Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
File:                     _CFqOFBDurE2eHrAmYJUYZDL3pI.mft (raw, json)
Hash identifier:          UGjSbT//u0oTclF1QoNHO13mfKUssgc+A1COSkwpJkU=
Subject key identifier:   2D:2F:3B:64:C4:45:2C:D8:23:57:CE:A2:04:B1:A6:FC:59:1A:74:EC
Authority key identifier: FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92
Certificate issuer:       /CN=F3618989AF/serialNumber=FC216A385043BAB136787AC09982546190CBDE92
Certificate serial:       070F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
Manifest number:          070C
Signing time:             Sun 27 Apr 2025 01:58:01 +0000
Manifest this update:     Sun 27 Apr 2025 01:58:00 +0000
Manifest next update:     Tue 29 Apr 2025 01:58:00 +0000
Files and hashes:         1: _CFqOFBDurE2eHrAmYJUYZDL3pI.crl (hash: 4egyMpD0iviH0LpSmDkmrlieYUYptppaJyW1PETuPhM=)
                          2: 7D1D251CC04011EA957AEB21F8AEA228.roa (hash: t/ypp67l7oHU7gQc6/GfToKk0xAfDBleGGehP++nK88=)
                          3: 234A1CC0C04011EABDD07A21F8AEA228.roa (hash: qxLDaEM+dLvWNlnURJT6LsT7+vD5fBM4n0SH7Mu85No=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1807 (0x70f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618989AF, serialNumber=FC216A385043BAB136787AC09982546190CBDE92
        Validity
            Not Before: Apr 27 01:58:00 2025 GMT
            Not After : Apr 29 01:58:00 2025 GMT
        Subject: CN=680d8f29-a80e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:98:24:d7:61:75:6f:f0:51:e7:a9:d1:94:e8:
                    84:b4:50:94:15:a5:aa:5a:ec:2b:50:6a:6b:e2:f7:
                    58:6f:ca:02:c1:ad:f0:7f:ab:bf:21:2c:c9:d4:5f:
                    4f:6c:b7:89:a2:c4:26:08:33:f6:7e:10:82:17:91:
                    99:e7:5f:fc:37:5f:22:49:ce:53:7a:97:6b:e6:be:
                    78:e8:ff:9b:1b:0e:52:82:1e:34:82:87:f8:c9:42:
                    df:83:a4:78:59:31:0e:0b:f1:a3:9b:a7:02:53:e1:
                    8b:a6:74:ef:f7:ef:66:13:15:8a:67:78:07:30:7a:
                    16:e5:6e:67:60:00:17:de:46:53:ac:3d:f7:6f:1e:
                    8e:0a:d6:48:c7:ee:f3:80:7e:3d:ef:e0:77:82:92:
                    4f:f5:77:72:8b:e0:0e:ba:e8:0f:b8:b3:cc:8a:83:
                    56:5c:8b:2f:68:bd:24:a6:27:ef:d1:85:26:61:b3:
                    eb:3f:a6:8b:3e:e2:40:41:d3:03:2c:ac:65:61:5f:
                    d4:cb:ab:e4:a0:02:98:e8:ff:e1:84:c1:f8:30:1b:
                    f0:21:d8:fc:41:3d:c0:12:51:a1:cc:dd:68:76:61:
                    0b:b1:54:2d:ee:aa:09:ca:80:28:eb:de:a1:1b:c8:
                    42:9e:10:6a:79:33:a1:8e:bd:fe:df:f0:7e:bd:e3:
                    02:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2F:3B:64:C4:45:2C:D8:23:57:CE:A2:04:B1:A6:FC:59:1A:74:EC
            X509v3 Authority Key Identifier:
                keyid:FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:4d:0e:c7:bf:46:16:d4:d0:9e:94:8b:fb:f9:06:87:0b:ee:
         8b:b4:3d:29:03:1d:8d:aa:6d:af:4e:af:9d:9c:81:c1:d1:43:
         91:c9:50:68:83:af:32:df:35:13:e8:35:58:80:c4:5c:3e:2e:
         66:3b:11:14:f4:48:27:37:f1:f7:69:db:eb:c6:61:f0:e9:2e:
         a5:41:90:9f:a4:04:e6:c5:39:8a:8f:c2:bc:8f:96:6f:54:74:
         be:60:c9:2d:78:42:19:d8:2d:57:83:9a:c5:ec:ce:29:c0:a5:
         ac:f3:f2:43:0f:f5:35:1b:0d:7d:e9:7b:25:90:40:50:3b:fc:
         c6:54:57:2a:ef:59:8b:d6:3f:0e:40:89:b0:c7:b0:84:08:87:
         d0:6d:50:fa:ac:2e:a8:80:8c:5e:62:1a:ed:1e:3a:4f:1c:f7:
         ef:5d:02:b5:37:0b:5c:cf:a2:40:69:c6:c3:c1:23:b4:03:4a:
         a4:a7:42:b0:51:6d:54:fa:23:d4:04:eb:6a:d2:e2:7b:36:8c:
         ec:a7:fb:fa:ec:18:8a:74:db:09:27:35:ad:61:3f:0a:c2:ec:
         f3:f9:40:84:97:77:6d:87:cc:49:58:1b:82:19:86:2d:f8:a5:
         36:6b:b0:cc:bf:e7:9f:20:10:d8:0e:af:aa:70:ca:b4:31:2d:
         58:c8:b3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:38 2025 by rpki-client on console.sobornost.net