Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
File:                     8qncFw2PMqBEwa8QUgRdbU4kIus.mft (raw, json)
Hash identifier:          YjKt6BSjHDHbq0Swp240WS8K+mPHriSFX3mBSwSVaXI=
Subject key identifier:   7E:A3:C3:F0:EF:29:BE:0B:F8:39:C1:E0:69:20:60:CE:07:4D:A0:83
Authority key identifier: F2:A9:DC:17:0D:8F:32:A0:44:C1:AF:10:52:04:5D:6D:4E:24:22:EB
Certificate issuer:       /CN=F3650F65RI/serialNumber=F2A9DC170D8F32A044C1AF1052045D6D4E2422EB
Certificate serial:       012A
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
Manifest number:          0126
Signing time:             Sun 27 Apr 2025 04:42:44 +0000
Manifest this update:     Sun 27 Apr 2025 04:42:43 +0000
Manifest next update:     Tue 29 Apr 2025 04:42:43 +0000
Files and hashes:         1: 8qncFw2PMqBEwa8QUgRdbU4kIus.crl (hash: 2yeOs3azuNkDFGahtemAEumoPCs0ZRDuvGFBRiQs78g=)
                          2: 6943C2245A1C11EF8AD3AB9F762E951A.roa (hash: 4I82hmzIVlcUSpjIKbPk3aHDkUVJd1jgQcDFX1IaaAM=)
                          3: E0539FCE5A1211EF8F707262762E951A.roa (hash: bcfZ/95PQQlS2eDlkdUzWliC6UA2tyCBDeR/FA3hgqE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
                          rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650F65RI, serialNumber=F2A9DC170D8F32A044C1AF1052045D6D4E2422EB
        Validity
            Not Before: Apr 27 04:42:43 2025 GMT
            Not After : Apr 29 04:42:43 2025 GMT
        Subject: CN=680db5c4-af03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:78:30:3b:32:be:7f:d2:55:fe:99:ba:ec:8c:
                    3e:58:90:ec:2c:b1:3e:5a:ce:df:20:14:35:51:ea:
                    8c:ed:c8:02:a3:60:48:60:3c:f1:ec:89:dc:b4:19:
                    49:5e:22:34:fd:97:47:37:28:08:c7:24:f6:60:f4:
                    1b:5d:b3:b3:98:22:b6:b1:dd:4f:1c:93:59:e8:ce:
                    fa:b5:f8:45:65:05:83:ad:ba:b3:ce:e1:64:7b:13:
                    0e:6b:e7:99:ff:d2:11:b9:92:49:76:b8:69:06:47:
                    9f:39:ec:3b:c4:3d:bf:55:a0:d1:f9:22:d1:35:9b:
                    10:42:fa:4b:b7:c8:03:81:b6:f9:da:c3:b6:ad:7b:
                    6e:17:3f:94:86:47:4c:dc:0f:03:80:18:82:0c:64:
                    75:2b:f6:79:a2:48:bb:13:d0:cb:6f:01:0a:09:8a:
                    85:cc:cc:de:74:85:c3:1a:40:bc:0c:d1:79:c2:15:
                    ea:c8:ff:79:f9:3f:63:40:0d:ca:ab:8b:c2:ac:c3:
                    07:2a:b7:96:22:ba:47:25:58:75:72:47:ae:dc:bb:
                    ad:43:a7:ab:be:44:4b:fb:04:ef:e7:5f:68:fb:4c:
                    e8:ae:6a:53:66:6d:c1:46:d8:cf:99:53:e3:83:5e:
                    04:23:41:a8:18:40:68:fd:95:3b:71:14:40:d2:b6:
                    10:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A3:C3:F0:EF:29:BE:0B:F8:39:C1:E0:69:20:60:CE:07:4D:A0:83
            X509v3 Authority Key Identifier:
                keyid:F2:A9:DC:17:0D:8F:32:A0:44:C1:AF:10:52:04:5D:6D:4E:24:22:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8qncFw2PMqBEwa8QUgRdbU4kIus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/0B593FC0498411EF8FCC9BB4762E951A/8qncFw2PMqBEwa8QUgRdbU4kIus.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:e8:a4:6c:af:e4:43:d6:0d:4e:98:e5:a6:c9:81:be:21:83:
         bb:4f:1f:79:df:67:5e:58:af:77:b7:17:23:3f:cc:5d:9a:7e:
         5a:a2:24:c2:a0:d4:e6:c9:26:54:f6:d4:78:e1:b2:86:b3:20:
         fa:b3:f0:7b:65:0a:1c:1d:88:ba:6f:ae:40:47:61:6f:7d:54:
         31:dc:39:29:44:21:c6:ea:7e:82:4c:68:b7:75:e0:c9:ea:ea:
         b7:8c:2e:63:9c:a9:63:fd:67:2c:c5:67:21:af:b4:c3:d5:95:
         6b:f0:56:a0:56:9f:87:d3:c9:4f:6d:06:bd:a2:88:fb:82:15:
         7d:6a:48:4c:3a:70:60:5b:c5:4b:1d:48:de:d5:1b:62:80:fe:
         a2:59:3c:e1:1f:cb:98:4a:fb:b3:4e:ab:64:49:4c:98:46:4c:
         43:e2:73:86:25:99:6f:3c:77:ea:83:b0:93:cd:bd:6e:58:99:
         8f:f3:21:d8:8f:01:e4:77:85:b0:4c:f1:68:12:3f:da:8a:2b:
         0f:4c:34:dc:8c:66:63:43:7a:04:a6:da:2e:78:7a:90:ac:bb:
         cb:07:a5:e2:e4:b1:27:38:8b:6d:1d:21:69:86:43:ad:67:3d:
         9f:a9:77:e7:98:b3:99:f5:33:26:22:7c:21:32:5a:5a:ef:c8:
         a9:c4:61:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:37 2025 by rpki-client on console.sobornost.net