Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
File:                     ytp6EgVTRDeaE65t57onjrxRalg.mft (raw, json)
Hash identifier:          wA1HEPiHpEeQ+IWv63r4gqrGXoZuG3Q1NV7L+dbMyBw=
Subject key identifier:   81:93:ED:B8:07:52:79:9F:8C:30:4D:5B:E9:56:83:23:6D:00:13:9E
Authority key identifier: CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58
Certificate issuer:       /CN=F36C5A07AR/serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
Certificate serial:       053D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
Manifest number:          053C
Signing time:             Tue 29 Apr 2025 02:38:12 +0000
Manifest this update:     Tue 29 Apr 2025 02:38:11 +0000
Manifest next update:     Thu 01 May 2025 02:38:11 +0000
Files and hashes:         1: ytp6EgVTRDeaE65t57onjrxRalg.crl (hash: +6SK1ruX272il530FH510QqPHCb1oRjmLfivulLy5WU=)
                          2: D463691425AA11EC929C1A5AD8A014CE.roa (hash: zOn0KCR3WUQ3sl7nvMO+r6apzohvakNE95t03lLWHiA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                          rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 May 2025 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1341 (0x53d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5A07AR, serialNumber=CADA7A12055344379A13AE6DE7BA278EBC516A58
        Validity
            Not Before: Apr 29 02:38:11 2025 GMT
            Not After : May  1 02:38:11 2025 GMT
        Subject: CN=68103b94-23ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:93:85:60:ec:e7:13:c0:fa:f4:c2:5d:f4:64:
                    d3:32:b5:33:03:c9:52:08:90:06:ee:4b:b6:a8:07:
                    09:5f:81:ba:99:49:a5:53:0b:a3:56:c5:2e:79:1c:
                    a6:aa:d3:d8:75:03:e4:d3:31:6c:ac:a6:7b:86:6f:
                    8c:63:ff:cd:44:d2:75:3f:f0:b7:09:9e:5b:c3:86:
                    3b:c8:1c:49:1f:0d:ba:d4:c8:4f:24:d1:21:1c:85:
                    88:35:61:ca:a7:e1:4a:2f:12:fd:ae:c7:0f:ee:12:
                    44:6f:dd:53:aa:96:69:b4:68:18:2c:27:a0:02:9c:
                    94:a7:cf:06:fe:45:51:d4:e5:db:65:86:7e:84:ec:
                    26:7e:3e:14:ca:91:73:85:1f:e8:aa:87:41:fc:29:
                    1b:c5:3a:5b:6d:42:b1:e4:11:d2:d2:aa:c6:fb:31:
                    e2:f0:80:f5:42:e7:29:88:2b:2e:96:fc:ae:9a:94:
                    be:5e:97:6b:88:39:92:fd:e2:14:8e:0e:d0:73:70:
                    70:28:96:81:9f:76:28:82:02:06:67:ee:18:91:6e:
                    c2:a7:51:9a:6c:b4:77:da:4a:56:57:bb:8f:d1:bd:
                    69:6b:a3:e3:63:09:63:3b:2e:38:9e:e6:eb:72:aa:
                    80:0e:ac:0d:4e:e1:f3:1b:c6:5c:3d:05:35:ce:d5:
                    34:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:93:ED:B8:07:52:79:9F:8C:30:4D:5B:E9:56:83:23:6D:00:13:9E
            X509v3 Authority Key Identifier:
                keyid:CA:DA:7A:12:05:53:44:37:9A:13:AE:6D:E7:BA:27:8E:BC:51:6A:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ytp6EgVTRDeaE65t57onjrxRalg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5A07/6F146B2225A411EC89FD9050D8A014CE/ytp6EgVTRDeaE65t57onjrxRalg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:e4:26:cf:08:71:b9:d9:f2:ac:b8:08:42:e4:71:a0:a2:93:
         d7:d3:dc:37:f6:40:21:88:0e:9e:ef:87:53:74:4d:f1:7b:0b:
         bc:07:2e:6b:66:2b:81:10:cf:06:97:a5:d2:57:5f:c6:ef:9d:
         be:2c:0e:84:81:86:c5:3b:0f:5a:7a:cb:22:b6:23:fb:41:92:
         27:b9:c2:b7:55:b2:a3:ca:94:3c:21:71:96:b7:1d:08:18:44:
         ea:13:3d:10:c8:42:39:51:1c:61:13:a5:b0:73:d4:ce:29:16:
         f3:67:d7:ec:4a:57:23:24:a2:1e:ff:5d:12:5a:95:0e:31:96:
         6e:39:81:03:ff:dc:3a:a5:63:da:07:6e:1e:f9:cb:98:f3:bd:
         7c:f0:e5:1a:23:a0:ae:8f:2f:2a:b1:d5:a9:91:77:71:0e:7c:
         3e:05:6c:c0:fc:19:98:9a:31:76:46:8f:4f:7e:d1:0a:c1:d3:
         47:7c:77:bd:ff:7d:fd:93:70:2f:73:aa:b7:91:95:a6:22:37:
         92:d2:6c:92:9a:8f:da:8e:78:c7:c6:89:88:bf:cd:8c:24:3e:
         f3:0b:db:62:89:3a:84:17:16:bd:04:ba:e0:75:1d:5b:ac:17:
         29:34:8d:e4:4a:7f:ad:a9:bf:e4:d3:e8:29:20:ec:10:63:a9:
         51:ff:54:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 04:35:36 2025 by rpki-client