Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
File:                     3e9RyKD_hVBdng5v-gInbCpVrug.mft (raw, json)
Hash identifier:          Z8l6m+iD6xtCgGVA3Qzx1/En7h9DFYnFGipDjpDg0po=
Subject key identifier:   4D:AB:70:E7:73:0B:93:51:31:69:50:9D:FB:19:25:00:A1:68:19:A7
Authority key identifier: DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8
Certificate issuer:       /CN=F36FBB68AR/serialNumber=DDEF51C8A0FF85505D9E0E6FFA02276C2A55AEE8
Certificate serial:       0669
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
Manifest number:          0665
Signing time:             Sat 14 Jun 2025 02:10:54 +0000
Manifest this update:     Sat 14 Jun 2025 02:10:53 +0000
Manifest next update:     Mon 16 Jun 2025 02:10:53 +0000
Files and hashes:         1: 3e9RyKD_hVBdng5v-gInbCpVrug.crl (hash: CZ5rz19MfKuk/yJXH7JNHm2YlEKrRNkV05Oix74s6Gw=)
                          2: 8EB8874C767711EB81CF8371F8AEA228.roa (hash: a5Ya8AZMPcr4yo5onV+OXArWF7aJzeoyFelL2j6STfo=)
                          3: A8B2187C767511EBB8015C6FF8AEA228.roa (hash: +55ryPzqgEQMEpzdUbqmX7lkwQdExVhKk9NqHf4i0Lk=)
                          4: 1E3F561E8B1A11EBB0DA3D71F8AEA228.roa (hash: Cpd4zmkYKicudOUgZJe6/OaQ296nySd++X2fdJd/rUU=)
                          5: F8B4E3247D9E11EB83704925F8AEA228.roa (hash: 63CDlb9OzE0Ed+gaeo+vCDqqodWQ+GqMecV9r4cwpCQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
                          rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Jun 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1641 (0x669)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FBB68AR, serialNumber=DDEF51C8A0FF85505D9E0E6FFA02276C2A55AEE8
        Validity
            Not Before: Jun 14 02:10:53 2025 GMT
            Not After : Jun 16 02:10:53 2025 GMT
        Subject: CN=684cda2e-11a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a0:ec:93:79:dc:9a:e8:ee:d2:bb:7d:92:5b:
                    fa:5e:ca:17:80:79:ae:3f:e2:77:e0:49:ab:f1:6c:
                    2b:16:4b:b2:3a:69:1e:cc:a7:39:1f:ad:86:4e:b7:
                    7f:1f:6d:98:b9:56:42:9c:97:be:e1:bc:bb:49:44:
                    91:f4:46:eb:73:1a:dd:48:f1:dd:11:65:f7:ce:0c:
                    93:2e:e9:45:7e:c4:05:09:e0:e6:6b:1a:cb:71:da:
                    c6:25:06:0a:b4:b7:f1:55:3d:59:5d:d9:c5:02:5e:
                    02:de:ee:72:eb:0f:74:60:8e:e9:33:79:e4:3e:e5:
                    7d:c7:bc:25:c8:1d:b7:78:6f:18:32:79:da:f8:17:
                    6a:36:57:87:7d:04:83:c4:93:5a:2f:66:ac:36:09:
                    29:33:42:8c:d8:27:f8:0b:88:6b:39:87:26:1d:f8:
                    8b:b6:ee:d1:82:f5:b0:14:dd:a4:f8:7c:92:b1:65:
                    7e:4f:0b:e8:52:bf:22:7b:12:2b:aa:6a:1e:a4:78:
                    41:22:5b:55:e7:d2:84:ab:4c:14:92:78:41:f9:2a:
                    76:ef:e6:85:a4:6e:e9:90:75:40:b5:73:89:09:73:
                    ba:79:2b:4b:22:60:18:6c:64:f5:3a:d5:a8:24:55:
                    be:66:75:20:17:cc:73:bc:2b:3e:73:07:26:d5:87:
                    d3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:AB:70:E7:73:0B:93:51:31:69:50:9D:FB:19:25:00:A1:68:19:A7
            X509v3 Authority Key Identifier:
                keyid:DD:EF:51:C8:A0:FF:85:50:5D:9E:0E:6F:FA:02:27:6C:2A:55:AE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3e9RyKD_hVBdng5v-gInbCpVrug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/EEBD11DE767311EB92548A6DF8AEA228/3e9RyKD_hVBdng5v-gInbCpVrug.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f8:aa:2e:3c:48:00:32:74:64:a6:66:21:69:9d:62:c9:f5:
         79:94:5b:01:14:de:03:a2:16:2d:5f:01:0b:ca:e2:de:60:7d:
         fc:c9:c6:43:04:ce:b9:57:52:c3:f4:ba:bf:0e:6f:ec:c1:64:
         f9:87:82:ce:d2:06:e7:34:39:8f:9d:a2:ed:9c:50:b7:b3:28:
         b1:5f:d7:55:c7:89:1b:91:0a:8f:41:c9:69:08:5e:4a:6f:60:
         a1:3a:e4:62:29:15:eb:5e:e0:b9:85:6e:05:10:83:ac:28:34:
         94:b4:ec:d5:dd:bf:35:c5:08:26:91:ce:46:9f:72:81:ae:04:
         eb:69:c0:29:68:d0:11:32:e9:70:53:69:8e:2c:35:ee:60:29:
         1a:72:18:5b:a2:30:af:45:14:cc:88:f7:9a:5a:41:bf:1b:44:
         46:46:79:ac:d2:a6:da:35:f8:91:84:46:c9:c7:b9:fa:4c:b8:
         ff:18:8a:15:4f:40:41:4d:a1:f5:cc:81:28:84:31:80:13:ac:
         86:49:01:fa:72:ff:69:b0:e7:15:07:21:ba:de:c2:e2:96:de:
         c1:6a:43:b9:4b:8c:24:96:0b:88:04:77:5a:1b:8a:70:6d:05:
         31:33:bc:65:5f:4c:73:d1:2e:56:52:29:8d:b6:e9:8b:22:60:
         71:ab:e6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 17:34:12 2025 by rpki-client