Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
File:                     Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft (raw, json)
Hash identifier:          pXJKLcqg9jm3RB42lGl55Sjyb9V89ryK5jYWPrfJnx8=
Subject key identifier:   01:44:C6:BA:6C:1F:AF:AB:71:1B:43:6C:65:68:03:97:2C:83:73:48
Authority key identifier: 13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83
Certificate issuer:       /CN=F3615A34AF/serialNumber=131DDE4F00379CF4F143D5D00E137D697A0EB783
Certificate serial:       04A1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
Manifest number:          0496
Signing time:             Mon 28 Apr 2025 02:55:47 +0000
Manifest this update:     Mon 28 Apr 2025 02:55:46 +0000
Manifest next update:     Wed 30 Apr 2025 02:55:46 +0000
Files and hashes:         1: Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl (hash: 9Fn1TefDw56UF+dnHeRH8Ef0gAbmvWdtiOihoM512tQ=)
                          2: 72BABCF46FFC11EFBB10279D762E951A.roa (hash: rlDq1sLVRqkoMbUERI8asuL0sKn6qOkKebzRsYaYfgo=)
                          3: 3BAA3D5C6FFC11EFA23C0A9B762E951A.roa (hash: ZnDxmAxeEfDaWqAukKaPEazhsegTXYgu0pD30UCvUW4=)
                          4: D1982E4E706711EF8FA752B1762E951A.roa (hash: 13e2tsP9vZSc4kP/9gYLRySR8RimddvRM/CF31h+Gls=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185 (0x4a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615A34AF, serialNumber=131DDE4F00379CF4F143D5D00E137D697A0EB783
        Validity
            Not Before: Apr 28 02:55:46 2025 GMT
            Not After : Apr 30 02:55:46 2025 GMT
        Subject: CN=680eee33-8fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c7:6c:c8:fa:40:ff:c5:68:82:a6:d4:ed:11:
                    fb:7f:81:e4:5c:dd:58:00:ce:ef:a9:ff:f3:97:eb:
                    a1:1c:61:f1:fc:75:13:df:f0:f0:cb:a1:33:8c:ac:
                    5b:94:9a:02:e7:72:25:f4:7c:66:ea:49:ce:12:11:
                    25:e2:53:1a:08:5c:eb:f5:95:ef:1e:0c:60:74:b6:
                    99:d9:4c:72:4b:5f:1d:92:18:16:b5:d3:83:3d:92:
                    c7:8e:14:32:44:5c:aa:a8:2a:4a:31:17:30:45:11:
                    bb:96:6f:0b:e4:63:33:4e:59:4a:c9:5b:30:1f:e0:
                    32:3f:c0:4e:d2:91:18:d8:83:9c:6f:83:1e:40:c9:
                    80:d4:7d:5c:bc:03:dc:a8:65:33:4d:85:a7:7f:bd:
                    c4:af:a2:7d:af:04:33:31:2e:0a:14:23:5e:fc:fb:
                    dc:d4:d0:41:33:ba:42:0a:c7:8a:50:fd:9e:f9:e7:
                    97:fa:64:30:4e:f3:67:3f:db:8a:9a:aa:d7:ed:8f:
                    65:9c:78:bf:52:a2:bf:94:6e:36:07:cc:35:d7:47:
                    e2:de:e9:e7:ce:31:dd:02:ea:99:00:8a:89:13:a7:
                    dd:5f:12:7a:52:8f:23:ec:36:b5:8a:47:d1:d8:09:
                    23:65:56:27:86:8a:13:fd:23:34:2a:4f:5e:56:33:
                    ab:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:44:C6:BA:6C:1F:AF:AB:71:1B:43:6C:65:68:03:97:2C:83:73:48
            X509v3 Authority Key Identifier:
                keyid:13:1D:DE:4F:00:37:9C:F4:F1:43:D5:D0:0E:13:7D:69:7A:0E:B7:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615A34/02B52692AC0E11ECB3BC0FB05A40D577/Ex3eTwA3nPTxQ9XQDhN9aXoOt4M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:31:1d:fc:a1:34:ad:34:1a:2c:7c:2f:d5:44:fb:19:a0:ca:
         fe:dd:54:19:9c:66:83:33:49:a3:34:cb:b8:3d:cc:22:84:ab:
         92:f2:96:9b:b9:d2:2c:f4:cf:99:09:0c:64:be:35:35:da:03:
         84:16:d9:f9:b4:50:dc:b9:32:03:5c:4c:a5:8b:80:1c:be:7d:
         14:22:d8:87:8e:5b:f8:56:8a:9e:63:7e:87:e2:30:99:fa:e1:
         31:38:cd:bd:a5:b9:e9:62:d6:27:a3:e1:b4:d1:c1:96:2f:d8:
         ed:fa:12:1e:76:e6:41:1b:0e:ee:b2:c8:ab:be:2e:bf:3f:52:
         a4:b0:c8:7c:09:86:bb:8d:6f:0d:97:5c:53:03:17:57:4e:77:
         ef:fc:42:f3:2c:02:10:62:0a:8e:49:6c:aa:2f:41:bf:e9:ef:
         1e:cb:f2:30:ef:8f:13:e4:f7:06:d6:07:3b:36:3a:6a:f4:6b:
         ad:80:a9:2e:17:a8:2a:a2:92:56:d7:db:e1:70:85:0e:11:26:
         25:2d:4b:e4:5a:88:b4:d7:49:d4:2f:e7:af:28:42:7b:10:15:
         57:29:fe:d6:19:84:40:ec:bc:04:28:ae:d8:62:97:cc:23:6b:
         68:17:07:2d:4a:a7:d3:5e:e2:1c:98:9f:1c:ae:b8:3b:86:3b:
         69:a0:9f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:02:26 2025 by rpki-client on console.sobornost.net