Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
File:                     4qOmjo-ihl0uVH2MskMPqyH8oG0.mft (raw, json)
Hash identifier:          YL81bTSBvQXLknyNJHg69T11/aOupzk/b3jYbPBeW+8=
Subject key identifier:   99:C6:91:7E:C4:42:44:79:AE:8F:6F:CB:8F:0C:87:44:41:ED:B3:A5
Authority key identifier: E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D
Certificate issuer:       /CN=F362A2E1AF/serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
Certificate serial:       043B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
Manifest number:          0435
Signing time:             Mon 28 Apr 2025 03:06:00 +0000
Manifest this update:     Mon 28 Apr 2025 03:05:59 +0000
Manifest next update:     Wed 30 Apr 2025 03:05:59 +0000
Files and hashes:         1: 4qOmjo-ihl0uVH2MskMPqyH8oG0.crl (hash: fGyMqBa5Rc9gPs6K27xcX/+TvuGr4QIZgN7szNnuRw0=)
                          2: B063A1E4F70C11EC941F0CB4F1222468.roa (hash: Pp0AH2ECom1pa7n5F8aA5h/FubB3+W9tB91zRCkX5hA=)
                          3: 38150926F61711EC9FF6E8AAF1222468.roa (hash: R4O17UWTwxmFzLEBa28mhDTCBi+yy6jmbDMn8Gh9fK0=)
                          4: C6B22452F70C11ECB35A5DB4F1222468.roa (hash: qE23fzU6w713psdmbvCNENyQme+t86q76CBB2jdDWu0=)
                          5: E8C1348EF70C11ECA5BCDAB4F1222468.roa (hash: sQtWx2Bv/Sqp8d9pEf9Jqmmnu5VfFPqFz45blSrAhD8=)
                          6: 507471B4F61711ECA8BD35ABF1222468.roa (hash: mftcHJVRxHtq4aPHGuWKQ475mDfq8IorWrPcZAJ1yKo=)
                          7: 105F0D40F70D11EC8E5663B5F1222468.roa (hash: mjO2Sp6OVpSiQ7xZGU3orqZpsq+WKN6CkJVcH0QEXeM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1083 (0x43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362A2E1AF, serialNumber=E2A3A68E8FA2865D2E547D8CB2430FAB21FCA06D
        Validity
            Not Before: Apr 28 03:05:59 2025 GMT
            Not After : Apr 30 03:05:59 2025 GMT
        Subject: CN=680ef098-4041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:89:ed:b1:87:f8:67:4d:69:92:9b:32:76:f3:
                    fb:85:68:9d:3a:33:43:26:dd:94:6e:17:53:a1:36:
                    33:0a:c7:c1:aa:8a:d3:30:f3:42:f7:85:d8:16:5d:
                    cb:3d:23:80:d9:c9:9d:5c:28:21:77:e9:a2:33:ef:
                    5e:ff:95:bb:dd:db:3b:f3:9a:83:21:be:1f:e0:04:
                    e5:6a:3f:47:50:1c:cd:39:89:01:6a:d4:f7:18:c7:
                    20:f1:ac:59:0b:f0:69:8e:89:f0:6e:95:dd:de:e8:
                    4c:67:a8:e1:e3:b7:c9:87:e0:04:91:12:92:a4:47:
                    5e:a6:9f:ba:0b:61:2a:00:98:7b:9e:6d:da:52:27:
                    3c:10:81:ea:31:9a:e3:18:d7:2b:d4:7e:5c:d3:1f:
                    ae:2d:61:25:3d:00:e1:cc:f2:d4:68:55:55:b3:87:
                    c5:4e:60:9b:80:05:17:c6:40:3d:e6:d7:64:f2:5c:
                    93:a2:a3:85:be:09:e4:61:6a:0a:9d:d5:df:2d:70:
                    3d:a7:45:a6:7e:4d:23:f4:1f:5b:df:da:93:0f:9e:
                    8a:ab:83:78:4a:92:89:26:2d:10:9b:1e:1e:8e:00:
                    ca:79:ca:60:77:0f:97:dc:5a:9c:98:a2:e3:55:91:
                    07:7d:25:9d:e0:62:59:fe:98:60:14:28:73:db:85:
                    23:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C6:91:7E:C4:42:44:79:AE:8F:6F:CB:8F:0C:87:44:41:ED:B3:A5
            X509v3 Authority Key Identifier:
                keyid:E2:A3:A6:8E:8F:A2:86:5D:2E:54:7D:8C:B2:43:0F:AB:21:FC:A0:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4qOmjo-ihl0uVH2MskMPqyH8oG0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362A2E1/01C4AD5EF61711EC819754AAF1222468/4qOmjo-ihl0uVH2MskMPqyH8oG0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:9f:1c:71:1f:a3:ef:a3:a3:9c:c7:1e:4d:4b:af:08:f2:8a:
         2d:36:c6:3d:9b:b2:09:58:f1:7b:0f:de:55:73:a9:0d:7c:22:
         b7:b7:9d:c2:e4:61:53:e2:bb:e2:23:61:f5:fb:62:0a:87:18:
         38:e5:ea:01:89:4f:54:4b:8a:d7:ae:50:01:f6:8c:71:6c:d2:
         3e:3a:42:bb:f7:25:0d:00:ce:d1:dc:8f:eb:02:cd:b1:25:58:
         9a:37:14:52:2f:96:8a:a3:b6:dd:ed:1c:53:bd:2a:70:e4:54:
         f7:a1:85:a8:3e:4c:f0:bd:70:2f:44:46:6b:6d:8b:9b:bd:9d:
         68:27:94:a0:1b:9b:99:07:23:05:a3:7d:0a:07:d8:cd:fa:b6:
         6a:a7:e6:cb:47:11:51:87:73:28:be:ac:3d:37:84:ce:bc:3c:
         78:52:11:3e:ca:9f:32:10:b5:f5:c8:1f:88:b3:52:d7:85:be:
         05:32:79:a1:fd:62:5d:48:73:32:51:0c:94:bf:7e:75:30:bb:
         a8:ea:31:70:e3:87:eb:e5:37:d9:94:ee:3b:e7:fa:27:c0:3f:
         96:2d:51:be:08:07:73:e6:0a:7e:cd:a5:0f:4d:41:54:ff:97:
         aa:98:2a:44:00:de:50:13:e6:e8:cc:16:8e:e1:ef:9d:63:6f:
         6e:db:3b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:02:26 2025 by rpki-client on console.sobornost.net