
            Not After : May  4 03:58:15 2025 GMT
        Subject: CN=681442d8-0ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:e0:b4:24:69:0d:24:7f:56:a3:bb:47:2c:
                    d6:21:bf:5a:47:f6:96:00:af:d6:4a:7d:90:ab:21:
                    48:02:bb:9b:74:26:5d:44:e7:48:18:d1:f3:ca:07:
                    e4:7e:da:81:b4:59:3e:3f:8e:de:ed:6d:66:44:fa:
                    28:6c:6d:e5:30:fe:e9:4b:e1:5b:59:89:b6:ef:d4:
                    7c:43:b6:d8:b4:6a:19:c0:c0:38:5c:ad:1d:ef:f6:
                    e7:b4:b1:38:c3:01:aa:f3:2b:57:6f:80:fb:21:75:
                    da:84:c2:51:e3:29:27:ad:e2:11:f7:5a:50:2f:26:
                    2a:d0:ec:d0:eb:db:a1:a4:52:cb:31:3f:09:58:39:
                    df:2d:13:f2:f1:f0:bd:a0:a7:c4:bd:43:12:b5:fc:
                    70:00:48:0a:26:44:c1:a2:75:d2:1e:80:88:bc:82:
                    61:29:77:c3:6a:02:98:75:7f:4a:17:a5:51:39:ac:
                    6c:29:03:e0:a7:41:e1:8e:de:42:5f:fd:8a:b5:97:
                    a7:0e:16:ef:5e:88:f5:26:58:d9:19:74:e8:9c:5e:
                    a1:18:ce:b7:a3:88:5d:bf:e6:4f:c2:eb:c9:1e:b4:
                    c1:db:f6:3d:8f:58:23:02:75:cd:09:e7:f7:d3:2e:
                    9a:7c:d8:d1:dd:36:bc:ff:53:95:f3:6b:68:60:3d:
                    52:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0B:9D:FC:97:48:A3:A4:71:F9:E2:37:F1:6F:30:53:17:4D:36:1A
            X509v3 Authority Key Identifier:
                keyid:5D:51:7B:F0:F7:39:19:F7:6D:6B:C9:12:52:69:CE:EB:60:DD:53:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XVF78Pc5Gfdta8kSUmnO62DdUyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/0A48C3D240C311EEBF0E47434AD9E6FC/XVF78Pc5Gfdta8kSUmnO62DdUyw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:7c:e5:f9:03:80:ba:87:77:41:7f:90:56:73:35:6f:39:88:
         ca:61:48:50:76:7b:b2:82:2b:a5:ff:0f:6e:18:13:e6:22:bb:
         0a:c2:5d:23:3a:65:47:25:ab:8d:04:fa:14:77:70:dd:12:31:
         dd:d1:04:73:86:8a:44:42:79:2e:1b:87:63:d6:30:73:9f:da:
         8e:ce:60:9c:1e:93:a7:0e:9d:b1:a3:bc:43:69:a8:7e:de:44:
         fa:54:a8:c0:95:07:cc:f6:9c:a2:e8:d1:1e:1f:c4:24:5d:f3:
         40:01:18:c3:bd:8c:6c:b9:25:c2:6f:49:bf:81:9a:94:43:ff:
         f1:f4:40:86:03:50:8a:11:42:3f:1d:e5:d8:09:30:5f:df:ad:
         9a:9e:af:8b:a9:18:fa:d6:3e:65:3c:8e:cd:c3:99:7a:88:b1:
         59:18:e0:4e:23:0d:b2:f4:c4:97:ea:5d:aa:cb:0d:b8:cd:0e:
         35:3f:4c:1c:9e:3c:c6:cb:8f:de:a3:32:72:84:0c:ac:f0:ac:
         1c:56:43:1d:7a:91:a3:36:4c:81:f9:6d:e3:7b:5d:ed:bf:fa:
         ae:d8:b1:a9:db:22:a1:3e:a5:f7:b1:3c:d9:2a:58:17:c2:c0:
         55:77:fb:31:3c:e5:91:4b:f0:62:79:90:ae:da:8e:db:ad:fe:
         0b:75:0e:50
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAo8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUM2M0FBUjExMC8GA1UEBRMoNUQ1MTdCRjBGNzM5MTlGNzZENkJDOTEyNTI2OUNF
RUI2MERENTMyQzAeFw0yNTA1MDIwMzU4MTVaFw0yNTA1MDQwMzU4MTVaMBgxFjAU
BgNVBAMTDTY4MTQ0MmQ4LTBhYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8KuC0JGkNJH9Wo7tHLNYhv1pH9pYAr9ZKfZCrIUgCu5t0Jl1E50gY0fPK
B+R+2oG0WT4/jt7tbWZE+ihsbeUw/ulL4VtZibbv1HxDtti0ahnAwDhcrR3v9ue0
sTjDAarzK1dvgPshddqEwlHjKSet4hH3WlAvJirQ7NDr26GkUssxPwlYOd8tE/Lx
8L2gp8S9QxK1/HAASAomRMGiddIegIi8gmEpd8NqAph1f0oXpVE5rGwpA+CnQeGO
3kJf/Yq1l6cOFu9eiPUmWNkZdOicXqEYzrejiF2/5k/C68ketMHb9j2PWCMCdc0J
5/fTLpp82NHdNrz/U5Xza2hgPVK5AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUhQud
/JdIo6Rx+eI38W8wUxdNNhowHwYDVR0jBBgwFoAUXVF78Pc5Gfdta8kSUmnO62Dd
UywwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFDNjNBLzBBNDhDM0QyNDBDMzExRUVCRjBFNDc0MzRBRDlFNkZDL1hWRjc4
UGM1R2ZkdGE4a1NVbW5PNjJEZFV5dy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1hWRjc4UGM1R2ZkdGE4a1NVbW5PNjJEZFV5dy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QUM2M0EvMEE0OEMzRDI0MEMzMTFFRUJGMEU0NzQzNEFEOUU2
RkMvWFZGNzhQYzVHZmR0YThrU1Vtbk82MkRkVXl3Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANfOX5A4C6h3dBf5BWczVvOYjKYUhQdnuy
giul/w9uGBPmIrsKwl0jOmVHJauNBPoUd3DdEjHd0QRzhopEQnkuG4dj1jBzn9qO
zmCcHpOnDp2xo7xDaah+3kT6VKjAlQfM9pyi6NEeH8QkXfNAARjDvYxsuSXCb0m/
gZqUQ//x9ECGA1CKEUI/HeXYCTBf362anq+LqRj61j5lPI7Nw5l6iLFZGOBOIw2y
9MSX6l2qyw24zQ41P0wcnjzGy4/eozJyhAys8KwcVkMdepGjNkyB+W3je13tv/qu
2LGp2yKhPqX3sTzZKlgXwsBVd/sxPOWRS/BieZCu2o7brf4LdQ5Q
-----END CERTIFICATE-----
Generated at Fri May 2 21:03:15 2025 by rpki-client