Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.mft
File:                     iP6Ne9O33D1UQluMc20s7Dh_c3w.mft (raw, json)
Hash identifier:          801MGlozBHWtjwVO6XK1krIzEs0MyOjnmkmTWLIURa8=
Subject key identifier:   2B:66:BC:7A:FA:B5:F0:1E:21:5C:30:05:8D:5A:EA:FB:70:E8:9C:C6
Authority key identifier: 88:FE:8D:7B:D3:B7:DC:3D:54:42:5B:8C:73:6D:2C:EC:38:7F:73:7C
Certificate issuer:       /CN=F3644FCCAR/serialNumber=88FE8D7BD3B7DC3D54425B8C736D2CEC387F737C
Certificate serial:       045F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/iP6Ne9O33D1UQluMc20s7Dh_c3w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.mft
Manifest number:          045E
Signing time:             Sun 27 Apr 2025 02:54:19 +0000
Manifest this update:     Sun 27 Apr 2025 02:54:18 +0000
Manifest next update:     Tue 29 Apr 2025 02:54:18 +0000
Files and hashes:         1: iP6Ne9O33D1UQluMc20s7Dh_c3w.crl (hash: 44nand/N/iqr4iPIXymZa4VpKem84W3xQ6gxrK4zyv0=)
                          2: 33698F34D12B11ECA93204ECF1222468.roa (hash: hag20uRl3/i6kvsUjp3dDDisdoIlpZDsNJowq7IAf4U=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.mft
                          rsync://rpki.afrinic.net/repository/arin/iP6Ne9O33D1UQluMc20s7Dh_c3w.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1119 (0x45f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644FCCAR, serialNumber=88FE8D7BD3B7DC3D54425B8C736D2CEC387F737C
        Validity
            Not Before: Apr 27 02:54:18 2025 GMT
            Not After : Apr 29 02:54:18 2025 GMT
        Subject: CN=680d9c5a-9f0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:85:35:38:95:7a:05:4a:ac:ee:ad:0f:1e:ad:
                    3f:c0:e0:45:f5:c6:8d:c9:33:49:60:83:de:7a:38:
                    56:96:54:6c:b0:ed:2d:dd:6f:6b:ba:95:0e:39:9c:
                    02:12:52:c4:60:85:6b:6d:e9:5c:9a:34:41:da:72:
                    40:d1:e3:2d:fb:ae:95:6b:8e:b0:ab:93:df:b9:0a:
                    1b:92:39:66:49:4b:a7:c5:06:88:64:cb:d3:4b:82:
                    5e:7d:dc:b9:ae:c6:49:f7:47:f7:44:d8:cd:61:21:
                    3d:92:0b:98:2a:18:32:3d:0b:21:96:61:ba:45:02:
                    48:ff:f1:5c:2b:24:32:d7:a1:03:9d:62:99:9c:47:
                    21:e3:f2:2b:db:a2:d2:c1:12:1a:45:86:d4:43:13:
                    48:c9:c7:04:05:66:a6:cb:7d:dd:ed:96:d1:b0:01:
                    60:2a:4c:5d:04:5f:79:a2:7f:6d:7b:d4:74:d7:27:
                    d9:86:83:8a:94:6f:bd:94:ab:2d:35:4f:3f:d3:fd:
                    20:af:d7:66:2f:f5:89:9e:ec:a7:bc:e0:da:58:4c:
                    d0:1e:23:79:79:68:0b:77:80:51:18:f5:2e:1c:f0:
                    eb:50:1e:01:2d:97:22:10:8b:29:08:9b:75:fa:3f:
                    12:fc:25:cb:73:ae:bf:58:13:d4:8d:ab:fb:15:b5:
                    98:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:66:BC:7A:FA:B5:F0:1E:21:5C:30:05:8D:5A:EA:FB:70:E8:9C:C6
            X509v3 Authority Key Identifier:
                keyid:88:FE:8D:7B:D3:B7:DC:3D:54:42:5B:8C:73:6D:2C:EC:38:7F:73:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/iP6Ne9O33D1UQluMc20s7Dh_c3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/9E115C3CD12A11EC9A8943EAF1222468/iP6Ne9O33D1UQluMc20s7Dh_c3w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e3:d9:4d:da:e5:f1:43:b8:a5:7f:80:9e:a7:a9:5d:f5:2b:
         84:44:1f:be:cc:64:97:cf:10:bb:73:4e:41:d0:66:e6:a9:02:
         b2:c7:8b:de:36:07:fa:bd:72:84:77:eb:77:a9:0e:ff:0f:3d:
         21:63:a7:77:22:02:47:eb:e9:5f:a4:12:6d:f1:50:46:f9:75:
         24:28:2c:1e:d8:7c:cc:83:3c:bd:08:75:2d:2c:e4:db:d4:28:
         13:f9:12:86:46:d7:cc:1a:7a:fe:c4:17:ff:91:b8:ab:6e:33:
         78:91:66:fa:c8:3d:49:05:f2:23:e4:9e:c8:22:7a:de:fd:1b:
         f7:9c:40:98:b6:d6:e4:3a:74:ef:77:39:b6:87:03:d2:0e:38:
         1d:2d:5c:2e:d2:07:c9:41:0f:b5:39:58:c0:cb:87:4f:d7:04:
         6a:bb:46:ad:c0:5c:13:0e:3b:5f:f1:aa:e5:46:e6:b3:30:1a:
         59:ba:7a:c5:2d:d8:a6:c4:f9:5d:01:55:7c:92:95:3c:1a:3f:
         d2:fb:5d:3f:e5:0b:45:ba:6c:a2:18:d9:2b:79:75:10:67:58:
         f2:6a:9d:f3:1b:1d:6a:e5:3a:b8:12:f1:8e:1c:c8:dc:05:11:
         ad:dd:42:3c:c9:5b:73:aa:99:01:2e:95:83:f5:a3:8e:b5:77:
         18:df:ba:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:41 2025 by rpki-client on console.sobornost.net