Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
File:                     FsdOc5XcId2ESiKgESgWEhp19JI.mft (raw, json)
Hash identifier:          TRSnxfoi6KrrnSN8SohJmwJsHi7bH2Efh9f6H2612CQ=
Subject key identifier:   2C:80:B7:F9:E8:C0:C9:26:F4:1F:C4:09:79:7A:11:0A:9E:0F:2E:F7
Authority key identifier: 16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92
Certificate issuer:       /CN=F3654A44AR/serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
Certificate serial:       035C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
Manifest number:          0359
Signing time:             Mon 28 Apr 2025 03:31:54 +0000
Manifest this update:     Mon 28 Apr 2025 03:31:53 +0000
Manifest next update:     Wed 30 Apr 2025 03:31:53 +0000
Files and hashes:         1: FsdOc5XcId2ESiKgESgWEhp19JI.crl (hash: qzw5BBGntCWBaFFXrZ60NWZdcIFYfD5XhhYHQaFDOso=)
                          2: CF8B10CE1DB711EFA609B0217DDC24C2.roa (hash: cUUrYIHHPxFgWnYQbOftBzdS94Gj26Vr5vz5884oWrA=)
                          3: 148381D41DB811EF83D02FF17CDC24C2.roa (hash: BiZPcXyEyPmGn8AwAntxiM0fpA7+k3wSNcu8/0aEYDQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                          rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654A44AR, serialNumber=16C74E7395DC21DD844A22A0112816121A75F492
        Validity
            Not Before: Apr 28 03:31:53 2025 GMT
            Not After : Apr 30 03:31:53 2025 GMT
        Subject: CN=680ef6aa-d083
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:53:19:94:6b:fe:4d:2b:01:fa:56:87:60:74:
                    ed:be:b8:c8:bd:64:3e:f6:93:be:16:a6:0b:58:e5:
                    f7:37:b5:17:e2:80:8c:0d:7c:6d:44:6b:85:bc:73:
                    4b:be:34:6a:ae:2b:84:da:58:34:c1:9c:1a:ed:66:
                    d3:a2:b1:92:f9:1e:7d:b8:7e:dd:f8:61:9b:16:89:
                    30:59:d0:7a:57:51:f1:a2:d0:e4:9a:2a:0c:1d:2c:
                    06:92:00:66:79:f3:71:2e:de:0e:47:42:ee:d1:70:
                    ce:bd:49:60:c4:6b:5b:ec:74:6f:78:0d:d6:a2:7d:
                    ad:f0:51:66:95:b3:57:e2:f6:61:40:36:29:01:fc:
                    7b:e1:32:ee:85:34:4d:19:cc:a2:0d:52:ab:bb:61:
                    a9:64:70:4b:f7:49:c4:81:9c:79:14:00:9b:f3:eb:
                    d5:d4:b7:29:4d:46:3a:f0:38:c2:24:74:60:a5:1e:
                    2c:e3:9b:0d:71:58:d2:29:3c:48:7d:b1:d4:c5:bd:
                    2c:d7:1d:d1:66:21:bc:04:6d:5f:17:89:75:4f:fd:
                    4a:52:17:a1:82:91:09:51:7a:2a:52:00:0f:2f:a2:
                    e4:ce:96:26:f0:83:60:6e:89:91:b1:e6:35:0f:34:
                    d1:6f:a8:1c:69:a1:00:f6:ba:49:dc:94:90:1f:1d:
                    8c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:80:B7:F9:E8:C0:C9:26:F4:1F:C4:09:79:7A:11:0A:9E:0F:2E:F7
            X509v3 Authority Key Identifier:
                keyid:16:C7:4E:73:95:DC:21:DD:84:4A:22:A0:11:28:16:12:1A:75:F4:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/FsdOc5XcId2ESiKgESgWEhp19JI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/2DA756809CA511EDB40FF399F1222468/FsdOc5XcId2ESiKgESgWEhp19JI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8d:1b:92:c0:a2:fb:4f:ef:45:4a:f7:93:45:a3:77:3e:13:
         58:29:93:a8:15:ce:01:72:94:5f:11:7a:c6:a9:15:a2:36:5c:
         eb:a3:50:8f:c6:23:dd:02:e4:55:e0:9d:9c:e1:dc:df:44:ec:
         f1:93:bc:01:dd:b5:b4:5c:58:66:16:39:20:ed:29:f9:17:71:
         bf:a0:41:e2:2d:a3:ca:a2:64:c3:c0:da:f9:3e:c0:f7:ab:42:
         e5:47:31:a8:f0:d2:d3:95:e3:34:80:12:47:6f:9d:20:ab:59:
         24:a5:da:b9:10:57:33:57:fc:c0:c7:98:63:6d:4a:8e:44:a0:
         be:4c:44:a1:07:76:0f:98:ed:de:a5:3d:ec:9a:0a:84:aa:df:
         a1:e8:fc:32:98:20:44:aa:50:ea:d2:89:69:50:5c:f8:f6:54:
         c5:47:01:5e:2e:e3:32:ee:4d:4a:40:55:c3:d2:cc:f4:32:ea:
         13:3a:26:c1:f1:3a:dd:0e:43:c1:d8:10:8a:c3:bb:0b:de:6a:
         5f:97:4c:e6:ef:ea:65:df:a9:2a:8a:94:d6:3b:db:aa:96:f2:
         c0:29:2e:94:e2:00:3e:5c:24:56:f5:55:58:08:0a:b7:16:b1:
         e0:e0:13:8a:b7:bf:86:08:57:14:4c:70:5f:bf:62:62:81:15:
         68:22:fd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----