Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
File:                     nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft (raw, json)
Hash identifier:          xmbujtBb3zoJWTHM6bdOWfToKqKrqyBEhNQVG22N47Y=
Subject key identifier:   23:08:28:B5:B4:9B:26:54:ED:66:AC:53:59:2C:38:00:DE:0B:38:69
Authority key identifier: 9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A
Certificate issuer:       /CN=F362FF17AF/serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
Certificate serial:       0680
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
Manifest number:          0679
Signing time:             Sat 26 Apr 2025 02:04:47 +0000
Manifest this update:     Sat 26 Apr 2025 02:04:46 +0000
Manifest next update:     Mon 28 Apr 2025 02:04:46 +0000
Files and hashes:         1: nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl (hash: rR8TKee+mDFN1AI6kaQ4CRUus31ZPW6xDU5Jqwm+NPo=)
                          2: 734F013479C511EFAE81627D762E951A.roa (hash: xdurMFAxJPU0CP+M6yamIm2npN94Z/AsDJKHCn0C3Ko=)
                          3: 2B48BC985C0C11EB9996AA30F8AEA228.roa (hash: q6nVowz9VuDpjWX/IbvfjqSfChWzoCDvGswNPS2gk/0=)
                          4: FE6D92CA5C0B11EB95157330F8AEA228.roa (hash: BYjhKLTeS3/YMIgCsGSrv774yAnK9WPRQzbv65YQDbs=)
                          5: A573C59E7F2111EFABEC8243762E951A.roa (hash: z2hxV4eIGWcs9mH3SGVDwRrbCV/vQwHP3UQvoUEczXo=)
                          6: 336BF2CA332411EBB561BF72F8AEA228.roa (hash: z0Vqh2yhGazkcY6WrmD+gGwdIRbocCnl8S5PFmlQhf8=)
                          7: 66D788525C0C11EB89D7F330F8AEA228.roa (hash: T1mAIRrcLYmyaqd64q3hHsdJGYOwe7vCQdctkyt3sqY=)
                          8: 4D1819725C0C11EBB458D830F8AEA228.roa (hash: Y5bEDudGZy2SxFSFnv47v/c/OeLSoqXcxTY9JA/Rm5g=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1664 (0x680)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FF17AF, serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
        Validity
            Not Before: Apr 26 02:04:46 2025 GMT
            Not After : Apr 28 02:04:46 2025 GMT
        Subject: CN=680c3f3f-fc22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:55:5b:ca:c4:97:2d:32:71:09:ff:b9:03:3f:
                    a0:74:07:30:eb:77:a9:76:68:7b:a8:ee:30:cc:4e:
                    3c:74:d7:ff:d1:4f:4f:36:9a:bf:a9:b6:e1:8a:67:
                    83:da:2e:f9:0e:ea:b8:34:02:04:b8:26:a0:60:b8:
                    88:9e:ba:77:0f:e6:ba:b5:2f:10:86:d9:76:c6:c7:
                    5e:97:90:e6:4b:a3:19:8e:57:c7:73:d4:5c:40:96:
                    a9:b1:81:38:06:35:45:da:01:60:b1:6b:f4:c8:36:
                    04:e5:da:11:78:6e:64:12:1e:5c:b7:85:17:32:91:
                    56:da:bb:47:11:59:29:4e:21:1d:33:d9:93:03:4a:
                    3c:a9:51:42:8b:83:b5:63:c7:8f:cb:d1:24:a4:b7:
                    c7:ee:61:c7:b1:5e:e1:9f:a9:4c:7d:3a:4f:98:ad:
                    b3:46:f4:b6:98:c6:a7:0a:8d:26:4e:65:67:5b:91:
                    f6:e1:b2:42:f8:9d:28:dc:40:c1:05:2f:65:db:08:
                    79:6f:0e:a9:fa:58:a6:42:f2:e2:23:dc:d4:8f:58:
                    87:ac:17:45:ec:a3:3e:9a:07:40:89:cd:1e:61:12:
                    ad:3f:0d:77:25:08:bd:ec:9b:d1:7c:fd:9e:67:f2:
                    39:de:94:16:83:f3:a7:22:0d:21:ca:0b:cb:41:af:
                    f0:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:08:28:B5:B4:9B:26:54:ED:66:AC:53:59:2C:38:00:DE:0B:38:69
            X509v3 Authority Key Identifier:
                keyid:9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6b:57:50:06:19:19:43:62:59:99:cf:67:9b:0a:02:ef:8a:
         71:d4:02:16:c4:fb:72:4a:ca:b4:31:77:b8:36:af:e8:78:a4:
         4a:6b:00:b0:b5:84:1b:f9:16:20:ad:ef:fe:a8:ad:06:99:8a:
         9c:70:63:8f:64:4b:36:c4:c0:96:86:f6:3f:fb:0c:a2:1a:01:
         a5:26:cc:ba:5e:dd:88:a3:38:47:86:7a:9f:ee:41:7a:d1:52:
         e9:60:80:e0:87:af:56:35:fe:ff:df:9d:be:e9:4f:9a:c1:59:
         ad:39:7f:32:56:7f:ae:ab:10:fa:dd:b0:a8:29:e4:71:d1:39:
         de:fe:a9:e4:01:10:5d:bb:b0:c6:1c:be:b9:37:66:32:ce:01:
         11:af:69:30:a6:20:bc:13:93:2f:fd:29:9d:48:5c:49:b1:87:
         fa:a1:d5:ff:37:d2:f5:51:09:d7:fc:b8:ad:e8:23:1b:02:b6:
         d9:a6:21:bc:3f:79:ae:81:ce:05:1d:e4:61:d9:01:d6:4f:c4:
         fb:1a:7d:e6:f4:db:39:7a:44:5e:fc:75:e5:4d:e3:c3:0a:ca:
         03:45:ac:94:37:76:1d:28:11:e0:b9:6e:b4:a8:81:96:f2:94:
         94:69:2f:88:2b:d6:8e:f6:cd:c4:fa:16:33:1e:9b:0b:94:38:
         12:62:1e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:17:08 2025 by rpki-client on console.sobornost.net