Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
File:                     hgwk5dUBPSMjsLq0BphmwNwK7m0.mft (raw, json)
Hash identifier:          Mr/mNkOCxFPKHdyAUg/LTw/wRWAM80O7FwolGV+w5fw=
Subject key identifier:   6D:5C:75:FD:8A:97:3C:48:B8:17:AA:C7:89:64:D4:F9:7C:B9:A9:CF
Authority key identifier: 86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D
Certificate issuer:       /CN=F361F1DAAR/serialNumber=860C24E5D5013D2323B0BAB4069866C0DC0AEE6D
Certificate serial:       0234
Authority info access:    rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
Manifest number:          0233
Signing time:             Sat 26 Apr 2025 04:06:59 +0000
Manifest this update:     Sat 26 Apr 2025 04:06:58 +0000
Manifest next update:     Mon 28 Apr 2025 04:06:58 +0000
Files and hashes:         1: hgwk5dUBPSMjsLq0BphmwNwK7m0.crl (hash: i+dnykp613WJBu5RZGvn/orOSBPqicphx2XhW2R34Jw=)
                          2: B2B100A8960311EE9DAC9C0ED25BE465.roa (hash: oJ8IY/etJV+KmOnt6rOLNi+N6bGbXrWs5HWdSZ42ZyE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
                          rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361F1DAAR, serialNumber=860C24E5D5013D2323B0BAB4069866C0DC0AEE6D
        Validity
            Not Before: Apr 26 04:06:58 2025 GMT
            Not After : Apr 28 04:06:58 2025 GMT
        Subject: CN=680c5be3-ea81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:50:4d:01:14:0c:8d:25:74:d0:2d:90:62:80:
                    a1:99:72:13:00:a6:3f:83:d0:09:06:50:27:82:99:
                    bb:d0:21:c8:3e:da:0a:2c:2d:b8:3b:af:67:29:74:
                    39:7c:0f:fa:e6:97:a4:09:9d:10:8f:52:82:95:bb:
                    68:61:98:25:d0:2d:fe:6c:dd:49:51:4a:13:22:3b:
                    39:cb:b5:32:e0:fe:09:24:f0:0f:2a:b5:0f:5e:6a:
                    2d:37:21:28:5e:66:33:d8:88:2a:55:4c:96:50:fc:
                    ff:6d:0c:1c:0e:70:ba:25:47:84:9e:89:2a:96:ba:
                    c8:e7:3f:c9:47:81:a6:4b:ff:5d:f8:ed:42:87:cc:
                    ce:1e:0d:f0:67:b3:16:13:16:8d:b3:3b:11:2c:31:
                    be:41:20:47:ba:b9:0c:84:b0:06:b3:7f:66:ab:a0:
                    5b:fa:a4:ca:92:7d:ad:13:fd:8a:71:cb:31:8d:93:
                    9d:bf:53:ce:b4:f1:57:14:48:ee:32:ab:fa:db:f7:
                    ab:13:c1:91:92:89:75:13:73:00:77:12:ff:3e:85:
                    68:22:47:23:ad:45:0c:fd:8e:3a:5f:d7:c4:00:a7:
                    db:bc:11:38:b5:93:c4:75:ac:ae:25:17:18:ab:38:
                    0c:25:df:c6:83:c8:5b:49:41:29:38:5c:d5:45:f0:
                    ec:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:5C:75:FD:8A:97:3C:48:B8:17:AA:C7:89:64:D4:F9:7C:B9:A9:CF
            X509v3 Authority Key Identifier:
                keyid:86:0C:24:E5:D5:01:3D:23:23:B0:BA:B4:06:98:66:C0:DC:0A:EE:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hgwk5dUBPSMjsLq0BphmwNwK7m0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361F1DA/1B8578D077E011EE80DBA27B4AD9E6FC/hgwk5dUBPSMjsLq0BphmwNwK7m0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:68:fd:09:a0:0c:99:6e:fb:93:79:ee:52:76:f7:ab:25:49:
         8d:36:9a:69:87:70:c2:a2:d3:58:d1:4d:36:00:7e:9e:10:8f:
         4c:f5:74:b3:85:d3:f7:69:c5:60:86:24:00:28:74:4e:24:9c:
         e4:30:f3:46:2d:5f:cc:61:57:ec:cd:b2:a7:de:6d:eb:a5:52:
         24:ef:44:c9:3d:9c:ba:0d:18:9d:63:c7:fe:5e:93:d4:6a:a9:
         06:d7:3f:e8:3c:40:85:5f:a2:43:5a:fb:af:57:29:6d:25:c6:
         38:31:89:86:30:d7:56:d3:05:28:5c:4a:92:fb:5c:10:da:92:
         65:da:71:54:f8:1d:21:5f:61:fc:11:70:f6:22:99:d5:7b:b6:
         f0:98:2d:7f:64:38:1f:34:47:de:91:85:2a:b0:c2:46:d9:fe:
         e9:8c:96:d4:31:e2:e6:77:30:9e:35:4f:e6:f2:55:be:75:44:
         b0:58:2a:76:e5:42:68:5a:85:54:34:e9:86:84:b5:f2:6e:99:
         78:cd:45:3f:2a:5e:a7:3a:2b:b6:f9:24:ed:b4:86:27:0b:3e:
         09:47:7e:60:ca:eb:1d:21:63:35:ff:44:67:62:be:4c:12:04:
         ba:c1:a8:01:67:7e:49:28:fa:46:3f:8d:97:e5:b6:d6:31:cb:
         4a:ff:7b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:17:07 2025 by rpki-client on console.sobornost.net