Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
File:                     JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft (raw, json)
Hash identifier:          blg6ojo0dw7LWbRDGN6CznVSH0F6jK2+gr/U5rwwjOo=
Subject key identifier:   77:F8:C5:28:09:71:95:36:8D:E1:71:D2:F0:36:A2:33:AA:37:45:5A
Authority key identifier: 25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04
Certificate issuer:       /CN=F3646FFEAR/serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
Certificate serial:       0488
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
Manifest number:          0487
Signing time:             Mon 28 Apr 2025 02:56:13 +0000
Manifest this update:     Mon 28 Apr 2025 02:56:13 +0000
Manifest next update:     Wed 30 Apr 2025 02:56:12 +0000
Files and hashes:         1: JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl (hash: c5/372Le6cDPlEz1qW8DEzD5DtZdyGd3zGtkKec6z60=)
                          2: 5C5FD3B8B1B811ECBE7762D35A40D577.roa (hash: vGmD4pROB8VFUopnGf6To3GzFkP29HGjp5Gl6MpnPn0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                          rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1160 (0x488)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646FFEAR, serialNumber=253F1A68771510A6656D7D660F503D55B06B9004
        Validity
            Not Before: Apr 28 02:56:13 2025 GMT
            Not After : Apr 30 02:56:12 2025 GMT
        Subject: CN=680eee4d-0ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cb:0f:ef:72:0f:96:8e:cb:43:04:ff:fd:56:
                    0a:99:c9:2b:d5:21:4e:9b:6e:55:5f:c3:5d:6b:4e:
                    e1:8f:02:cf:a7:f0:d6:68:8d:58:32:43:2a:46:2a:
                    ca:71:ab:57:1f:82:9f:2b:4a:3d:36:4c:43:c9:68:
                    69:29:b1:7b:87:46:f1:a4:b1:d5:8a:ba:e6:a3:53:
                    9f:c3:a6:33:9a:8f:70:92:66:ae:3e:3b:29:af:b6:
                    e3:ed:63:aa:22:a5:a1:d1:f1:39:dc:36:ef:fa:39:
                    82:52:21:7d:86:54:19:22:46:ac:3d:aa:d2:53:2e:
                    9c:b4:f4:9d:dc:54:9a:e7:9d:54:2b:0f:2b:af:7c:
                    25:52:f9:91:d1:ff:4e:e0:48:18:a9:4e:fc:e3:58:
                    21:fc:30:d2:30:b6:8c:98:39:d0:da:ac:d3:c4:f4:
                    c8:20:27:36:06:66:99:20:a0:f7:2c:09:b9:dd:74:
                    63:c7:18:ad:d2:b9:3e:a4:0e:5c:72:f7:4f:63:ae:
                    99:cb:29:d0:2c:24:20:8e:e5:8c:aa:d3:84:e5:10:
                    a8:68:40:00:b0:e5:c7:f9:1e:aa:3f:57:00:93:32:
                    55:19:5b:f0:ee:51:cb:27:85:ed:97:4e:2f:ae:80:
                    da:f8:9a:32:76:96:a2:17:b3:c2:bf:b7:f0:77:a5:
                    d9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F8:C5:28:09:71:95:36:8D:E1:71:D2:F0:36:A2:33:AA:37:45:5A
            X509v3 Authority Key Identifier:
                keyid:25:3F:1A:68:77:15:10:A6:65:6D:7D:66:0F:50:3D:55:B0:6B:90:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/AF17C9DEB02911ECABDF2FC05A40D577/JT8aaHcVEKZlbX1mD1A9VbBrkAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:66:f3:ff:bc:9e:ab:ea:5c:8b:b9:73:3f:ea:32:a7:f5:3f:
         e7:8e:f6:0d:ff:12:3f:ac:af:ac:de:b2:25:70:b8:60:e8:4c:
         ab:f7:33:7d:b8:3d:f6:9a:2f:ee:83:da:e9:f3:cc:e6:c2:66:
         c8:ef:67:41:b7:33:7d:72:30:37:c1:99:a9:02:d1:af:69:3e:
         b4:1a:3b:f6:eb:20:63:17:35:8e:3b:b9:8c:1d:a0:26:bd:eb:
         ab:8f:4f:fa:4b:b6:c9:3a:04:29:24:50:65:8f:80:82:9f:cc:
         66:ac:ad:14:7c:4a:a8:bc:09:31:76:bc:57:aa:0a:de:aa:e1:
         4c:d1:d8:27:64:0f:74:18:26:99:9b:9f:20:d8:a0:7c:a4:64:
         4c:0e:01:36:f6:e0:ef:53:65:23:27:86:2a:2f:8e:a2:54:fa:
         78:f5:13:b1:a8:62:8a:0d:01:1b:ae:40:64:db:5d:1a:4a:72:
         07:72:70:3b:f4:3c:39:18:a4:32:79:2c:ce:16:8e:c6:0a:3d:
         81:53:5e:7c:f6:d3:e3:bf:3e:5b:37:60:d5:10:99:58:8d:26:
         e4:6d:54:fb:1b:7a:13:8a:58:46:34:0f:c2:d5:bf:1a:4a:b8:
         bd:3f:cb:e1:6d:b7:0c:15:c0:0e:6d:80:96:42:30:22:b0:b3:
         f3:9f:44:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:02:29 2025 by rpki-client on console.sobornost.net