Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
File:                     -wkj-GnVLjM4ArnFPXizuoZUMMw.mft (raw, json)
Hash identifier:          G/E6E6PiJI1G/MwgVYDcDHpNKyCCnx7MbgQu1FY6Nic=
Subject key identifier:   97:3E:31:DD:D8:24:B3:84:8C:D7:16:31:FF:5F:C1:EF:E5:DE:45:CA
Authority key identifier: FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
Certificate issuer:       /CN=F364B494AF/serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
Certificate serial:       03E7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
Manifest number:          03E5
Signing time:             Mon 28 Apr 2025 03:16:37 +0000
Manifest this update:     Mon 28 Apr 2025 03:16:36 +0000
Manifest next update:     Wed 30 Apr 2025 03:16:36 +0000
Files and hashes:         1: -wkj-GnVLjM4ArnFPXizuoZUMMw.crl (hash: hk6Sn0FKMJv5rZcvlPp/1LFlFJqz+tP8mLphb0yb+F0=)
                          2: 83ACCE309C0411EDB12456CEF1222468.roa (hash: TIYICNTcucn9WwS8nowmdJ5oP58ro1vC+nknb7WxgMg=)
                          3: 7E6D0BDA329411ED83690DA6F1222468.roa (hash: 9vBXav7hVf2XlLbTRQ+k6U2z6DcdpesgBwg/u89dKXo=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 999 (0x3e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364B494AF, serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
        Validity
            Not Before: Apr 28 03:16:36 2025 GMT
            Not After : Apr 30 03:16:36 2025 GMT
        Subject: CN=680ef314-3aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:01:49:89:7e:ce:c5:21:de:f7:9d:df:0b:b2:
                    a7:f2:fe:11:5c:9b:bb:7b:80:4b:12:e1:10:cd:af:
                    04:39:51:82:b5:41:40:80:45:16:c9:82:93:33:dc:
                    0a:54:e3:fe:c9:b6:da:79:35:e2:3d:7e:e7:77:08:
                    c7:d2:9a:bc:9e:81:8f:ad:97:9b:90:c4:4f:60:72:
                    7d:22:ba:f6:2e:57:b3:c9:60:ef:0f:ac:1b:34:d5:
                    d9:ee:d6:8b:15:c1:6d:a9:24:03:4c:06:bf:5e:29:
                    03:1b:be:d2:62:e1:e4:8a:07:ff:b1:41:0d:09:6a:
                    33:6d:e2:c2:78:51:02:31:22:85:89:f1:0e:de:af:
                    d1:bb:08:a9:d9:e1:71:ab:10:79:67:47:d0:7d:ac:
                    d3:15:c5:5d:f1:af:16:8d:fc:b5:3a:48:c9:4c:8a:
                    6c:61:e1:61:05:db:f8:69:d2:49:84:47:b9:70:d8:
                    8b:37:ee:6f:07:fa:6b:ef:52:28:e1:11:a8:a7:76:
                    98:dc:c6:10:74:6c:d6:05:27:48:5e:a9:7c:fe:0a:
                    4c:f1:39:e1:6c:5a:4c:1b:d9:3c:97:f4:84:01:9a:
                    9f:3e:b4:d7:e0:95:ea:96:98:f5:41:f8:4d:06:5f:
                    fc:d0:2c:3c:ee:c6:4b:ba:c6:77:d0:33:6f:7a:60:
                    53:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3E:31:DD:D8:24:B3:84:8C:D7:16:31:FF:5F:C1:EF:E5:DE:45:CA
            X509v3 Authority Key Identifier:
                keyid:FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:09:b4:ab:be:10:a8:15:e9:b0:11:dc:29:13:aa:52:58:10:
         d3:6a:7f:88:b1:65:2f:17:c6:b1:43:e8:02:a4:d6:53:42:b0:
         71:94:ff:66:15:a9:99:75:1c:8e:34:c3:6a:c2:10:8b:40:1d:
         a6:e0:f8:94:6c:e1:9a:b6:79:1e:93:db:27:22:2f:99:3c:f4:
         7c:cc:4b:3e:cd:da:fe:cc:d4:7b:df:16:26:0d:3c:11:33:98:
         82:e8:d4:5e:6f:c1:9d:ef:e3:0a:7a:b6:3d:a2:82:a4:55:12:
         c9:d6:58:bf:1f:a7:23:7f:9b:59:6b:a6:54:e6:73:6d:52:4a:
         6e:bd:14:e5:a6:0a:9c:10:60:76:ea:36:9f:30:7c:62:e1:e6:
         41:5c:48:88:e4:be:8f:b2:f5:ca:ad:a9:16:2f:cd:ba:f9:bc:
         c8:0f:5b:f5:dc:21:6b:0b:86:23:4c:e0:94:4c:82:a5:ae:c3:
         9d:91:c5:14:fe:4e:63:c9:7e:4f:bf:d3:51:62:4f:5e:d0:2e:
         7e:24:4e:9f:d4:43:3d:3d:99:ad:74:29:48:bd:b8:a9:46:6d:
         d7:bc:4f:c9:0e:84:3c:4c:21:b8:d6:b7:02:63:6b:04:38:86:
         a6:c2:bd:9c:1b:b2:b4:6a:34:75:cf:d6:9f:cc:f0:60:46:99:
         31:5c:1e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:02:29 2025 by rpki-client on console.sobornost.net