Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
File:                     1-l-xBu1iYDED-Sp42wBC8ABPTE.mft (raw, json)
Hash identifier:          BQ+sGDG6kAzWyANEC6/B7mOpGyMCKmJACIWbpsCDfsA=
Subject key identifier:   7E:F9:5A:D7:E6:5D:14:8C:D0:4B:F5:2D:91:1E:06:81:51:3B:E0:86
Authority key identifier: D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31
Certificate issuer:       /CN=F361610CAF/serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
Certificate serial:       9A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
Manifest number:          98
Signing time:             Mon 28 Apr 2025 05:11:02 +0000
Manifest this update:     Mon 28 Apr 2025 05:11:01 +0000
Manifest next update:     Wed 30 Apr 2025 05:11:01 +0000
Files and hashes:         1: 1-l-xBu1iYDED-Sp42wBC8ABPTE.crl (hash: Rh+PWcLhZ/1UmUd4Fi/i+jooLsujJ2vivtWhDn5O/t0=)
                          2: FAE9132EBEE311EFA8C67594762E951A.roa (hash: 4V2xq+YhsqcDrEW6q5qpBpAI8sGhmeoDwb8giUJL3zw=)
                          3: 247867E4E27011EFA0A04798762E951A.roa (hash: +UBXwm2myeOTyr1l1PVQJ5MRdDqTlUZ0ucC+vd+kfcY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 154 (0x9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361610CAF, serialNumber=D7E97EC41BB58980C40FE4A9E36C010BC0013D31
        Validity
            Not Before: Apr 28 05:11:01 2025 GMT
            Not After : Apr 30 05:11:01 2025 GMT
        Subject: CN=680f0de6-86ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:d8:ef:d8:a2:bb:92:0b:20:e1:61:08:cb:46:
                    80:e0:09:30:9a:5b:7a:d2:93:d4:9e:d7:cb:bb:77:
                    b8:bf:b4:a3:85:49:44:0c:20:67:38:8a:7b:ea:20:
                    1f:8b:82:14:56:f0:88:6e:d7:6b:d6:80:d9:7e:85:
                    42:8e:25:24:cf:3e:8d:2d:ca:a7:9c:c8:da:cc:c3:
                    d4:42:3f:cf:3e:0e:bf:d1:b5:00:90:80:a9:05:3b:
                    d0:5a:cc:fb:de:e9:c7:fc:df:37:f1:61:1d:25:6f:
                    2e:d4:29:d7:c0:a0:54:09:28:e1:e8:d2:c2:4c:79:
                    96:42:35:84:54:a2:32:21:4e:e6:b8:42:37:05:ef:
                    6e:ed:37:c0:d9:7c:5f:9e:c5:84:66:9a:c7:9f:f3:
                    de:d4:e0:54:01:9d:3b:0f:89:d4:ba:ab:22:da:69:
                    3a:c7:9a:43:d1:5a:9d:4a:e9:c4:11:b7:5a:ec:1c:
                    34:60:73:31:6b:25:cb:2f:4a:cd:c2:b2:a1:89:98:
                    f6:40:ee:1f:95:1f:e2:9f:e5:8a:f5:ff:b5:c6:a3:
                    02:d7:ef:c1:1b:7d:ff:f5:05:fe:7b:16:32:47:ee:
                    8c:86:1e:17:46:5f:fe:60:0a:62:03:b4:fd:25:24:
                    57:a9:b8:c4:a7:4e:4b:dc:74:25:95:3b:2f:b4:77:
                    ad:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F9:5A:D7:E6:5D:14:8C:D0:4B:F5:2D:91:1E:06:81:51:3B:E0:86
            X509v3 Authority Key Identifier:
                keyid:D7:E9:7E:C4:1B:B5:89:80:C4:0F:E4:A9:E3:6C:01:0B:C0:01:3D:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1-l-xBu1iYDED-Sp42wBC8ABPTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361610C/90D847F0B49A11EF9D6E0B60762E951A/1-l-xBu1iYDED-Sp42wBC8ABPTE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:b9:94:33:d4:b1:d6:54:52:12:f3:78:b4:fe:55:e9:20:c1:
         6f:cc:4b:cb:c2:33:8c:fa:22:2c:a2:50:18:da:89:05:06:4c:
         78:87:48:3c:dd:44:7d:70:df:82:d5:a8:d9:72:93:72:64:22:
         24:be:ac:f9:ff:25:e1:71:8f:b5:d3:c6:fd:26:67:06:92:30:
         05:fc:25:ad:d5:99:fc:71:ba:5d:5c:e5:b5:49:01:de:b5:cd:
         e7:d6:39:78:82:8c:c7:bc:bc:26:62:e7:dc:9e:ef:00:a4:84:
         ed:2b:92:42:4b:20:b3:56:33:01:e2:fc:9e:44:c0:86:15:9f:
         39:2c:51:38:7b:ad:d6:3b:f2:fc:73:47:e4:47:55:d4:6a:ec:
         8e:3b:b0:00:8a:22:77:90:de:36:33:ee:12:12:11:c4:d7:0f:
         48:d4:5f:41:e3:80:fd:0b:1f:88:5a:9c:68:f5:88:11:54:82:
         f0:04:fe:c7:31:cf:dc:ad:ce:e3:8a:e9:69:a1:8c:cf:89:b8:
         f0:a8:fe:1f:55:51:da:a7:32:24:3b:38:74:c8:fd:21:91:25:
         40:10:6f:6e:69:95:61:d3:1c:43:cc:6b:48:23:ec:4e:0d:af:
         b4:72:fc:83:7f:46:3a:3a:6c:54:63:ca:ee:b1:f0:65:39:ce:
         c2:09:78:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:23:02 2025 by rpki-client on console.sobornost.net