Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
File:                     POdKxSWrybUFEx5W069Lqgyoa8c.mft (raw, json)
Hash identifier:          f22fKtmUBnKco/Hqd4HOqV1TScEGaDC7Hds8+GFYULM=
Subject key identifier:   55:D1:9C:24:04:36:9E:3F:E4:6E:FD:19:C8:1F:F5:0C:77:61:04:51
Authority key identifier: 3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
Certificate issuer:       /CN=F3614DFDAF/serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Certificate serial:       023B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
Manifest number:          0237
Signing time:             Fri 25 Apr 2025 04:05:09 +0000
Manifest this update:     Fri 25 Apr 2025 04:05:08 +0000
Manifest next update:     Sun 27 Apr 2025 04:05:08 +0000
Files and hashes:         1: POdKxSWrybUFEx5W069Lqgyoa8c.crl (hash: kZULUDtlR3TyYyiI3cTM/FA6kolC0/dEMvE1uQoOR7Y=)
                          2: AF323FA6BEB611EE92751B56775412E6.roa (hash: GK2/9/UfmXeWntRnu6M2Z7FCwh1Nn+0g0buRneYltSM=)
                          3: 40F84818776811EEA27107754AD9E6FC.roa (hash: nFqZ/v55EZimpFy2xDwmiE1oDV8eSlURy0csO3fvt1E=)
                          4: BEC2B6AE7FD611EEA15ECB6C4AD9E6FC.roa (hash: fJFVTiESI7QrywlkzoasbC83KVzfgYWTl7sxxTe7Lrk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 571 (0x23b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614DFDAF, serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
        Validity
            Not Before: Apr 25 04:05:08 2025 GMT
            Not After : Apr 27 04:05:08 2025 GMT
        Subject: CN=680b09f5-11bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:05:91:dc:a0:c3:fb:bc:26:c7:d3:d7:37:
                    89:49:e2:7c:43:09:d6:ea:0c:ad:c7:6a:29:61:ff:
                    9a:6f:ad:c8:7b:0b:f1:57:94:a6:8a:b1:9f:9d:9c:
                    b1:a7:15:04:50:1f:0c:db:6e:10:ae:f6:87:d3:b9:
                    6e:b4:53:96:a1:02:d0:e0:bc:44:41:0f:4d:b2:26:
                    0a:8a:4d:26:58:5c:32:52:fa:55:cf:e7:21:1a:bd:
                    a3:ae:5a:c8:e7:5e:12:56:d8:00:7e:b5:81:d3:9e:
                    37:74:09:98:0b:c6:23:1c:e9:b5:aa:ab:b5:56:34:
                    67:d9:08:d1:d8:de:c6:08:5e:7e:fa:bf:92:3b:38:
                    41:52:1d:83:da:1a:0c:73:1d:23:4e:46:2f:5b:ba:
                    2c:86:8b:d7:d7:e8:c2:c2:fa:99:97:53:df:38:7c:
                    dc:4d:fe:88:f7:61:d2:6a:3a:a4:8c:a3:03:18:fb:
                    8a:f7:b2:a9:49:2e:16:cb:4e:56:a4:fa:d3:c9:ea:
                    78:85:aa:c9:59:fb:d0:8f:e3:a2:09:fd:85:3a:5a:
                    a6:13:29:ee:20:02:c1:23:5e:7a:f3:f9:59:06:ed:
                    ef:a6:03:81:b1:dc:0a:84:c5:70:49:df:f2:28:a8:
                    eb:52:33:04:fd:c7:76:f9:52:7c:04:d4:35:4d:36:
                    55:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D1:9C:24:04:36:9E:3F:E4:6E:FD:19:C8:1F:F5:0C:77:61:04:51
            X509v3 Authority Key Identifier:
                keyid:3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:83:06:fa:be:0c:69:01:e3:a4:eb:d2:ee:ea:08:b6:6b:5e:
         9d:8a:7f:4f:82:e9:6c:4a:84:6d:c6:b7:b8:7b:98:10:f3:70:
         a8:f9:e0:13:8c:52:4e:23:55:7a:52:ac:ea:3c:a1:24:41:bc:
         04:c8:d1:08:aa:2b:38:c6:06:92:9a:34:f3:0f:16:e6:41:e2:
         ec:26:32:6f:ba:38:77:3c:79:5e:30:a5:19:07:18:7f:33:91:
         af:54:03:ea:2c:66:4d:0e:4b:fb:5a:77:c2:16:bd:c5:b5:68:
         19:a6:2c:72:34:87:20:2d:c2:5a:c5:20:8e:77:18:3c:f1:f2:
         ff:b1:a8:81:24:dc:25:68:f4:28:ea:56:52:a6:39:25:03:6f:
         ee:65:cc:e2:af:72:8d:66:ca:e4:c9:cb:b6:f0:b0:91:68:d0:
         fc:70:62:85:1f:02:b5:d9:9a:b1:a1:cd:d4:d3:58:b2:4a:a7:
         c8:a5:1e:1a:57:19:96:38:c9:45:dd:f8:14:85:3c:e4:cb:d2:
         3d:68:76:04:c7:9c:e7:b2:40:63:34:41:0d:16:13:1a:23:a0:
         f1:21:26:67:a0:a5:04:48:c1:ba:b9:77:9f:4c:87:23:69:f4:
         e1:f6:2d:58:51:ca:08:92:0b:ce:50:bf:d6:b5:8d:91:8a:0a:
         aa:da:f8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:05 2025 by rpki-client on console.sobornost.net