Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
File:                     DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft (raw, json)
Hash identifier:          CVIhmtIkfRA/D5F/mxhQRk5KM04/2kCQv9OqvjDmUP8=
Subject key identifier:   6A:DA:8B:92:35:E0:79:0B:D5:B1:88:86:63:1F:5A:54:BF:99:59:43
Authority key identifier: 0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9
Certificate issuer:       /CN=F3639A71AR/serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
Certificate serial:       01EA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
Manifest number:          01E9
Signing time:             Fri 25 Apr 2025 04:14:23 +0000
Manifest this update:     Fri 25 Apr 2025 04:14:22 +0000
Manifest next update:     Sun 27 Apr 2025 04:14:22 +0000
Files and hashes:         1: DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl (hash: JDx7ANdIZheWqmVx34f7AjkNkvY10Gyv02ySIyi/CHk=)
                          2: CE2F2690AD5311EE8E27B3B1775412E6.roa (hash: 8IJ5uu88BzDrvRLts60KNKjSTABo8XS/43EbjaMJPDo=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                          rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 490 (0x1ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AR, serialNumber=0CDE0B7E678FFEA9E3AE0579FEE18477612E4FE9
        Validity
            Not Before: Apr 25 04:14:22 2025 GMT
            Not After : Apr 27 04:14:22 2025 GMT
        Subject: CN=680b0c1f-e7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:17:06:51:37:01:66:a6:46:e9:11:8b:71:69:
                    6c:e8:57:5b:fc:42:8d:1f:8a:19:72:25:66:c7:cf:
                    3d:8e:7a:e5:29:28:4e:ab:6b:e1:8c:50:f7:2a:45:
                    b7:f1:c6:2e:b8:71:36:b2:7a:0b:59:5d:3f:46:da:
                    ee:f7:94:11:53:9f:88:0c:30:41:04:42:64:72:7c:
                    62:4d:4a:32:b7:90:f9:b0:fc:e7:18:2d:80:64:6a:
                    42:fc:91:80:ba:41:a2:da:3d:1d:ca:07:d9:11:c7:
                    5d:65:66:36:e0:60:4b:12:47:e9:11:95:67:8e:e0:
                    99:f2:66:c7:ea:4e:85:e5:fc:84:a0:bc:c1:09:59:
                    29:3c:c1:14:1e:87:77:67:20:d4:e9:d9:fb:6b:a5:
                    57:9c:e8:77:f2:5c:72:b3:d7:40:89:8d:bf:9b:78:
                    2e:6b:b7:04:fd:b8:b2:e5:6b:59:cd:8d:c3:d7:d1:
                    28:e1:c0:b5:11:a7:00:a4:0a:85:02:b4:67:a9:2d:
                    cd:9b:01:48:9d:54:a9:31:dc:20:39:02:39:72:36:
                    06:fc:9b:1f:75:29:ba:8c:a8:98:c0:39:51:e7:db:
                    3c:fd:49:b5:1b:a2:d8:47:20:c7:bb:bc:6b:5b:dc:
                    85:b3:4f:60:cc:46:aa:9d:72:fd:91:08:61:53:4f:
                    c5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DA:8B:92:35:E0:79:0B:D5:B1:88:86:63:1F:5A:54:BF:99:59:43
            X509v3 Authority Key Identifier:
