Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
File:                     YKDl0axmyK47fJ5qjvW8BLi7uI4.mft (raw, json)
Hash identifier:          flf0iSKm6J6KPSoLFZKq6l54nLFmrY2JMuzXg4UMmHw=
Subject key identifier:   81:94:6E:73:CF:3E:F2:82:16:DA:3A:D5:9D:40:99:60:2D:DE:35:71
Authority key identifier: 60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E
Certificate issuer:       /CN=F3614659AF/serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
Certificate serial:       065D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
Manifest number:          05CD
Signing time:             Sun 27 Apr 2025 02:44:46 +0000
Manifest this update:     Sun 27 Apr 2025 02:44:45 +0000
Manifest next update:     Tue 29 Apr 2025 02:44:45 +0000
Files and hashes:         1: YKDl0axmyK47fJ5qjvW8BLi7uI4.crl (hash: R/d9hLNwO3RZdnVZG6UB8Khf1E/CrMYOxOMNJp9BmQY=)
                          2: 0091161A144C11F0801A51F76DB8BCC6.roa (hash: 9oNkMM3GJvaxowbYxronZzBOKB5XFOoDP/A6k15+A4M=)
                          3: 488D3EB060B211EF87A97782762E951A.roa (hash: MVYbN3+gCL8uNH5R81Zu9Ge2lQxWhVsfh/rM4ZRyn/w=)
                          4: 9D00E53A042411F0AE942178762E951A.roa (hash: 3lO4ySirvSBJZhZS0yYuZYZ1ZoMcdgb1UxXC64iMMus=)
                          5: 293DA02E0E9411EFB4C6A635017001B1.roa (hash: 3+KIiU4tfg4VsfxzRAEbpE5pkr5DnXevqMRkIzk01FM=)
                          6: 6C7ACBF26E0A11EFAC0C4258762E951A.roa (hash: 4grD6nGcP4ytHOjXft0LrvgGLuVL2rG269xNQf6k+eI=)
                          7: 372AC08C8CB511EF9888555B762E951A.roa (hash: etRxaBFYkDrFKylBsUD/HBMJSKuCjzex1c6EZ66GzPQ=)
                          8: 3D55B2F0C43211EF8166C3BD762E951A.roa (hash: Af+fAJ8B4YCQU1OF1pDiIpmVk8a59qwsOLlr9TGYlBo=)
                          9: 94B69FC84F1B11EFBF7CDAAE762E951A.roa (hash: KbxuO2uDPTezjLzyouQUc4XGgC1J865f/dnmoPHmv0Q=)
                          10: 31F31826606411EF89390EA0762E951A.roa (hash: XJE5bowMijOEb0dwq2uI3QNwKZq01TfKw2I/yEETF+o=)
                          11: 0C083320B24F11EF80B52F71762E951A.roa (hash: swBYnhkImW9LhM0qswhHNCFqzYvKajWSuD7zcbFshH8=)
                          12: 373D29E4095511F096A41CBE762E951A.roa (hash: myBILke2RQ0OYPU057gGO3OXC3ByHG2noie9RgjT7qM=)
                          13: 467A6B4248DF11EFA203A954762E951A.roa (hash: j6LGYpvEwxNC35muXut5alaxgRUMQT87ILx6kToC8Qs=)
                          14: E2FD811CBC6511EF9197B567762E951A.roa (hash: EXiNgxy7d0tjLX1SpsLd379Zi3cAwKIMh7UFB0zyfF0=)
                          15: 666FD3D82EEA11EFBC63294B762E951A.roa (hash: MTXkIou//Guz3KRl/9YKtpj6n9ZVBkXEGaijhN0evTk=)
                          16: 646F613C003311F0A1A285B3762E951A.roa (hash: bJ1ILmkYuUC3NN3I2YJ1a0bc80c543GbkB4NCNMhrPc=)
                          17: A8566A94136C11EF9A119E33017001B1.roa (hash: 8n6hGcHTkYJois2LH442hMoRDS4eG3DkPDkUW4heEZ8=)
                          18: BC5D3D90032D11F09ED36D5F762E951A.roa (hash: fZkSIZKqHjYLVMmlSF8FT38HnKjU0BqJ7lEBUixZVJ0=)
                          19: 509B5B80154B11EFAAF66569017001B1.roa (hash: XKlm75kmISAu8xaI2z4uwQrQDSSx5mypluivOS+f5kk=)
