Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
File:                     PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft (raw, json)
Hash identifier:          HX7+Wj57q8JRzhShjNZO45H0KNGxdusIUw/xEv0UWeg=
Subject key identifier:   5A:12:8E:04:B1:82:A6:8D:4E:8C:D2:7A:AD:37:FB:57:8F:E9:63:96
Authority key identifier: 3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE
Certificate issuer:       /CN=F3645590AF/serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
Certificate serial:       014C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
Manifest number:          014B
Signing time:             Sun 27 Apr 2025 04:35:24 +0000
Manifest this update:     Sun 27 Apr 2025 04:35:23 +0000
Manifest next update:     Tue 29 Apr 2025 04:35:23 +0000
Files and hashes:         1: PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl (hash: xTg30EMI4zNhKXzsYFVEe5AGJ3MAVoqVJecP1zRfqBQ=)
                          2: 098CB55C27F911EF9DB4BD167DDC24C2.roa (hash: MnuSnmQB8rdokjiI++mFKj9UCdOQLKSSBfHFFf46+p0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645590AF, serialNumber=3DD57418676B56AB9DE56FAA80C278879BD945CE
        Validity
            Not Before: Apr 27 04:35:23 2025 GMT
            Not After : Apr 29 04:35:23 2025 GMT
        Subject: CN=680db40c-4525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:12:a2:72:ea:af:2b:f5:15:93:9b:57:fd:99:
                    f4:11:92:0c:25:c6:b7:68:e2:b6:2a:15:fa:f9:12:
                    eb:31:d9:8c:34:ad:2a:3e:9c:bc:ef:89:49:e0:41:
                    a8:e1:7b:95:1d:43:85:b0:8e:7a:14:df:80:44:3d:
                    c6:8d:e7:58:77:d0:34:79:50:67:d4:98:b2:71:e1:
                    2e:3d:db:7f:6e:cc:7c:4e:73:b5:17:4d:0d:71:62:
                    fa:a0:a6:9a:50:59:1a:be:6f:9e:aa:2d:d5:9b:56:
                    da:5e:5f:9b:7f:70:2e:76:53:d9:d3:ad:83:51:61:
                    25:be:fa:a7:4d:e7:7b:6a:c5:59:9e:cc:6b:05:f5:
                    94:46:41:ec:44:e6:85:05:76:07:b4:5a:74:17:16:
                    77:12:31:cb:fa:9a:e6:bf:52:26:7d:65:3e:df:cd:
                    d0:c3:ce:7f:eb:9c:72:9d:08:ef:ca:68:6f:8d:9c:
                    d6:d8:15:4f:bf:e6:18:fc:97:48:e7:5c:18:6b:e8:
                    01:9e:b9:7f:43:29:1c:bb:89:8b:04:df:59:8e:40:
                    18:fb:7c:75:0f:e6:d9:e7:2e:5e:90:be:52:f0:4b:
                    d2:ba:b0:b4:f4:e0:b8:d5:63:4d:a6:72:39:2d:44:
                    fd:6f:69:c1:02:e3:f9:8d:19:7e:e6:82:56:ab:1a:
                    57:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:12:8E:04:B1:82:A6:8D:4E:8C:D2:7A:AD:37:FB:57:8F:E9:63:96
            X509v3 Authority Key Identifier:
                keyid:3D:D5:74:18:67:6B:56:AB:9D:E5:6F:AA:80:C2:78:87:9B:D9:45:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PdV0GGdrVqud5W-qgMJ4h5vZRc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645590/95C1A38A27F811EFA48126167DDC24C2/PdV0GGdrVqud5W-qgMJ4h5vZRc4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:02:97:4b:d2:45:38:bb:69:9b:95:77:d0:c5:0d:d0:58:e4:
         4e:0b:93:b0:a0:04:ab:7e:7c:f2:64:a6:ba:6b:13:2d:80:bc:
         10:8d:33:63:07:d4:1e:9d:ed:e9:d1:c8:94:a6:ce:a1:6a:4b:
         87:90:2e:14:75:6d:17:30:9f:03:93:87:f4:f7:a6:4f:bd:bd:
         33:5a:1f:7b:3e:eb:e4:b3:09:07:8e:8c:d3:da:ac:50:7b:e6:
         60:6f:16:16:5a:ff:80:4c:a9:dc:c9:e5:3d:fd:d5:de:3c:7c:
         5d:6a:f2:d6:2e:36:b3:64:4d:61:2e:06:f3:2c:87:42:9b:44:
         a0:f7:34:fe:3b:3b:87:82:7b:4a:1d:bf:20:69:a5:95:86:d9:
         e2:1b:5f:51:1c:c8:9b:9f:c1:34:9c:45:88:3e:bf:5f:d4:0f:
         57:7c:2d:64:03:d5:43:fa:7b:39:df:74:cc:9f:73:97:5f:21:
         5b:ca:00:84:f1:14:fd:e8:c4:a7:e1:dd:80:fd:a1:07:99:12:
         55:af:50:05:64:94:4e:8f:73:7b:38:bf:e0:45:b2:10:df:67:
         e8:8b:83:7c:3e:94:ca:8d:dc:37:f2:02:ce:5d:89:19:d4:18:
         88:cb:5b:d8:94:b1:b3:e5:ca:17:d8:6f:a8:5b:cd:24:9f:39:
         36:f3:d7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:37 2025 by rpki-client on console.sobornost.net