                keyid:0C:DE:0B:7E:67:8F:FE:A9:E3:AE:05:79:FE:E1:84:77:61:2E:4F:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DN4LfmeP_qnjrgV5_uGEd2EuT-k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/311E502AAD5211EE82F093AE775412E6/DN4LfmeP_qnjrgV5_uGEd2EuT-k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ec:28:71:40:13:b4:46:90:6c:29:14:43:c0:1f:71:cc:6b:
         eb:0c:f8:d6:d3:56:44:e9:2a:f1:4e:a1:a2:44:0b:e8:0d:ae:
         2a:ed:58:34:d1:f2:65:f3:25:86:a7:7f:c6:6e:91:4d:f7:d9:
         df:47:63:8a:30:70:14:c9:42:2d:f5:4f:d0:66:a7:47:ec:a1:
         af:2e:43:6e:a0:8b:3c:44:c3:44:1b:83:4c:62:88:11:8d:9c:
         4f:8b:be:03:61:85:0e:75:5e:ca:d9:38:c5:5f:8f:b1:66:e0:
         30:9c:b5:be:69:f5:ea:bc:86:4b:3c:d6:5f:e4:9c:50:4f:ef:
         86:25:ca:07:3a:e8:56:51:99:0d:df:c1:7f:0d:91:f4:4c:bf:
         b4:90:24:33:fe:c5:a1:44:dd:47:0a:df:68:06:c5:45:2c:9b:
         33:d8:20:26:fb:b7:d6:af:46:0c:36:82:6e:8e:37:0a:83:8e:
         a5:c7:c9:61:50:23:a7:49:d5:36:5f:83:66:d2:69:ff:d1:08:
         43:fc:9b:ce:24:33:b4:11:3c:67:d4:ff:39:82:b1:28:56:aa:
         10:88:ce:39:d2:b4:b4:2c:db:0e:3a:bc:a2:57:68:3c:87:4f:
         2a:e2:d0:40:31:b5:ce:b8:4b:55:c0:be:98:20:85:a5:31:e1:
         37:26:7f:aa
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAeowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzlBNzFBUjExMC8GA1UEBRMoMENERTBCN0U2NzhGRkVBOUUzQUUwNTc5RkVFMTg0
Nzc2MTJFNEZFOTAeFw0yNTA0MjUwNDE0MjJaFw0yNTA0MjcwNDE0MjJaMBgxFjAU
BgNVBAMTDTY4MGIwYzFmLWU3ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDmFwZRNwFmpkbpEYtxaWzoV1v8Qo0fihlyJWbHzz2OeuUpKE6ra+GMUPcq
Rbfxxi64cTayegtZXT9G2u73lBFTn4gMMEEEQmRyfGJNSjK3kPmw/OcYLYBkakL8
kYC6QaLaPR3KB9kRx11lZjbgYEsSR+kRlWeO4JnyZsfqToXl/ISgvMEJWSk8wRQe
h3dnINTp2ftrpVec6HfyXHKz10CJjb+beC5rtwT9uLLla1nNjcPX0SjhwLURpwCk
CoUCtGepLc2bAUidVKkx3CA5AjlyNgb8mx91KbqMqJjAOVHn2zz9SbUbothHIMe7
vGtb3IWzT2DMRqqdcv2RCGFTT8W7AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUatqL
kjXgeQvVsYiGYx9aVL+ZWUMwHwYDVR0jBBgwFoAUDN4LfmeP/qnjrgV5/uGEd2Eu
T+kwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM5QTcxLzMxMUU1MDJBQUQ1MjExRUU4MkYwOTNBRTc3NTQxMkU2L0RONExm
bWVQX3FuanJnVjVfdUdFZDJFdVQtay5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0RONExmbWVQX3FuanJnVjVfdUdFZDJFdVQtay5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MzlBNzEvMzExRTUwMkFBRDUyMTFFRTgyRjA5M0FFNzc1NDEy
RTYvRE40TGZtZVBfcW5qcmdWNV91R0VkMkV1VC1rLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCa7ChxQBO0RpBsKRRDwB9xzGvrDPjW01ZE
6SrxTqGiRAvoDa4q7Vg00fJl8yWGp3/GbpFN99nfR2OKMHAUyUIt9U/QZqdH7KGv
LkNuoIs8RMNEG4NMYogRjZxPi74DYYUOdV7K2TjFX4+xZuAwnLW+afXqvIZLPNZf
5JxQT++GJcoHOuhWUZkN38F/DZH0TL+0kCQz/sWhRN1HCt9oBsVFLJsz2CAm+7fW
r0YMNoJujjcKg46lx8lhUCOnSdU2X4Nm0mn/0QhD/JvOJDO0ETxn1P85grEoVqoQ
iM450rS0LNsOOryiV2g8h08q4tBAMbXOuEtVwL6YIIWlMeE3Jn+q
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:07 2025 by rpki-client on console.sobornost.net