Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
File:                     5_z-A6OF76F0KyB_rsnT3GwDl50.mft (raw, json)
Hash identifier:          zzU69Jv723SNvT6V7/KRUld2UUoom5TMJ+z4PBe41iQ=
Subject key identifier:   EA:65:75:13:AE:3F:D4:F7:C1:30:42:CC:3E:DC:DC:9B:DB:3D:D2:C5
Authority key identifier: E7:FC:FE:03:A3:85:EF:A1:74:2B:20:7F:AE:C9:D3:DC:6C:03:97:9D
Certificate issuer:       /CN=F3646DCFAF/serialNumber=E7FCFE03A385EFA1742B207FAEC9D3DC6C03979D
Certificate serial:       0DDA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
Manifest number:          0DD8
Signing time:             Fri 25 Apr 2025 00:58:46 +0000
Manifest this update:     Fri 25 Apr 2025 00:58:45 +0000
Manifest next update:     Sun 27 Apr 2025 00:58:45 +0000
Files and hashes:         1: 5_z-A6OF76F0KyB_rsnT3GwDl50.crl (hash: uaiU7wfQks/4wUZxKmkghIbQ0ND98b0YT6j2AlFbdfc=)
                          2: 97EFF9FE41C911E6974C3715F8AEA228.roa (hash: PV1x2NuqP503+6sU0r3JzrSccMtiDFB0mgrEAngyzh8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3546 (0xdda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646DCFAF, serialNumber=E7FCFE03A385EFA1742B207FAEC9D3DC6C03979D
        Validity
            Not Before: Apr 25 00:58:45 2025 GMT
            Not After : Apr 27 00:58:45 2025 GMT
        Subject: CN=680ade45-0899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:68:b4:d6:eb:f9:38:95:54:38:ee:48:d9:f0:
                    b1:c2:ab:e1:c0:50:f0:b2:f2:55:56:5f:8d:11:76:
                    f7:2e:26:5e:ed:38:27:69:30:60:21:ff:15:17:54:
                    1d:ce:42:c4:20:60:9e:bc:6a:8c:44:39:4c:01:09:
                    3c:d3:86:b1:09:c9:6e:04:9b:7a:ae:ed:e1:a4:47:
                    24:79:75:7c:37:f1:2e:82:5a:77:52:a2:95:a9:76:
                    3a:77:ee:41:42:62:de:6a:46:c4:fd:fc:33:b9:c1:
                    9b:ab:fe:1f:fd:8e:94:01:61:9b:8f:79:2c:4c:6e:
                    9c:ca:ae:63:ee:a1:48:7f:ae:5f:21:66:1b:75:88:
                    f5:27:b9:e1:e9:40:03:f1:e7:09:7a:5e:27:c8:88:
                    08:e3:35:a3:45:49:93:5b:bd:f6:68:75:cb:b9:1b:
                    7d:cc:15:00:54:9d:49:50:df:08:83:c7:24:4a:c3:
                    f1:3f:19:a9:b0:bb:ad:f3:c1:b2:a4:68:92:bb:7e:
                    12:e8:ad:f5:f7:57:00:b6:1a:ae:fe:ac:ca:8e:5d:
                    95:88:23:60:a0:de:d6:03:c9:52:4f:0f:5d:78:c7:
                    6a:d5:43:be:b7:83:4f:ed:cc:67:7e:7c:34:a8:df:
                    6f:72:7c:4c:30:aa:a0:03:d9:09:69:bf:d5:7c:8e:
                    0c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:65:75:13:AE:3F:D4:F7:C1:30:42:CC:3E:DC:DC:9B:DB:3D:D2:C5
            X509v3 Authority Key Identifier:
                keyid:E7:FC:FE:03:A3:85:EF:A1:74:2B:20:7F:AE:C9:D3:DC:6C:03:97:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f0:44:38:99:03:18:ab:ea:c1:98:c2:31:59:2a:8c:30:cd:
         db:3f:2c:09:ba:9c:ad:4c:0d:59:44:53:36:0f:5e:ab:d6:bc:
         99:3b:68:51:d9:ae:62:e2:75:c4:0f:2d:a4:dd:ed:2c:84:7a:
         30:06:53:a7:78:09:88:15:a5:34:74:b7:97:06:28:80:64:03:
         81:39:ac:8b:ad:37:3f:d5:ce:c7:d4:25:87:cb:44:c8:a4:21:
         83:95:4c:30:f6:34:01:24:dc:33:c6:ac:f9:ad:12:db:ad:d7:
         25:e4:2d:88:cb:85:cc:dc:25:0c:04:c4:5e:b7:98:be:62:03:
         d6:a2:eb:4d:6a:c7:59:0e:ae:1d:7e:88:e0:99:b6:a5:3a:f8:
         49:58:18:6a:25:51:a9:81:de:04:b3:58:3c:11:c8:df:f0:36:
         df:a3:ba:09:9c:ab:01:52:ab:60:97:06:27:08:62:77:72:a3:
         b8:dc:88:f0:60:e8:50:7b:b0:90:8e:dd:a3:0b:b3:d1:5d:96:
         c7:88:3c:e6:9f:5e:dd:cb:48:15:d8:01:26:22:d6:7c:2b:26:
         98:05:f5:5e:3e:b1:ca:4d:17:9f:c8:58:d0:e1:13:9d:91:09:
         16:1f:25:cd:a7:2d:43:9f:5d:3f:28:2a:c8:72:f4:01:f4:e7:
         21:49:da:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:08 2025 by rpki-client on console.sobornost.net