Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
File:                     rHWTnKcrl03kXiFyCNngbn4brAI.mft (raw, json)
Hash identifier:          HlQ3F1Qe+UKqa5dNYKGqzwlpsaksZscQCglSuskpbuI=
Subject key identifier:   EE:E4:D9:55:F4:15:1F:D6:1C:91:CE:BB:33:75:40:F9:BC:4A:00:98
Authority key identifier: AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02
Certificate issuer:       /CN=F36D8637AR/serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
Certificate serial:       08D9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
Manifest number:          08D8
Signing time:             Sat 14 Jun 2025 01:29:26 +0000
Manifest this update:     Sat 14 Jun 2025 01:29:25 +0000
Manifest next update:     Mon 16 Jun 2025 01:29:25 +0000
Files and hashes:         1: rHWTnKcrl03kXiFyCNngbn4brAI.crl (hash: ttCkIBt2tio22V580yYsmE2aNKcIFgB0/6p2kyTvWwU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                          rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Jun 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2265 (0x8d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8637AR, serialNumber=AC75939CA72B974DE45E217208D9E06E7E1BAC02
        Validity
            Not Before: Jun 14 01:29:25 2025 GMT
            Not After : Jun 16 01:29:25 2025 GMT
        Subject: CN=684cd076-241f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:76:04:88:5e:30:95:39:de:18:a0:7c:d6:12:
                    5c:42:fa:13:0f:b4:f0:b8:7d:a9:57:14:98:08:54:
                    3b:f5:fe:ee:83:05:d8:d4:16:17:3c:68:47:eb:1d:
                    59:67:5d:95:4f:5a:94:cb:a9:84:90:83:f2:e2:fa:
                    f8:d6:78:cc:2c:f5:24:c5:66:7d:d4:d6:f4:5f:e4:
                    14:6c:a4:f0:1f:49:3b:0d:2d:e0:5d:38:2f:f8:b1:
                    a7:9f:4b:0d:f1:54:2c:f5:65:46:ae:b5:37:3a:14:
                    85:e9:fb:07:2e:c6:67:66:80:11:00:69:5a:2e:0d:
                    7e:c0:1a:0e:83:3d:fd:fd:55:16:29:3e:a7:82:b2:
                    41:79:15:f2:47:e5:03:8f:a9:5f:12:5c:07:1f:da:
                    9f:88:c2:d1:f4:7d:8b:5e:48:83:c9:89:0f:1b:37:
                    ce:18:04:34:b7:76:74:a6:10:f0:60:2d:3f:9c:0e:
                    15:51:89:47:d8:d2:52:10:03:92:00:ce:41:7e:8f:
                    b1:07:c2:32:b0:bd:d8:14:55:99:54:71:bb:26:88:
                    fa:22:97:fa:30:fc:59:a9:94:d7:64:c7:d5:12:34:
                    0e:7f:3d:f0:bb:2d:7d:cf:b2:d9:95:fb:b9:a6:68:
                    18:cc:86:ce:db:ce:c2:bc:f4:81:3a:fe:9c:23:a4:
                    1f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:E4:D9:55:F4:15:1F:D6:1C:91:CE:BB:33:75:40:F9:BC:4A:00:98
            X509v3 Authority Key Identifier:
                keyid:AC:75:93:9C:A7:2B:97:4D:E4:5E:21:72:08:D9:E0:6E:7E:1B:AC:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/rHWTnKcrl03kXiFyCNngbn4brAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8637/FCB47AFA839711E9BAC79A1AF8AEA228/rHWTnKcrl03kXiFyCNngbn4brAI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:e8:2c:a9:2a:1a:54:09:2a:f5:dd:17:a1:ec:df:72:91:18:
         fa:bf:ea:4b:73:88:c0:52:c2:5b:f1:27:46:f4:37:22:fa:84:
         9e:16:e8:63:ca:2c:27:bd:b4:05:a9:75:be:c6:a7:22:34:81:
         aa:9b:13:a4:62:37:b2:3b:dc:23:b7:b3:4a:93:1f:b2:9a:7b:
         35:54:fb:f9:50:ff:47:25:cb:b3:64:33:cd:fd:25:08:88:e5:
         aa:2a:36:5e:db:68:39:cb:d6:76:58:a8:01:aa:f3:fe:33:9c:
         52:b6:81:ab:3d:1d:46:50:3e:62:a2:0a:d2:0c:84:c4:b3:7a:
         ea:cc:1a:08:99:77:41:4a:c6:a5:5d:ef:ef:fc:98:0c:28:85:
         4b:35:6b:19:6b:ca:5f:0b:60:54:65:d1:9f:5e:3a:8f:f1:d9:
         2c:87:5c:1a:81:19:34:4d:0e:70:98:4d:15:61:50:95:36:3d:
         e4:cf:bd:b3:52:85:de:c6:16:b1:87:09:05:eb:cc:de:b8:a2:
         24:57:e1:a1:27:0e:2a:a3:37:68:0d:dd:ac:e9:f8:0f:84:3c:
         3d:b2:37:5c:81:17:8f:e4:31:45:dc:b7:ce:ed:a7:f3:4b:ee:
         19:05:0c:14:74:4d:f6:b6:71:11:94:a4:09:1c:d0:e3:79:82:
         a7:a2:c7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:59:02 2025 by rpki-client