Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
File:                     IlhakHPb2Nx6VQRFf_nceJcpdE4.mft (raw, json)
Hash identifier:          jCdV+f/rkxTpHR++BgRWVnivbvFpbT/vvSyxotb7v/I=
Subject key identifier:   3E:59:1B:17:5A:12:1F:B2:39:23:78:39:62:11:45:77:7D:47:3C:EA
Authority key identifier: 22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E
Certificate issuer:       /CN=F363CC24AF/serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
Certificate serial:       0399
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
Manifest number:          0397
Signing time:             Fri 25 Apr 2025 03:18:41 +0000
Manifest this update:     Fri 25 Apr 2025 03:18:40 +0000
Manifest next update:     Sun 27 Apr 2025 03:18:40 +0000
Files and hashes:         1: IlhakHPb2Nx6VQRFf_nceJcpdE4.crl (hash: GJ7Gs+j6ci5+LqgE3SlKaLynoCLg0TfjryecIUUTyV4=)
                          2: 224FE6786CD311EDB88049ABF1222468.roa (hash: ngBqwzoWf1U22IRdw9sMrCAgllF9dt3JOK+klM8EtcI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921 (0x399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363CC24AF, serialNumber=22585A9073DBD8DC7A5504457FF9DC789729744E
        Validity
            Not Before: Apr 25 03:18:40 2025 GMT
            Not After : Apr 27 03:18:40 2025 GMT
        Subject: CN=680aff11-9948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:93:33:54:a9:27:00:bf:a3:2e:e5:c2:39:89:
                    3a:5e:db:a1:15:dd:4c:e7:4c:82:d5:11:13:39:6e:
                    ab:f9:e8:a5:f9:d5:8c:99:fb:b6:a2:ff:5e:70:f7:
                    31:54:fa:56:74:ed:4c:21:06:a6:30:4b:87:ac:70:
                    fb:92:95:da:7b:af:72:72:67:72:2f:1b:29:0a:9c:
                    f9:8f:2b:fe:a4:27:a6:97:89:89:42:a3:56:8c:bd:
                    d4:91:04:f6:ae:e5:a5:8f:95:bc:59:bb:c3:f4:47:
                    ac:e2:e4:0e:09:19:f7:9d:91:46:88:3f:3b:61:fd:
                    70:6a:d7:d0:60:07:bb:74:d6:53:6d:e6:da:d8:f2:
                    81:15:5b:4e:22:af:49:49:69:f1:e0:e5:76:e8:0f:
                    68:8e:bc:10:60:d2:40:b9:d4:08:d0:8d:4c:5b:d2:
                    63:4a:94:11:44:94:e8:ab:e8:f8:a9:fa:cb:19:30:
                    fa:e2:fc:3c:50:94:ff:00:25:ff:b8:80:e4:54:78:
                    ba:43:1a:61:77:b5:b4:ef:b4:39:ce:7b:56:bb:34:
                    ce:30:ef:3c:b1:8d:78:80:9f:72:f6:4d:0d:e5:6e:
                    b7:03:c6:c8:5e:d2:25:8a:6e:fc:fd:9d:e2:58:d8:
                    b7:24:5f:ad:cd:ef:3b:1f:06:2e:bd:01:b2:b2:b8:
                    cb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:59:1B:17:5A:12:1F:B2:39:23:78:39:62:11:45:77:7D:47:3C:EA
            X509v3 Authority Key Identifier:
                keyid:22:58:5A:90:73:DB:D8:DC:7A:55:04:45:7F:F9:DC:78:97:29:74:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IlhakHPb2Nx6VQRFf_nceJcpdE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363CC24/F12D22986CCF11ED858882A2F1222468/IlhakHPb2Nx6VQRFf_nceJcpdE4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:02:cb:4f:29:20:c1:9f:4d:29:6f:f6:c9:9f:62:be:ad:89:
         c4:50:43:9e:07:90:45:e7:b9:0a:50:d6:0c:dc:95:b2:9e:61:
         a0:c4:8b:0d:d9:3c:92:01:ca:11:3b:0d:e1:66:e3:be:e3:e7:
         3b:6e:af:b2:25:2d:09:79:14:28:3b:f2:82:2a:6c:b9:2e:73:
         a9:77:bc:f8:ef:42:aa:ea:76:17:10:aa:04:90:b9:8e:0a:f3:
         62:35:3a:56:ee:7f:11:54:cd:9c:43:57:56:b8:4f:b5:1e:98:
         57:22:25:06:98:c8:97:5f:a7:c6:a0:8e:21:c1:a9:f6:f6:20:
         10:2c:b4:36:ea:03:30:7d:6e:17:6e:09:ac:18:83:d9:ff:20:
         76:f9:8e:0a:1a:f0:1c:ba:63:73:db:1c:8d:1b:f1:f2:9d:83:
         a2:86:1a:93:33:11:0d:43:da:80:41:a8:d8:79:e7:ee:bd:74:
         c4:c1:07:1d:42:e7:40:31:50:97:6e:98:80:b1:da:34:e3:3e:
         5c:54:5b:30:a7:75:76:f5:a5:d5:83:94:1a:ec:8d:af:b1:a1:
         1c:4e:dd:1f:c3:b6:a1:75:a2:37:79:4e:00:21:2a:fd:9a:5d:
         11:e4:6c:32:5e:19:41:53:0d:9a:c5:36:4b:3f:bc:ea:17:0a:
         62:af:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:07 2025 by rpki-client on console.sobornost.net