Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.mft
File:                     7fjY2rSy5miVSkC6Vt0hxkUoOdw.mft (raw, json)
Hash identifier:          Y+EvUuX75cdF0398ZqlukI2sBiLP20YeX7fKOMnOpjc=
Subject key identifier:   BA:86:42:7F:55:A9:60:31:61:62:AD:10:B5:EE:C3:3D:67:B6:C1:A1
Authority key identifier: ED:F8:D8:DA:B4:B2:E6:68:95:4A:40:BA:56:DD:21:C6:45:28:39:DC
Certificate issuer:       /CN=F362F418AF/serialNumber=EDF8D8DAB4B2E668954A40BA56DD21C6452839DC
Certificate serial:       0439
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7fjY2rSy5miVSkC6Vt0hxkUoOdw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.mft
Manifest number:          0437
Signing time:             Mon 28 Apr 2025 03:05:06 +0000
Manifest this update:     Mon 28 Apr 2025 03:05:05 +0000
Manifest next update:     Wed 30 Apr 2025 03:05:05 +0000
Files and hashes:         1: 7fjY2rSy5miVSkC6Vt0hxkUoOdw.crl (hash: /dcBW7P/CA2qLG308cIYH250qiwjeBEigP4clsqRKAk=)
                          2: E61ECE6CF16711ECAF9FC9C5F1222468.roa (hash: E5T3u9+Nvv+e6OXP5qapGJd3sqCIYjsS23WS1SQsOII=)
                          3: AD4F0ECEACB511EFB985BD9F762E951A.roa (hash: DI7zLorJEtbZmX73irNyF+UVmxm2nWxf49V0ohMUAg8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7fjY2rSy5miVSkC6Vt0hxkUoOdw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1081 (0x439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362F418AF, serialNumber=EDF8D8DAB4B2E668954A40BA56DD21C6452839DC
        Validity
            Not Before: Apr 28 03:05:05 2025 GMT
            Not After : Apr 30 03:05:05 2025 GMT
        Subject: CN=680ef062-e0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3a:62:33:b9:6f:d3:26:6f:50:d0:43:2b:13:
                    4f:57:e1:1e:84:05:00:6a:ce:44:4e:0a:80:47:24:
                    45:92:b2:5e:73:c7:f5:dc:87:4e:69:ae:da:b2:3a:
                    19:9b:73:c9:cc:bf:2c:a3:2f:72:08:69:1c:c9:c0:
                    47:9d:4a:5d:6d:d7:6e:69:59:2d:b4:cd:54:61:12:
                    17:b8:9a:ca:5c:68:10:f3:0b:06:85:45:a7:b3:16:
                    8c:8b:04:e9:c3:e3:6b:ad:62:ef:ef:b4:26:c6:79:
                    6c:36:ca:04:14:66:39:51:b8:40:82:b1:d3:72:25:
                    01:f5:1f:5f:bc:f6:b8:00:15:66:a9:7b:2d:4d:a7:
                    ee:76:39:da:76:fc:6f:a9:8a:87:4f:6d:7c:03:97:
                    fc:f1:a8:a2:4a:e1:38:2b:64:90:7e:b6:d7:99:aa:
                    83:51:d4:4e:3e:00:63:45:7c:25:76:b8:eb:45:2e:
                    6c:22:7e:a3:d1:6e:c7:c3:93:be:3f:e6:c3:99:c7:
                    45:c3:ab:e6:a4:1a:71:49:04:26:7e:eb:23:c4:5a:
                    04:3b:20:0f:da:27:ca:08:19:45:07:f2:85:29:09:
                    fe:0b:ef:48:4b:2e:48:a4:8b:a4:bd:dc:16:7a:3f:
                    ac:f6:a6:f5:05:fe:23:62:f9:4c:79:5c:d8:11:bd:
                    f9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:86:42:7F:55:A9:60:31:61:62:AD:10:B5:EE:C3:3D:67:B6:C1:A1
            X509v3 Authority Key Identifier:
                keyid:ED:F8:D8:DA:B4:B2:E6:68:95:4A:40:BA:56:DD:21:C6:45:28:39:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7fjY2rSy5miVSkC6Vt0hxkUoOdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:b4:be:79:c7:ec:2a:5d:9e:62:4b:b5:6e:4c:c5:a6:4c:39:
         bc:2c:23:f9:2f:84:16:85:57:5c:30:e7:bc:4d:1c:31:a8:7a:
         56:02:7a:40:70:dd:e7:88:6e:e8:28:aa:0d:85:90:7f:74:78:
         9f:0f:1f:1f:a9:75:da:45:e9:fd:06:b2:f9:e2:d0:07:75:13:
         5a:2a:72:3c:27:cd:be:6a:5f:ff:ff:4a:52:bd:30:a5:ed:9e:
         d2:fe:82:24:88:04:ab:55:c7:93:3f:63:f6:33:ec:3d:55:7b:
         2c:b6:55:4e:e5:32:5f:2f:de:ab:b1:9d:a9:b6:98:e1:22:50:
         4f:75:6c:7d:05:b8:2c:92:6e:20:a1:c6:c0:58:6d:e9:23:9e:
         7b:13:1d:79:a5:c3:6f:ca:1e:95:ca:23:6d:05:d2:a9:96:91:
         aa:80:c1:f0:70:a0:d5:4b:07:a8:58:d7:33:87:d2:b7:c6:1a:
         e1:d6:7c:55:23:dd:63:53:44:93:44:81:f5:04:07:2f:98:8c:
         9e:51:27:a7:3a:fa:0c:61:12:65:d0:a0:74:d7:50:68:0a:6f:
         e0:d5:d0:02:a4:00:6c:ef:34:0c:d4:89:a7:35:10:58:e4:87:
         24:6d:a4:15:54:ff:98:5a:2c:1d:bd:16:44:e4:e4:bf:5b:dc:
         9a:b0:ba:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:02:27 2025 by rpki-client on console.sobornost.net