                          20: D2D9D000F8CA11EF9DBC905D762E951A.roa (hash: Jjmu7sdBAG5AgF3w4z9AnV0gRRvL2hD/xlTYph48lzY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1629 (0x65d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614659AF, serialNumber=60A0E5D1AC66C8AE3B7C9E6A8EF5BC04B8BBB88E
        Validity
            Not Before: Apr 27 02:44:45 2025 GMT
            Not After : Apr 29 02:44:45 2025 GMT
        Subject: CN=680d9a1e-b8e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:31:7f:af:93:77:26:fa:7e:e7:d0:df:b8:a2:
                    fa:b1:df:76:ec:f3:b1:d3:a6:d7:62:b7:fc:8c:2b:
                    d6:55:67:c7:ca:1b:ba:74:3d:b9:be:c5:d7:cc:87:
                    ef:81:22:47:c5:32:87:09:ce:e2:44:0d:90:8c:5a:
                    bd:08:cc:16:11:22:f0:76:a7:7c:37:8c:33:de:71:
                    3a:9b:05:a4:a0:b0:91:00:8d:6e:56:4b:c1:5c:90:
                    89:89:51:47:24:b1:90:96:41:ff:e5:97:52:2c:bf:
                    f7:b4:7e:14:96:d5:88:55:16:d5:e1:89:a3:35:8c:
                    86:c0:61:bb:c6:16:b8:51:6f:12:51:6d:0b:00:14:
                    1d:83:68:80:ae:cb:77:f2:38:f8:a0:2b:c2:e7:ee:
                    e5:99:4c:cc:8c:86:c4:78:c9:72:88:d8:59:4d:9a:
                    c9:03:85:73:1c:da:c7:49:f3:7f:bd:4b:5b:5c:ca:
                    1e:d4:e4:a5:87:d2:14:0f:60:60:f7:bd:8d:09:a9:
                    3d:9f:0b:3c:48:3c:9a:e6:5a:de:7c:a3:b9:a7:f0:
                    9d:6a:39:50:f8:f9:bd:cd:66:bf:95:15:cd:28:c9:
                    18:fd:ce:a4:cd:5b:01:bd:0a:9a:9d:99:2a:de:f2:
                    ce:64:1b:23:8d:b6:92:6d:80:1a:a3:97:86:80:e2:
                    f3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:94:6E:73:CF:3E:F2:82:16:DA:3A:D5:9D:40:99:60:2D:DE:35:71
            X509v3 Authority Key Identifier:
                keyid:60:A0:E5:D1:AC:66:C8:AE:3B:7C:9E:6A:8E:F5:BC:04:B8:BB:B8:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YKDl0axmyK47fJ5qjvW8BLi7uI4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614659/6656DE746DF811ECBCC210765A40D577/YKDl0axmyK47fJ5qjvW8BLi7uI4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:0d:77:fa:b5:6e:28:3c:e0:ee:db:eb:4b:4e:c7:f5:1c:a0:
         b7:d1:35:6a:0f:42:61:e6:1b:fd:ec:d1:4d:59:97:e1:6d:88:
         d1:f4:cb:59:17:40:5c:62:2a:cc:80:7e:ae:59:e3:34:d7:63:
         eb:e8:6e:c6:9e:cc:1e:4e:a7:44:7b:fb:2b:24:8c:c1:bc:79:
         44:aa:3b:71:15:41:b9:43:63:88:5e:db:e1:86:cf:e1:44:9a:
         0a:0c:2a:2d:c2:a8:7a:63:8f:71:a9:de:c3:94:9c:fb:d9:63:
         d3:cb:84:03:04:dd:25:af:8d:fe:b3:25:7e:5b:79:37:f3:1c:
         56:cd:89:51:5e:17:3e:e5:1e:0e:4f:70:69:2b:b8:84:cd:2f:
         24:61:2c:37:9c:4a:ca:a3:65:1c:49:70:46:3c:05:17:7d:b9:
         cf:22:ea:5f:d9:02:bb:dc:e4:42:96:8e:83:7c:77:fd:42:11:
         05:27:a2:54:c7:93:6a:99:cc:75:e6:f7:7b:cb:6a:ca:5b:9e:
         cb:d9:97:4e:f8:bd:c1:54:88:1a:45:d2:88:a7:34:d7:d8:bf:
         61:9c:64:ac:06:1a:3b:d2:ba:7f:fd:b0:c3:91:fc:3e:43:20:
         07:63:54:f4:7b:b1:87:6c:9f:9b:dd:2f:57:72:52:88:89:94:
         4a:06:19:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:38 2025 by rpki-client on console.sobornost.net