Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
File:                     ytp6EgVTRDeaE65t57onjrxRalg.mft (raw, json)
Hash identifier:          0LEJfNu00Ic+l3eeLCUKntEh8LzbtE4f7FRvEKEVs2w=
Subject key identifier:   A0:79:C2:7E:6F:09:E2:24:DA:76:0B:10:85:C0:E7:AA:34:C9:70:22
Authority key identifier: CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58
Certificate issuer:       /CN=F36C5A07AR/serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
Certificate serial:       056B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
Manifest number:          056A
Signing time:             Sat 14 Jun 2025 02:39:08 +0000
Manifest this update:     Sat 14 Jun 2025 02:39:07 +0000
Manifest next update:     Mon 16 Jun 2025 02:39:07 +0000
Files and hashes:         1: ytp6EgVTRDeaE65t57onjrxRalg.crl (hash: HJc8IxjHatNVPS80UxX34MqjslpbxPCIqyfvc6vsI/Y=)
                          2: D463691425AA11EC929C1A5AD8A014CE.roa (hash: zOn0KCR3WUQ3sl7nvMO+r6apzohvakNE95t03lLWHiA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                          rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Jun 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1387 (0x56b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5A07AR, serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
        Validity
            Not Before: Jun 14 02:39:07 2025 GMT
            Not After : Jun 16 02:39:07 2025 GMT
        Subject: CN=684ce0cc-5bcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b0:38:a3:f6:39:36:e9:ef:3d:99:b5:62:21:
                    ff:d5:2c:bd:72:06:c1:db:17:ca:17:e2:a4:69:1d:
                    68:0d:23:87:99:b2:4a:91:60:ed:5c:e5:0b:e3:5e:
                    d4:57:59:87:75:0c:a8:f3:d5:64:bd:91:f3:9f:ee:
                    4f:6c:f7:97:11:81:2f:75:58:2e:c5:ca:61:e7:3f:
                    83:db:64:a6:f7:b1:ff:db:57:01:85:1f:c2:22:13:
                    79:84:9e:7f:01:c5:bf:fd:4f:14:5a:62:4a:2c:35:
                    ad:ce:7b:20:54:2d:0d:75:fe:54:06:e3:69:3d:c7:
                    85:5d:14:50:1c:16:dd:0d:11:fc:b3:f5:86:1e:6c:
                    67:ea:2f:13:88:43:f9:c9:83:6a:05:b3:da:2e:79:
                    af:cc:63:31:cd:bc:69:0b:9f:b6:d6:45:87:38:55:
                    7b:b5:ca:5d:43:3e:36:d9:d6:b9:12:1f:07:42:5e:
                    00:6e:26:ad:d0:13:32:6a:b4:0c:54:d7:2b:3d:5f:
                    23:94:e0:b0:b5:1e:f1:21:41:dd:3b:96:bb:9d:96:
                    ae:43:b9:c5:ff:97:c4:4f:79:00:e4:93:8e:9b:f2:
                    42:23:a8:51:8c:1d:d4:1c:8f:b0:a5:73:83:6c:66:
                    bd:cb:c0:d6:c1:de:91:3f:0f:f9:a1:cd:9c:6b:4e:
                    e1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:79:C2:7E:6F:09:E2:24:DA:76:0B:10:85:C0:E7:AA:34:C9:70:22
            X509v3 Authority Key Identifier:
                keyid:CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:95:79:31:a2:8e:0f:55:ab:f9:76:4c:ff:b6:b6:05:18:29:
         e8:dc:df:9a:9e:86:8d:83:66:9b:42:7e:39:e8:fd:3b:4a:b1:
         6a:67:db:0b:1e:e1:66:23:b9:d6:e6:a2:80:4d:b1:91:d9:30:
         f6:a1:98:22:24:0d:fa:98:8a:ae:b6:06:af:81:88:ff:a1:9d:
         d8:33:59:2d:a8:44:d0:c8:83:77:e0:26:d3:6d:c7:78:81:3e:
         c4:d9:ba:8f:ef:5f:64:d8:b4:64:7f:6b:3b:d3:22:aa:79:8b:
         ed:e3:42:34:a5:2c:59:a1:66:7a:72:0e:34:d8:0c:05:7c:6a:
         9d:53:56:2b:47:a7:24:77:e4:ab:ee:c1:47:aa:bf:50:a0:e7:
         57:5d:9e:c4:b7:3c:5a:88:c9:9f:64:b7:3e:22:6f:20:eb:6c:
         6d:b5:24:b4:ed:d8:2f:d4:0c:40:1c:7b:58:6a:ec:02:e8:5d:
         77:a5:30:c9:22:85:e3:93:be:23:b9:97:4c:b9:f3:c4:98:b0:
         1d:f3:96:00:7a:23:15:6b:d6:29:ae:8d:dc:16:4c:a8:2b:90:
         83:a6:3f:e9:14:a2:93:19:09:f9:5a:98:8b:88:c8:02:e3:c3:
         25:7a:26:6e:59:d6:66:03:ff:26:f9:21:c5:93:6c:36:e4:6c:
         f8:3d:d8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:00:16 2025 by rpki-client