Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
File:                     Ijb_q094oHoZuC6P3m3C2wZK278.mft (raw, json)
Hash identifier:          A9QaIt2euB58sxUGUuE6nYDYRvx8J+PQw/Gay2qNgrg=
Subject key identifier:   4F:01:5C:F1:47:0B:8D:E0:4C:E9:C4:99:83:0E:33:10:D7:D7:E0:9C
Authority key identifier: 22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF
Certificate issuer:       /CN=F36C2BF2AR/serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
Certificate serial:       01C3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
Manifest number:          01C2
Signing time:             Tue 05 Aug 2025 04:38:19 +0000
Manifest this update:     Tue 05 Aug 2025 04:38:18 +0000
Manifest next update:     Thu 07 Aug 2025 04:38:18 +0000
Files and hashes:         1: Ijb_q094oHoZuC6P3m3C2wZK278.crl (hash: mYVpeyjNDBrWGjj9bmvSe62kljyDbJaar7tO4MKTOu4=)
                          2: 5E52EDD81C4911EFA98F9E317DDC24C2.roa (hash: Zixh/aFPuo2zs0C1hGvWJdvczTuAhUvvaA1FyHi6zv8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                          rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 07 Aug 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2BF2AR, serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
        Validity
            Not Before: Aug  5 04:38:18 2025 GMT
            Not After : Aug  7 04:38:18 2025 GMT
        Subject: CN=68918abb-4c77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:ef:fe:a0:dc:b5:c4:3d:f6:62:5b:d2:2a:
                    41:2a:55:bf:66:f6:ee:0c:56:a6:e8:af:73:0d:ef:
                    c9:da:f4:4b:01:c4:f8:5b:ec:35:76:ff:e7:02:51:
                    87:6f:e6:de:79:af:b4:1b:d6:2f:d8:dc:ce:f5:e2:
                    1e:5c:82:d1:df:36:04:27:86:f4:d7:3f:21:f2:2c:
                    71:20:90:f2:46:ca:99:89:cf:cd:70:28:0f:59:5a:
                    95:26:73:1b:67:d2:55:65:11:3e:99:a6:91:28:92:
                    26:7d:54:05:33:b2:c7:f1:41:07:85:ce:2a:21:74:
                    4b:97:26:f9:a0:73:40:23:02:dc:b0:f0:d3:7b:ab:
                    7a:0b:08:58:52:33:dc:40:48:c6:72:5c:e6:a8:db:
                    db:c1:17:23:86:54:37:61:b6:5e:3f:d2:79:73:32:
                    55:5a:96:3c:51:d8:a2:f7:a7:63:2f:5d:53:e6:cf:
                    8e:70:61:f6:f1:e7:61:b3:6b:af:26:75:8e:48:ec:
                    ae:1e:da:14:d6:9b:3c:4e:e4:96:5a:2c:1d:b9:03:
                    de:df:8c:1a:d4:48:f9:0e:f1:83:27:af:84:ab:a5:
                    de:9f:ba:b8:97:76:bb:05:6d:b0:df:c2:d5:10:50:
                    20:65:96:af:8a:88:87:77:45:08:cd:4b:31:c0:b2:
                    72:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:01:5C:F1:47:0B:8D:E0:4C:E9:C4:99:83:0E:33:10:D7:D7:E0:9C
            X509v3 Authority Key Identifier:
                keyid:22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:ff:ef:0b:64:44:52:24:05:d7:cc:37:cf:86:75:df:a9:ef:
         ad:10:60:95:8c:ab:e5:c0:75:f1:9d:fc:c7:68:8d:e0:3c:a2:
         ec:4a:e9:68:c2:17:e9:fc:b3:6d:d0:73:d3:f8:b1:47:23:51:
         fb:fc:88:2c:34:57:ab:4f:c3:39:47:83:2e:aa:cc:6e:bf:96:
         92:6d:23:fe:24:b3:d1:e2:83:18:6d:2d:5e:a5:55:b9:38:9f:
         fa:f9:8b:27:9e:19:86:47:b2:7d:8f:c6:3d:1c:42:c2:4b:51:
         32:3f:13:82:45:86:65:dc:c3:c4:37:dc:bf:5c:9e:23:63:8d:
         4b:a5:96:fc:0c:82:0e:e5:50:e9:73:ff:eb:a2:9c:7f:5e:63:
         6e:39:58:16:95:ff:5e:0e:ab:1e:cd:ac:7a:c0:22:9b:ef:77:
         43:90:ba:bc:0b:77:21:33:4c:2b:90:59:db:ba:07:d4:ff:b7:
         e8:b9:69:6a:df:fa:cc:c7:e4:22:af:7f:8b:b2:ce:93:08:f3:
         3f:b5:c2:32:a6:6f:54:39:98:3e:44:d8:25:1c:cc:75:12:79:
         fe:1e:06:0b:8d:57:83:48:f6:28:37:8e:e4:96:01:48:cc:b2:
         3a:e2:0e:0c:e3:c4:0d:5f:08:4d:72:e1:2c:83:1a:11:6a:29:
         6d:53:a3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:18:48 2025 by rpki-client