Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
File:                     Ijb_q094oHoZuC6P3m3C2wZK278.mft (raw, json)
Hash identifier:          vmfqOqZLLeiYZ7eB7NzWtk4DT+CPL8T2G9SftfoVhTU=
Subject key identifier:   A3:97:E8:38:F4:A2:43:E4:ED:6C:52:C9:A7:C2:7E:C5:24:27:30:16
Authority key identifier: 22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF
Certificate issuer:       /CN=F36C2BF2AR/serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
Certificate serial:       018E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
Manifest number:          018D
Signing time:             Sat 14 Jun 2025 04:35:35 +0000
Manifest this update:     Sat 14 Jun 2025 04:35:34 +0000
Manifest next update:     Mon 16 Jun 2025 04:35:34 +0000
Files and hashes:         1: Ijb_q094oHoZuC6P3m3C2wZK278.crl (hash: lmJwFnsLY0wNY9QaPAPIxhwpvx6BFWRzgoo60Ybxgyc=)
                          2: 5E52EDD81C4911EFA98F9E317DDC24C2.roa (hash: Zixh/aFPuo2zs0C1hGvWJdvczTuAhUvvaA1FyHi6zv8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                          rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Jun 2025 04:35:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2BF2AR, serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
        Validity
            Not Before: Jun 14 04:35:34 2025 GMT
            Not After : Jun 16 04:35:34 2025 GMT
        Subject: CN=684cfc17-2c61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:44:4c:04:e0:1f:87:c8:bb:7f:d8:09:d5:0a:
                    79:cb:e2:dd:76:07:51:db:bc:83:1a:b2:68:25:ff:
                    a7:87:da:77:e4:61:c2:97:7b:a3:6e:c7:1f:65:ff:
                    ea:9d:9c:a9:b2:12:27:50:77:c3:f1:30:ad:6f:76:
                    b2:b3:f8:ee:6e:f6:03:52:46:5d:81:79:f8:fb:ef:
                    68:ad:13:28:30:4a:95:14:84:ce:68:d8:e8:3c:2f:
                    40:8e:0b:30:47:33:54:c5:0e:db:ef:eb:90:cb:52:
                    93:7f:2d:de:c4:0e:3c:1d:cb:5f:9e:db:ab:6e:77:
                    cc:40:d2:97:b3:bf:e9:89:5e:7b:25:e0:cc:12:ad:
                    f1:b1:c8:c5:f3:96:ad:1d:89:a9:ad:dd:5d:cd:91:
                    e2:c2:3a:1b:61:48:8d:f5:c2:41:71:0b:b0:d2:31:
                    16:11:4c:ad:b7:bc:6d:c6:29:4b:c2:65:de:21:05:
                    c0:1a:dd:d1:82:8d:3a:61:cf:41:b9:61:2d:ba:66:
                    f8:a5:2d:7f:d0:ad:7b:95:e9:55:23:89:01:34:47:
                    97:b0:b1:2f:36:94:e7:44:22:6f:8c:45:03:47:00:
                    f6:d8:85:06:48:d6:88:8a:76:eb:0a:2e:03:65:5f:
                    9b:ad:93:37:af:fc:43:b9:df:6b:ce:a6:9d:e4:58:
                    d2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:97:E8:38:F4:A2:43:E4:ED:6C:52:C9:A7:C2:7E:C5:24:27:30:16
            X509v3 Authority Key Identifier:
                keyid:22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:af:a5:5a:3d:44:77:d2:8f:c5:ae:2f:52:ad:8c:08:6b:6d:
         5b:ab:4b:ed:99:86:7c:6c:fb:55:f9:d9:05:62:f9:4d:d8:a8:
         66:e4:38:02:25:9f:10:ea:11:4d:33:8f:33:21:87:2f:6f:a0:
         fb:2a:fe:a2:38:34:45:fe:0b:79:cf:53:71:28:d2:1e:70:aa:
         65:6e:31:1a:de:57:b0:89:37:c6:a8:a5:01:ea:a1:51:75:cb:
         b6:99:ef:26:33:51:e1:a4:0e:c0:e8:4f:bd:b4:99:9e:bf:f3:
         db:91:de:5e:4a:bd:ae:be:ab:40:49:30:42:18:f9:89:ad:e8:
         5f:90:31:d6:f3:7e:be:e8:66:17:af:d1:0c:c3:9b:51:66:7b:
         58:a5:de:77:c0:1e:40:2c:cf:1b:59:b3:38:81:c1:9b:01:d5:
         ee:5c:0a:97:fb:b7:be:5e:c0:dd:9a:8e:f4:e7:68:09:23:9b:
         4f:85:dc:c5:f7:54:a6:a9:a5:16:0b:ab:0f:1a:07:25:00:02:
         08:90:ab:05:e4:00:1d:0d:89:f4:14:0b:84:5e:80:0e:12:20:
         8a:33:84:44:86:1e:0e:97:c5:5e:1f:38:79:b2:07:1e:62:38:
         ac:22:1f:16:0a:a2:9a:6b:c8:7e:0f:23:74:12:a9:84:cf:69:
         37:7b:b0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:07:34 2025 by rpki-client