Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.mft
File:                     JPTjVN3eyJE4I7D5JAelNKvz-YI.mft (raw, json)
Hash identifier:          1oDp9khkgek2D+OgdVV2P9JR4SzJeJG7RGXfks7QDOA=
Subject key identifier:   3F:AC:5D:31:AF:A0:78:8F:93:21:C1:E5:F7:79:FF:60:F9:0D:FF:B5
Authority key identifier: 24:F4:E3:54:DD:DE:C8:91:38:23:B0:F9:24:07:A5:34:AB:F3:F9:82
Certificate issuer:       /CN=F361E497AF/serialNumber=24F4E354DDDEC8913823B0F92407A534ABF3F982
Certificate serial:       042F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JPTjVN3eyJE4I7D5JAelNKvz-YI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.mft
Manifest number:          042B
Signing time:             Fri 25 Apr 2025 03:01:11 +0000
Manifest this update:     Fri 25 Apr 2025 03:01:10 +0000
Manifest next update:     Sun 27 Apr 2025 03:01:10 +0000
Files and hashes:         1: JPTjVN3eyJE4I7D5JAelNKvz-YI.crl (hash: XmYmLY1moxR1e/EBqJVfjeDi5Hz8TcZg3x9fH/KpZ8w=)
                          2: 4FE73C3EFB9111EC8E02F994F1222468.roa (hash: GjnKB/yazoMug9KsY/PrUtk45d27ruy608z+yD9gvcY=)
                          3: 08D750B8FB9111EC80F40194F1222468.roa (hash: Nh4OvBKp1qS4BddvATEM7GauwQ1rZ+sG7Y/Z75HPcSg=)
                          4: 3569861EFB9111ECABF49894F1222468.roa (hash: xfjrAkm4LufZusLE6b6YUbeIGmJjoUsjJjVfL2I+eVI=)
                          5: 20A6A34CFB9111ECB4636694F1222468.roa (hash: fEGzGBD0T3F0W0X1kqgg2mvvPQfKpajK9d5gjC8kLxs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JPTjVN3eyJE4I7D5JAelNKvz-YI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1071 (0x42f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361E497AF, serialNumber=24F4E354DDDEC8913823B0F92407A534ABF3F982
        Validity
            Not Before: Apr 25 03:01:10 2025 GMT
            Not After : Apr 27 03:01:10 2025 GMT
        Subject: CN=680afaf7-14a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:db:0e:55:9f:ee:46:de:68:e1:23:e5:22:73:
                    37:10:4e:51:7d:b4:76:70:51:bf:eb:b3:e1:f0:e3:
                    04:22:3c:fc:5a:49:73:9a:e1:f8:47:92:1d:4f:2a:
                    0e:22:99:17:1e:bb:d6:63:17:38:14:3b:ef:19:fa:
                    50:3e:9d:58:ed:7f:73:63:b4:f8:24:6a:44:dd:4e:
                    6f:28:64:7f:c7:9a:d9:70:d3:00:5d:8f:36:50:fb:
                    bd:d5:87:c4:22:3f:da:b3:8d:0b:49:df:19:a1:7c:
                    43:4e:9e:79:21:36:25:f9:a5:e2:3b:c0:55:50:61:
                    17:f8:c2:83:ac:69:7c:b6:44:6f:f2:ed:64:89:c4:
                    46:1c:00:63:c9:da:1b:f0:4d:6f:c0:20:9f:6c:19:
                    bb:53:ed:69:97:25:53:91:40:3b:d6:20:29:42:2f:
                    bc:7b:6b:3d:1f:f6:d3:0c:e6:d7:19:50:f8:df:47:
                    74:4f:bc:b8:38:5f:2e:6d:dd:41:d6:a2:54:32:f6:
                    9d:f2:9e:4f:24:c4:38:23:c3:e0:c8:e9:e2:45:3f:
                    5d:55:dd:19:58:9a:de:82:9f:c5:f1:58:33:f0:ba:
                    49:ae:f8:82:ea:27:99:54:30:e3:8a:9d:59:6e:dd:
                    33:e8:eb:26:1c:29:6d:53:2b:a9:da:c3:a0:08:3a:
                    74:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AC:5D:31:AF:A0:78:8F:93:21:C1:E5:F7:79:FF:60:F9:0D:FF:B5
            X509v3 Authority Key Identifier:
                keyid:24:F4:E3:54:DD:DE:C8:91:38:23:B0:F9:24:07:A5:34:AB:F3:F9:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JPTjVN3eyJE4I7D5JAelNKvz-YI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E497/708176AAF93211EC88DB648CF1222468/JPTjVN3eyJE4I7D5JAelNKvz-YI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:11:e2:7d:e4:2a:46:6b:e9:61:60:09:5b:ec:b9:28:98:cc:
         f3:3e:8a:2d:9f:fe:8a:70:03:be:9c:11:0b:7e:83:a9:05:75:
         c1:6e:7e:be:07:ce:f8:1e:a9:28:f7:1d:e4:47:16:78:eb:a2:
         05:22:1b:34:f4:97:b1:aa:17:b1:fc:7d:11:b2:4c:07:49:90:
         b7:af:c3:7c:df:40:9b:b4:2f:20:82:c2:81:a2:ae:d5:f9:9b:
         82:57:f3:0f:3f:7e:5f:c4:64:15:93:01:a9:de:40:e9:5b:75:
         12:3a:9e:c6:51:69:94:44:39:57:ac:4c:06:c9:31:c1:02:56:
         dd:fe:5b:90:e8:f0:ce:cd:ca:4f:ed:93:86:44:2c:7d:cc:58:
         5e:4e:c5:77:94:2d:33:3d:67:5b:6f:58:a1:f2:4e:13:93:06:
         5d:59:a2:4e:58:8d:70:de:2d:1e:23:58:ec:97:a3:39:5e:8d:
         5b:7f:be:dc:4f:a6:4f:c9:ca:4e:4c:3b:74:a3:d7:2a:3a:b9:
         96:80:04:f6:2d:d2:a9:0c:39:d0:94:36:44:d2:a7:7b:50:90:
         d4:62:ff:84:db:69:d5:45:96:86:61:ad:15:c4:35:01:31:37:
         ef:97:18:70:85:0b:28:f8:d3:f6:91:70:73:f2:ee:01:cb:bc:
         cd:a8:80:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:06 2025 by rpki-client on console.sobornost.net