Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
File:                     0ffADvPrBuiBfP3B25YGBAfknA0.mft (raw, json)
Hash identifier:          vEvMby8Ybjr73Ehjm4Kk2uaOlLu7OpCGhtrwsQq+bM4=
Subject key identifier:   CA:E9:6C:93:70:35:88:42:D2:79:C2:BF:21:DF:CC:85:5E:B3:D2:74
Authority key identifier: D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D
Certificate issuer:       /CN=F364789CAF/serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D
Certificate serial:       0770
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
Manifest number:          075F
Signing time:             Fri 25 Apr 2025 01:53:28 +0000
Manifest this update:     Fri 25 Apr 2025 01:53:27 +0000
Manifest next update:     Sun 27 Apr 2025 01:53:27 +0000
Files and hashes:         1: 0ffADvPrBuiBfP3B25YGBAfknA0.crl (hash: gnla/sT9qtGGzq0h1f2/A7NMijc8346iWP8xzKa5spM=)
                          2: 54D73B32D5AA11EE804D6FA3775412E6.roa (hash: oub8O6ESl+q+fLwREHJore+8A+bbiWh69N6JO+Ek91U=)
                          3: AE414C1EFDCA11EFB623BE90762E951A.roa (hash: Y5HeKaAGek99xysljagPwhZ+CgojdV1z+NsdhuzC9jQ=)
                          4: B77376ACD5AA11EEB33131A4775412E6.roa (hash: zxfvPEymIGP+/7cg1EGEyQR/t5Gie6/ZfCLSy+jKY0I=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1904 (0x770)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364789CAF, serialNumber=D1F7C00EF3EB06E8817CFDC1DB96060407E49C0D
        Validity
            Not Before: Apr 25 01:53:27 2025 GMT
            Not After : Apr 27 01:53:27 2025 GMT
        Subject: CN=680aeb18-0169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:63:b7:18:d5:34:a2:34:aa:de:52:13:c6:b6:
                    7f:e6:48:18:72:96:ce:af:ae:59:b8:45:2d:b2:84:
                    38:32:81:7f:05:40:d1:da:83:e7:d1:04:d5:12:ec:
                    2f:0d:0c:9e:8f:05:11:88:43:8a:e3:9b:fa:31:97:
                    e3:c0:bb:de:a4:b1:9b:2f:b2:ee:0e:2f:f0:77:01:
                    a4:37:65:49:dd:44:91:1a:09:e6:27:e9:f6:f1:ec:
                    dc:2b:38:a2:69:8d:c0:27:02:13:e5:71:11:88:bd:
                    48:7e:78:e6:fe:bb:4d:f6:d2:f1:ef:6e:df:cc:36:
                    00:7f:21:b3:58:d8:ff:54:bf:71:77:56:7b:37:69:
                    57:7c:01:20:95:40:87:0b:26:e7:2a:73:8d:3a:e3:
                    79:38:6e:90:90:ab:06:8c:39:43:e1:c1:e7:e3:18:
                    d0:11:72:60:cb:61:d6:9b:15:ee:7e:1c:73:98:96:
                    86:41:9f:76:6b:64:ae:7d:54:60:91:b2:03:35:ad:
                    6c:34:8a:5e:c1:e6:bd:85:92:b9:a8:0d:8e:85:eb:
                    f6:9c:85:be:78:76:d6:a1:9a:ae:c8:6d:1e:06:b7:
                    ff:b9:75:04:22:ed:c7:18:0d:4b:ca:6f:55:bf:fb:
                    19:41:35:78:eb:72:3b:59:84:fb:cf:21:3e:55:2f:
                    c5:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E9:6C:93:70:35:88:42:D2:79:C2:BF:21:DF:CC:85:5E:B3:D2:74
            X509v3 Authority Key Identifier:
                keyid:D1:F7:C0:0E:F3:EB:06:E8:81:7C:FD:C1:DB:96:06:04:07:E4:9C:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0ffADvPrBuiBfP3B25YGBAfknA0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364789C/72EFAF4C910111EABD3F2473F8AEA228/0ffADvPrBuiBfP3B25YGBAfknA0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:fd:3e:93:8c:b2:f9:59:bc:3f:46:2d:f4:cd:7a:b9:5c:37:
         b5:e6:99:54:ad:88:70:72:00:8d:a4:64:88:dd:16:f8:46:d5:
         c6:fd:24:54:0b:d5:47:63:92:26:64:3e:e9:fc:0d:a5:87:ff:
         d2:75:ea:13:33:f7:27:8a:d6:48:c8:94:6d:b9:31:53:84:a8:
         43:c9:f8:66:fc:ba:b4:a1:1c:75:b6:bf:ac:f7:c6:06:2e:ba:
         28:6c:43:dd:ec:44:e2:31:d2:49:b3:14:14:95:6c:19:d2:87:
         11:10:77:db:5d:04:48:66:04:ee:95:f8:09:7f:50:f0:7e:61:
         14:ff:09:7b:d4:d5:0d:c0:2f:19:27:db:95:40:a1:84:ce:f5:
         51:d2:e3:b2:c9:d2:e4:93:bf:d1:b3:f3:85:66:ac:ce:98:d8:
         f7:87:31:c8:7e:74:e4:a8:f4:0e:e0:86:03:ef:3f:40:0e:7b:
         96:8d:55:24:a6:89:80:8b:49:1a:cb:d9:b4:25:b2:5e:bb:ca:
         79:77:5f:47:92:0e:3d:84:f3:d9:5c:8e:73:46:74:9a:3f:ab:
         73:d0:e8:ca:1d:c9:ae:78:22:bc:9f:47:29:93:39:55:4f:12:
         f1:cc:24:db:be:a5:da:ae:a5:1c:f8:dc:7a:a8:11:60:c3:07:
         48:c7:f3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:08 2025 by rpki-client on console.sobornost.net