Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
File:                     q1UdEIRQYI699UDKEhmyuEf2Xr0.mft (raw, json)
Hash identifier:          oBuSi69TU4xMFnaoIh2jE4iLmoDXdQtfm5+4Tk5iFMI=
Subject key identifier:   B5:CA:A7:6E:22:8F:3A:FB:FE:FF:4D:3C:FB:31:21:80:0C:27:A3:9C
Authority key identifier: AB:55:1D:10:84:50:60:8E:BD:F5:40:CA:12:19:B2:B8:47:F6:5E:BD
Certificate issuer:       /CN=F36145DBAR/serialNumber=AB551D108450608EBDF540CA1219B2B847F65EBD
Certificate serial:       031B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
Manifest number:          0319
Signing time:             Mon 28 Apr 2025 03:41:04 +0000
Manifest this update:     Mon 28 Apr 2025 03:41:04 +0000
Manifest next update:     Wed 30 Apr 2025 03:41:04 +0000
Files and hashes:         1: q1UdEIRQYI699UDKEhmyuEf2Xr0.crl (hash: YdrjZ0Ru1KqIpsKRQqPNlg+cvbbcI+X1b7rfuegVaRI=)
                          2: 8CF32B68904C11EF9584C288762E951A.roa (hash: W8KdpJvKsiz8S2dQkLaP2FisSXn5+k8WsnBGg52AlIA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
                          rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 795 (0x31b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36145DBAR, serialNumber=AB551D108450608EBDF540CA1219B2B847F65EBD
        Validity
            Not Before: Apr 28 03:41:04 2025 GMT
            Not After : Apr 30 03:41:04 2025 GMT
        Subject: CN=680ef8d0-4bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:99:45:88:07:ad:cb:9a:2f:56:c2:86:c0:f7:
                    c1:52:ac:2e:60:a6:22:ce:0c:2c:2c:68:88:47:f2:
                    38:b5:3a:7f:1a:eb:9a:a7:09:dd:e8:14:07:cf:c0:
                    99:04:83:31:9a:30:b9:6b:07:04:16:67:46:ec:b0:
                    90:20:07:9a:f1:5e:a0:47:78:80:19:46:39:90:63:
                    3a:70:ed:12:21:2b:16:15:bb:27:c5:c2:30:d5:38:
                    f2:b7:79:6c:74:4a:a1:43:2f:12:ea:04:66:55:fe:
                    d7:45:d5:69:b0:be:12:e6:c6:cf:1b:a5:fd:5e:47:
                    c8:fb:2e:5e:fa:17:ca:26:01:6b:53:3d:5d:9d:af:
                    4e:fa:33:f8:b7:fc:52:36:6f:1f:61:ac:69:c5:2e:
                    85:ab:54:00:f6:bc:e8:3c:39:e3:21:7a:20:c9:4a:
                    62:26:66:09:2c:8a:be:1e:f3:36:08:08:5a:70:e6:
                    b2:36:0d:41:b2:57:0b:68:23:5d:b8:ef:2d:29:16:
                    c5:1e:04:3b:53:d4:b1:3b:dd:ae:35:f5:3c:bd:f0:
                    ad:54:95:91:cd:b7:9b:57:13:a9:ef:67:e5:ee:e9:
                    18:ee:f4:ab:db:5d:a9:ae:05:cb:94:01:db:6f:47:
                    04:b7:58:e9:4b:15:4e:cc:23:a0:f2:d8:e9:93:86:
                    34:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:CA:A7:6E:22:8F:3A:FB:FE:FF:4D:3C:FB:31:21:80:0C:27:A3:9C
            X509v3 Authority Key Identifier:
                keyid:AB:55:1D:10:84:50:60:8E:BD:F5:40:CA:12:19:B2:B8:47:F6:5E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:02:14:e5:ec:19:0b:46:cf:e0:f3:62:8b:be:31:a6:f9:30:
         32:c1:3d:7d:c1:0c:a5:27:30:73:ce:26:f3:59:de:9f:0f:c2:
         54:87:0e:6f:4d:08:f5:7c:e2:26:44:ed:41:94:7a:c5:36:02:
         76:25:d2:3b:be:6f:67:3a:da:7b:5c:dc:14:21:a3:c1:3f:c2:
         ab:71:ff:fe:90:e4:04:3b:c2:18:6c:b9:44:dd:6e:c5:1e:8f:
         34:c1:a2:36:03:7b:53:00:b6:3c:3a:c2:4d:ab:40:d6:6e:1c:
         c4:8d:1b:6c:5d:2d:b6:af:49:5d:7d:3f:de:2a:a2:50:d9:b4:
         f6:5b:18:9e:31:4f:94:ea:bd:f1:d5:f3:1f:21:de:26:42:b6:
         f4:d5:3e:16:55:28:1a:fc:ac:2c:d4:c2:14:82:42:ca:20:36:
         bc:86:3b:c7:9c:0b:88:e1:57:90:a1:80:9c:a0:a4:33:c0:c8:
         31:4a:3c:be:8c:03:b5:2d:f9:69:32:3a:9b:d0:89:c5:fc:ad:
         5c:c3:55:75:0a:c2:5a:20:d3:f8:b6:c1:8b:2f:85:83:d9:1f:
         d7:30:70:f1:e8:19:31:7b:3a:cd:d9:45:1a:fb:79:4d:a7:89:
         60:c6:3d:6d:ef:f1:9c:c3:fc:d2:ba:f2:5f:3b:85:52:59:92:
         81:93:8e:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:02:25 2025 by rpki-client on console.sobornost.net