Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.mft
File:                     FD2ld3zbtJOIpS_1g9tDLLx-V3Q.mft (raw, json)
Hash identifier:          aJnYdPjGmVqpwf7QsNXwRRH8+n/ChThw0mac82h4Gr8=
Subject key identifier:   24:16:E6:7A:57:6A:4D:AF:1D:3E:4D:7E:0E:E7:70:8F:3B:24:7C:82
Authority key identifier: 14:3D:A5:77:7C:DB:B4:93:88:A5:2F:F5:83:DB:43:2C:BC:7E:57:74
Certificate issuer:       /CN=F363520FAF/serialNumber=143DA5777CDBB49388A52FF583DB432CBC7E5774
Certificate serial:       0764
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.mft
Manifest number:          075D
Signing time:             Fri 25 Apr 2025 01:51:55 +0000
Manifest this update:     Fri 25 Apr 2025 01:51:54 +0000
Manifest next update:     Sun 27 Apr 2025 01:51:54 +0000
Files and hashes:         1: FD2ld3zbtJOIpS_1g9tDLLx-V3Q.crl (hash: W6bqVV7PNyRqLWG2LiC9q9B2/uh4PNEVzs2mcx/mm34=)
                          2: 249CD382140D11EE868E42524AD9E6FC.roa (hash: pLeWyDQQG66mBfzBCV4NqYZGVmCUxOkLYDGiiLx81pE=)
                          3: 7FB480F0C11611EA9148887CF8AEA228.roa (hash: 5ZlgXewjog92EgRnSMXmEWUwKeVX8x5AW5ZJ6pK1M30=)
                          4: 014498BCC1E411EA9ED11251F8AEA228.roa (hash: 1KtzkM8srddYYVR4B+QcCzCCqBhSF3EZTmJ3bui3wp0=)
                          5: 7C44F4DC848911EA90931282F8AEA228.roa (hash: QfoaU5Ky8RVqOkIQ17yEvkYjKQ50BS0NCNYxaP7M7Pg=)
                          6: B85FC3687D5D11EEB4C311814AD9E6FC.roa (hash: 5yuIcs7jRjs+HeduYgckENnTsGnOb85j9GULa/Na804=)
                          7: 6AEA99D47CC511EE8B44A7164AD9E6FC.roa (hash: QAkpATJppthLYWXx+cr4dWVCGXB9+D2mQkkDomA2C7I=)
                          8: 9D74ABF8E3B411EB8644363EF8AEA228.roa (hash: yGHt2trHB8HftCl12rKq5k44+W23yyPL0VhFiATfY40=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1892 (0x764)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363520FAF, serialNumber=143DA5777CDBB49388A52FF583DB432CBC7E5774
        Validity
            Not Before: Apr 25 01:51:54 2025 GMT
            Not After : Apr 27 01:51:54 2025 GMT
        Subject: CN=680aeabb-fa3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:47:99:3f:9c:30:34:cf:53:39:b8:2e:60:63:
                    cd:d3:31:e6:20:8b:a3:69:48:a0:70:ce:60:0f:58:
                    e9:77:81:19:9a:0e:dd:c3:cb:af:4a:e2:c1:8b:93:
                    8e:00:37:3e:96:f4:78:73:5f:6b:90:f0:dc:81:4b:
                    b0:05:ae:c1:fe:fe:0f:f7:0d:c9:f0:b3:f0:f4:d2:
                    36:5a:29:26:1d:7e:d6:3c:75:8a:ef:9e:e3:e7:18:
                    6f:df:0e:3f:95:54:c2:f8:d7:02:93:ed:5b:f3:40:
                    ae:f2:11:4f:4a:12:a0:64:3b:e1:32:43:e2:b4:b6:
                    46:6f:56:41:d6:de:98:a1:4d:89:0b:89:f6:f0:ef:
                    71:c8:a7:fc:69:f6:3e:76:0d:3b:f5:e6:1e:40:ea:
                    dc:07:d0:51:a7:91:d5:5f:07:8c:35:61:d8:a7:e3:
                    8a:bf:f7:a2:fc:6c:f3:1c:b8:1b:38:e6:fc:89:a7:
                    c3:c2:b5:91:89:47:b7:93:25:be:3c:70:b6:6d:a0:
                    d9:03:fe:dc:58:2d:56:c8:09:7e:32:f4:ed:1a:c7:
                    16:be:08:d0:17:71:fa:bc:d8:91:ce:5d:48:c8:6b:
                    64:aa:f2:94:7d:db:7e:5b:0b:b0:1e:21:32:29:0d:
                    cb:86:f4:e8:e8:4e:d4:e8:36:bc:25:20:2a:92:8e:
                    7a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:16:E6:7A:57:6A:4D:AF:1D:3E:4D:7E:0E:E7:70:8F:3B:24:7C:82
            X509v3 Authority Key Identifier:
                keyid:14:3D:A5:77:7C:DB:B4:93:88:A5:2F:F5:83:DB:43:2C:BC:7E:57:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363520F/0C22B38E848811EA853C8C80F8AEA228/FD2ld3zbtJOIpS_1g9tDLLx-V3Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:1b:f6:39:f1:17:d3:5f:3a:d3:d2:01:c4:be:ee:d6:9f:13:
         4b:9c:3a:c1:28:87:7c:7a:1f:2f:33:4f:de:8e:9a:8a:fe:e5:
         26:c3:35:c3:c9:5b:a9:ac:ed:2e:d3:ae:43:85:c0:88:18:2e:
         14:f1:f6:80:d8:37:43:7c:22:7a:1f:34:1c:10:d8:e8:12:fd:
         66:00:33:8b:a1:1c:cf:1c:f2:d3:07:b3:69:19:49:d8:db:ef:
         11:17:31:f8:54:fa:ad:c1:b3:1e:4b:4b:df:4f:8e:9d:ed:56:
         12:48:94:f9:64:5f:25:ba:b0:45:25:87:c0:ab:ef:f0:4d:d2:
         63:e6:f7:97:e3:b1:f2:c9:b2:20:90:09:8e:af:4b:23:23:b0:
         08:5f:a2:8e:97:f1:9f:75:9f:b7:8e:a9:49:1c:73:1e:e6:6c:
         e0:fb:18:61:42:ec:6b:5d:39:1e:ff:bc:43:0a:27:2e:35:31:
         5a:d8:38:62:18:47:c0:a6:f7:bc:36:2d:46:17:92:df:42:a5:
         96:d9:e2:6f:7f:25:87:02:b0:08:39:d6:fd:33:e8:06:85:c4:
         a6:10:8d:f1:f4:10:45:0d:4e:5a:fa:df:78:cf:1e:93:48:e6:
         40:94:46:85:5c:0e:37:a0:76:ad:8d:bc:af:84:90:77:a3:2b:
         a2:75:ff:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:07 2025 by rpki-client on console.sobornost.net