Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft
File:                     bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft (raw, json)
Hash identifier:          lHmBKx6p6sFceZ22iZQpHoiykq4dSxTRgK8UQlOgH14=
Subject key identifier:   20:38:8A:BF:F5:D1:D0:7C:B4:A9:72:DD:C2:2B:4A:8E:D3:13:19:BB
Authority key identifier: 6E:A9:80:13:EE:10:BF:B5:3A:30:27:3B:6C:4C:FB:5E:CE:74:61:8B
Certificate issuer:       /CN=F36432B6AR/serialNumber=6EA98013EE10BFB53A30273B6C4CFB5ECE74618B
Certificate serial:       0334
Authority info access:    rsync://rpki.afrinic.net/repository/arin/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft
Manifest number:          0334
Signing time:             Sun 27 Apr 2025 03:31:42 +0000
Manifest this update:     Sun 27 Apr 2025 03:31:41 +0000
Manifest next update:     Tue 29 Apr 2025 03:31:41 +0000
Files and hashes:         1: bqmAE-4Qv7U6MCc7bEz7Xs50YYs.crl (hash: DRN7Eq6U/qQeKgGH8bQ1om9b/sHUkEO371nw2o9n0aA=)
                          2: A7241FC4B75911EDB11FDD91F1222468.roa (hash: h0BMJM2WpbjnNI4EegiMeFnSwDTlXkWV4KVnFiOoo78=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft
                          rsync://rpki.afrinic.net/repository/arin/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 820 (0x334)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36432B6AR, serialNumber=6EA98013EE10BFB53A30273B6C4CFB5ECE74618B
        Validity
            Not Before: Apr 27 03:31:41 2025 GMT
            Not After : Apr 29 03:31:41 2025 GMT
        Subject: CN=680da51e-91d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ea:52:00:d8:91:c4:e4:d9:c5:01:ca:40:33:
                    cd:96:d7:a1:56:f7:60:49:ef:6c:a9:44:96:fa:a0:
                    01:99:88:05:fc:64:08:84:92:0b:0e:08:4f:9e:1b:
                    e7:5b:de:9e:50:10:1e:54:b5:db:f7:61:c5:65:c7:
                    62:7e:2e:39:2b:51:8c:52:97:16:ec:3a:d7:b4:51:
                    d6:89:6a:3a:b9:35:c7:16:b0:ec:ad:18:54:04:0d:
                    f2:18:5e:6d:fe:ad:c7:63:a1:4d:bf:ce:d3:3f:5f:
                    09:50:2f:c4:dc:ab:ae:83:f7:28:9a:91:db:04:63:
                    82:91:68:7a:76:dd:5e:b2:38:8b:99:56:26:52:b7:
                    5c:98:37:9a:f6:03:4c:de:fc:c4:41:cb:9b:64:4f:
                    04:10:00:e8:ce:d2:98:64:9d:f7:21:54:28:6d:d9:
                    34:22:4b:ba:96:5f:14:4d:ca:79:76:ab:b0:55:72:
                    a7:b5:37:09:9a:b9:40:48:7e:32:66:ff:ef:f9:76:
                    54:2d:1b:6e:3b:c2:da:9e:1a:7d:ea:95:a7:92:29:
                    fe:a9:b3:7f:fc:31:a9:a7:83:ed:08:b8:3e:2c:a9:
                    a5:1a:2d:ba:db:8f:b7:a4:04:de:19:40:33:2f:d0:
                    97:23:26:c0:fe:84:d3:cc:34:9c:b3:c0:ac:9b:b0:
                    ec:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:38:8A:BF:F5:D1:D0:7C:B4:A9:72:DD:C2:2B:4A:8E:D3:13:19:BB
            X509v3 Authority Key Identifier:
                keyid:6E:A9:80:13:EE:10:BF:B5:3A:30:27:3B:6C:4C:FB:5E:CE:74:61:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/0E94184AB75911EDA15F2C90F1222468/bqmAE-4Qv7U6MCc7bEz7Xs50YYs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d1:cd:d0:45:3e:b3:7c:34:0a:ac:a7:0f:93:b1:6d:b9:b0:
         75:89:bf:81:25:7c:a8:83:0e:d4:25:4d:d7:1b:4f:23:96:7c:
         4f:af:cb:66:78:a7:60:f2:6e:6a:34:60:ea:a7:3f:a2:01:83:
         9c:34:62:44:f3:5a:91:0f:bd:7d:36:1e:a6:8f:d1:75:ce:c7:
         56:61:ca:04:a7:1b:47:51:c0:a4:48:bf:fb:f9:2b:eb:25:62:
         46:f1:ad:c6:6a:00:26:7b:5c:99:12:11:4d:3d:09:e3:e5:27:
         f9:0b:d9:bb:98:47:5c:2c:37:4c:1f:7c:25:54:fd:3b:41:95:
         56:95:e8:77:ad:45:78:92:63:f4:fc:84:e4:74:82:6a:e4:3f:
         69:57:a0:d5:b4:77:17:43:d9:f1:c0:b0:cd:d6:84:17:7b:9f:
         43:f1:b9:7d:bb:ca:fb:45:2b:f9:aa:2f:26:9e:49:8f:c4:15:
         bd:c2:84:71:23:11:18:43:58:e1:a8:b1:7e:d8:04:34:b1:1c:
         3e:82:ae:4b:9b:9a:ef:0e:83:eb:5f:28:ff:88:8d:23:fd:60:
         14:91:44:a3:19:cb:7e:1d:7d:03:82:53:b8:af:b9:4e:70:b7:
         e0:6b:c4:d0:1e:a2:4c:f5:5c:08:d2:79:31:70:02:6a:70:94:
         71:46:74:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:41 2025 by rpki-client on console.sobornost.net