Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
File:                     cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json)
Hash identifier:          2I9c10/2tfPD1MxbEHHRWhn0njYxUnj46ljK6q4vzSw=
Subject key identifier:   98:E8:E0:9F:43:38:8E:66:4C:12:C8:6C:0B:22:EC:86:F8:36:AF:4B
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Certificate issuer:       /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial:       05FF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
Manifest number:          05FC
Signing time:             Fri 25 Apr 2025 02:11:47 +0000
Manifest this update:     Fri 25 Apr 2025 02:11:47 +0000
Manifest next update:     Sun 27 Apr 2025 02:11:47 +0000
Files and hashes:         1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: OSTcrEVzZQ/Lf25agwIbOKXI/bS+jhCZnWp3s7p/ok4=)
                          2: 9C013D2EE05511ECBDACD89CF1222468.roa (hash: UGj7GRnwJOSfAQPFu2EMncmzBzkv3j77PzP+YrH85ms=)
                          3: 6FE5059AE05511EC8F6C299CF1222468.roa (hash: 3Y9hbnFs2RPSkmUCx7/XEKKtj3J0P6/CZTYRoO7RuTs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
        Validity
            Not Before: Apr 25 02:11:47 2025 GMT
            Not After : Apr 27 02:11:47 2025 GMT
        Subject: CN=680aef63-6f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:2c:46:d7:c4:5a:69:49:c1:32:13:02:e3:60:
                    0b:6a:22:69:bf:66:b7:ea:99:fc:74:17:cb:7a:ec:
                    f3:e1:71:37:49:47:a2:26:19:e1:38:5c:af:86:86:
                    59:46:96:e2:0d:d8:77:c8:d9:50:24:d7:5e:92:a7:
                    fb:f6:81:19:76:db:50:59:69:84:7d:19:10:c3:da:
                    52:73:83:12:c5:c8:dd:f9:8a:97:2c:8e:13:ca:55:
                    98:d7:ea:a0:99:61:4f:83:b7:13:19:b1:ad:1b:ee:
                    d2:ec:03:b3:35:3f:c5:ae:47:f9:80:94:cc:bd:32:
                    de:38:28:4e:19:53:5f:aa:ac:cd:f9:8f:03:47:6f:
                    fb:ac:93:c4:28:c2:9f:4b:8d:6f:0a:19:1b:24:74:
                    59:25:b3:48:38:60:00:72:f4:57:9f:73:b8:d2:91:
                    79:82:b8:b8:64:62:9f:d2:1d:89:fb:46:2c:a3:a0:
                    f5:05:77:c1:96:b8:4d:95:32:85:a4:b2:1e:8e:3f:
                    e3:65:62:78:0a:78:4b:38:b8:3c:f3:04:b4:7d:4b:
                    b4:38:19:e5:d0:b8:45:9c:f6:06:c7:7c:dc:bf:92:
                    f7:20:2c:78:4b:33:62:ad:b2:20:8c:ff:3c:57:1a:
                    d3:ac:e4:50:f1:6f:66:ee:36:82:98:d0:81:a4:1c:
                    a0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E8:E0:9F:43:38:8E:66:4C:12:C8:6C:0B:22:EC:86:F8:36:AF:4B
            X509v3 Authority Key Identifier:
                keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:83:f1:50:52:ad:ef:a7:a5:d0:ba:fc:e1:cc:98:9a:c5:85:
         f5:f0:f9:c4:39:a1:4f:21:1c:e5:39:e2:17:d2:6d:6b:e1:2a:
         ad:fe:fe:af:68:0a:60:14:66:39:51:a4:b5:92:b8:08:5e:3b:
         e3:91:44:83:39:25:3d:ca:d1:fb:dd:7d:88:87:b8:a8:67:0f:
         3b:8d:1e:e1:48:d7:e9:69:cf:73:53:f8:e0:8a:af:ce:a2:5f:
         10:ce:32:b8:34:75:f6:20:b3:7d:9f:72:8d:56:27:2b:0d:71:
         42:07:93:99:06:e0:4e:93:1c:e9:b1:eb:f2:20:55:81:25:b5:
         af:9c:ab:4e:15:ac:f1:7a:13:44:ab:ff:34:1a:4e:99:51:35:
         3f:90:f9:7f:6f:d7:f5:92:d6:45:78:05:a2:ad:ac:8a:3e:95:
         b3:de:9b:71:03:2c:64:67:e7:be:1a:eb:50:d6:3e:78:e9:65:
         2e:a3:ea:4f:a1:b8:63:f6:8d:26:38:8c:c6:c2:be:85:51:bc:
         3a:03:17:38:12:9b:7c:f7:fb:a7:31:c9:25:4a:d7:b4:86:8e:
         bc:b6:b5:b6:9d:96:ab:e5:e5:06:f3:8c:4f:75:d1:86:8c:4b:
         53:08:fa:be:ad:00:cd:b1:81:c6:6d:1f:f0:ae:d5:bc:6a:31:
         ea:0c:8a:33
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBf8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDREQUVBRjExMC8GA1UEBRMoNzA3QTFGMjg2QUUyOTg2REY2NDkxMEMzMDM0RTUx
ODlBN0MyMTZERDAeFw0yNTA0MjUwMjExNDdaFw0yNTA0MjcwMjExNDdaMBgxFjAU
BgNVBAMTDTY4MGFlZjYzLTZmNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDYLEbXxFppScEyEwLjYAtqImm/Zrfqmfx0F8t67PPhcTdJR6ImGeE4XK+G
hllGluIN2HfI2VAk116Sp/v2gRl221BZaYR9GRDD2lJzgxLFyN35ipcsjhPKVZjX
6qCZYU+DtxMZsa0b7tLsA7M1P8WuR/mAlMy9Mt44KE4ZU1+qrM35jwNHb/usk8Qo
wp9LjW8KGRskdFkls0g4YABy9Fefc7jSkXmCuLhkYp/SHYn7RiyjoPUFd8GWuE2V
MoWksh6OP+NlYngKeEs4uDzzBLR9S7Q4GeXQuEWc9gbHfNy/kvcgLHhLM2KtsiCM
/zxXGtOs5FDxb2buNoKY0IGkHKAJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUmOjg
n0M4jmZMEshsCyLshvg2r0swHwYDVR0jBBgwFoAUcHofKGrimG32SRDDA05RiafC
Ft0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ0REFFL0Y3MUU3NjU0OTcwNDExRUJCOTM2MzczMEY4QUVBMjI4L2NIb2ZL
R3JpbUczMlNSRERBMDVSaWFmQ0Z0MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2NIb2ZLR3JpbUczMlNSRERBMDVSaWFmQ0Z0MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDREQUUvRjcxRTc2NTQ5NzA0MTFFQkI5MzYzNzMwRjhB
RUEyMjgvY0hvZktHcmltRzMyU1JEREEwNVJpYWZDRnQwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCPg/FQUq3vp6XQuvzhzJiaxYX18PnE
OaFPIRzlOeIX0m1r4Sqt/v6vaApgFGY5UaS1krgIXjvjkUSDOSU9ytH73X2Ih7io
Zw87jR7hSNfpac9zU/jgiq/Ool8QzjK4NHX2ILN9n3KNVicrDXFCB5OZBuBOkxzp
sevyIFWBJbWvnKtOFazxehNEq/80Gk6ZUTU/kPl/b9f1ktZFeAWirayKPpWz3ptx
AyxkZ+e+GutQ1j546WUuo+pPobhj9o0mOIzGwr6FUbw6Axc4Ept89/unMcklSte0
ho68trW2nZar5eUG84xPddGGjEtTCPq+rQDNsYHGbR/wrtW8ajHqDIoz
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:08 2025 by rpki-client on console.sobornost.net