Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
File:                     epndbb4tFgeKUOWEHlqOilkM3Us.mft (raw, json)
Hash identifier:          Lc1wnhHGs9yzqx9Z8gkxNRcXp2IMS1AFkq+gbiwqFiM=
Subject key identifier:   43:67:E0:AA:D3:1A:B4:13:25:9F:84:91:18:0D:26:DE:AB:B1:9F:F6
Authority key identifier: 7A:99:DD:6D:BE:2D:16:07:8A:50:E5:84:1E:5A:8E:8A:59:0C:DD:4B
Certificate issuer:       /CN=F365052EAR/serialNumber=7A99DD6DBE2D16078A50E5841E5A8E8A590CDD4B
Certificate serial:       0109
Authority info access:    rsync://rpki.afrinic.net/repository/arin/epndbb4tFgeKUOWEHlqOilkM3Us.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
Manifest number:          0108
Signing time:             Fri 25 Apr 2025 04:45:58 +0000
Manifest this update:     Fri 25 Apr 2025 04:45:57 +0000
Manifest next update:     Sun 27 Apr 2025 04:45:57 +0000
Files and hashes:         1: epndbb4tFgeKUOWEHlqOilkM3Us.crl (hash: a0kkXcJcCJD5d2nKXZw/2UUrIkYL909iyEOo46o31LU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
                          rsync://rpki.afrinic.net/repository/arin/epndbb4tFgeKUOWEHlqOilkM3Us.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 265 (0x109)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365052EAR, serialNumber=7A99DD6DBE2D16078A50E5841E5A8E8A590CDD4B
        Validity
            Not Before: Apr 25 04:45:57 2025 GMT
            Not After : Apr 27 04:45:57 2025 GMT
        Subject: CN=680b1386-3f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:65:14:ca:40:3a:58:ee:27:a5:5c:16:0b:
                    3f:69:6b:4d:ac:aa:38:7b:f6:49:b8:7b:78:1c:75:
                    2a:82:e9:d2:bb:23:0b:a2:e6:a8:3d:f9:df:63:66:
                    92:b3:79:65:5d:c3:26:fc:71:53:b3:df:3f:42:a5:
                    2f:2b:55:e5:01:07:4f:fb:5c:a7:45:aa:d4:6b:27:
                    ae:ed:78:5c:c9:fb:41:bb:7a:6d:f1:aa:ab:c6:8c:
                    e4:2e:f0:30:40:ac:c5:96:4d:4b:0a:ba:0d:fe:a0:
                    73:2b:81:b6:9e:67:df:c0:61:5d:da:f8:21:f0:eb:
                    9f:df:b5:7a:06:01:22:a5:d5:59:dd:48:07:bc:c5:
                    35:d9:f3:dc:c6:1c:d2:5f:8b:f7:39:dc:b8:bf:f1:
                    9e:80:a6:a7:63:fc:25:60:1b:17:1d:68:f2:13:08:
                    51:95:82:94:6d:bb:f1:5a:9a:1d:9c:de:84:f9:40:
                    41:ab:a2:52:c4:d4:c1:39:b3:07:80:57:1c:4a:d0:
                    ca:eb:7b:18:df:40:3c:9d:0d:82:e3:c2:af:e6:ee:
                    e3:9b:b3:88:70:cd:7d:ec:49:87:f7:c2:b7:ee:90:
                    e3:14:7d:15:5c:5b:80:6c:04:a1:19:67:8e:cb:df:
                    03:a0:2d:78:bb:19:c7:f1:6f:bb:7d:4f:33:35:2f:
                    5b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:67:E0:AA:D3:1A:B4:13:25:9F:84:91:18:0D:26:DE:AB:B1:9F:F6
            X509v3 Authority Key Identifier:
                keyid:7A:99:DD:6D:BE:2D:16:07:8A:50:E5:84:1E:5A:8E:8A:59:0C:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/epndbb4tFgeKUOWEHlqOilkM3Us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/64EC1C5C5E4B11EFB7C48DA3762E951A/epndbb4tFgeKUOWEHlqOilkM3Us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:29:2c:f1:8a:a3:65:6d:24:b0:32:2b:25:45:5d:93:de:82:
         47:50:62:81:81:1a:d7:3e:4b:2f:08:7d:83:8c:19:bc:f0:f1:
         94:e5:8b:13:12:ff:cc:60:51:43:2e:67:bf:5b:dc:8f:bf:5a:
         a9:ae:c0:ab:96:6c:60:ca:1b:b6:ab:dd:f1:70:76:de:56:bc:
         9b:62:ab:04:9b:ae:f9:39:41:2d:32:49:54:81:eb:e2:f7:c4:
         fe:50:38:a1:4d:87:ae:dc:23:26:91:0a:2d:ec:2c:c0:4f:7b:
         12:8f:0b:d3:17:43:46:b8:43:9b:d1:ca:1e:7f:9b:99:6e:ae:
         5c:14:33:ed:d1:84:f8:75:ab:4f:cd:52:47:e4:4d:a2:1c:54:
         43:ef:e3:65:0f:24:8f:75:7f:19:87:a9:9b:ef:45:ba:8c:d6:
         4c:ca:85:df:49:22:bb:34:09:54:86:fe:3c:5c:16:d6:28:39:
         5d:38:d5:d7:f5:10:7d:e3:73:18:72:5f:0b:10:25:c1:1e:5d:
         03:55:c2:ee:20:24:18:ef:c8:27:51:04:8d:64:0e:3e:44:71:
         56:a3:96:3c:62:84:36:eb:fe:a2:e5:d0:6b:99:c8:ab:2a:e7:
         8a:65:9d:50:8c:f1:6c:e8:7f:7e:d2:a9:82:80:61:9c:e9:4b:
         b4:23:30:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:26 2025 by rpki-client on console.sobornost.net