Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.mft
File:                     E1GrIbf03rgU81lO-IKc3VSFi8g.mft (raw, json)
Hash identifier:          ZEWDIlu0fuQsLZy7wMisWfPTeJNlx1kBfLYSATIA8Js=
Subject key identifier:   FB:DA:71:A1:9A:9B:B4:09:73:A0:19:3A:8D:22:3C:D1:73:91:9B:29
Authority key identifier: 13:51:AB:21:B7:F4:DE:B8:14:F3:59:4E:F8:82:9C:DD:54:85:8B:C8
Certificate issuer:       /CN=F3618B80AF/serialNumber=1351AB21B7F4DEB814F3594EF8829CDD54858BC8
Certificate serial:       0271
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/E1GrIbf03rgU81lO-IKc3VSFi8g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.mft
Manifest number:          026D
Signing time:             Mon 28 Apr 2025 04:05:26 +0000
Manifest this update:     Mon 28 Apr 2025 04:05:25 +0000
Manifest next update:     Wed 30 Apr 2025 04:05:25 +0000
Files and hashes:         1: E1GrIbf03rgU81lO-IKc3VSFi8g.crl (hash: Jwjo0zllC8bIxT1ksIhuSMwVQrskAAs4GMEe0YtyjRQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/E1GrIbf03rgU81lO-IKc3VSFi8g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618B80AF, serialNumber=1351AB21B7F4DEB814F3594EF8829CDD54858BC8
        Validity
            Not Before: Apr 28 04:05:25 2025 GMT
            Not After : Apr 30 04:05:25 2025 GMT
        Subject: CN=680efe86-e2e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:96:cf:c2:70:ed:55:72:2f:d2:1b:d8:f0:38:
                    49:04:45:41:27:69:1c:6d:70:9c:7e:ae:8d:c9:8d:
                    0f:34:c3:1b:35:33:01:cb:86:e0:bc:4b:7d:91:84:
                    55:8b:2f:6d:ba:63:5c:b6:c6:81:e0:7f:db:79:3f:
                    79:c3:4a:3f:8d:d0:b1:49:27:ed:d4:89:a5:cf:0e:
                    11:30:0d:f7:6d:b7:f5:d1:d4:3c:48:1a:6a:50:43:
                    03:7a:cd:1c:2d:72:3f:fa:8e:bc:de:ba:db:ad:36:
                    49:02:09:89:be:5f:cc:19:ce:16:6d:47:94:04:bf:
                    51:26:47:04:ca:f0:ce:c0:a0:ee:f4:38:3a:18:81:
                    ea:dd:4f:c5:20:57:d8:a1:82:bd:ee:c1:1c:c6:32:
                    0a:2b:e7:9b:0a:69:7f:c4:dd:1b:a6:26:13:1a:6c:
                    76:02:53:85:a3:a4:84:94:3a:34:9b:3e:40:66:a1:
                    f4:62:c0:40:73:a6:81:fc:0f:29:a2:3e:f9:49:0f:
                    60:bd:b8:16:e1:c0:9d:7f:86:41:a4:ba:5e:76:14:
                    0f:60:f4:f8:35:63:4e:2d:3e:80:08:8c:fc:44:84:
                    ce:74:e8:1e:da:58:2f:32:a1:f7:ee:91:31:92:64:
                    85:3b:93:2d:2a:7f:b6:f3:80:8a:d8:02:06:66:83:
                    ac:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DA:71:A1:9A:9B:B4:09:73:A0:19:3A:8D:22:3C:D1:73:91:9B:29
            X509v3 Authority Key Identifier:
                keyid:13:51:AB:21:B7:F4:DE:B8:14:F3:59:4E:F8:82:9C:DD:54:85:8B:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E1GrIbf03rgU81lO-IKc3VSFi8g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618B80/FFDBFDAA524811EEB96964164AD9E6FC/E1GrIbf03rgU81lO-IKc3VSFi8g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:21:f8:36:7b:7c:75:77:a5:4a:7e:71:16:df:c4:f4:a6:e1:
         af:88:5c:28:e5:48:04:32:62:2b:33:3e:9e:48:77:3e:ba:3d:
         07:30:48:08:18:78:7c:3c:59:17:64:ce:a9:e6:64:f5:10:f2:
         33:b3:de:08:f0:b8:32:0a:50:63:1b:b9:f9:8b:bc:d1:b5:7d:
         47:51:df:a5:15:f1:ff:37:4f:43:ec:59:b3:07:3c:89:be:6e:
         29:17:3a:6e:34:e2:ac:b7:08:b9:c7:33:1c:90:77:c2:93:98:
         d3:a7:2a:0b:ff:ec:58:2b:d8:26:af:0b:7e:35:18:d5:12:57:
         6d:9f:9a:3d:8e:69:8d:ee:f5:5d:8b:2d:af:9b:00:4b:4e:9f:
         d3:15:9d:11:26:61:9d:1f:e7:7d:f9:8d:1b:ed:1c:7a:b0:f2:
         11:90:13:86:23:8f:ca:8e:6d:3f:05:ea:38:72:e3:28:33:d8:
         cb:4c:1b:a8:ee:1a:b8:5c:0b:e6:a8:7a:00:1e:2f:8b:f1:cd:
         fc:b4:09:a4:5d:d2:65:90:9b:fa:eb:46:9f:b0:b5:74:cd:28:
         01:75:70:c0:2c:bc:09:5a:e7:1d:9b:43:d5:4e:96:7f:73:31:
         73:9a:7b:87:0c:51:ff:e9:5a:90:2f:18:9b:92:b6:05:47:0c:
         24:b3:b6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:02:26 2025 by rpki-client on console.sobornost.net