Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
File:                     -_THz17IYtQtyBCgQwAhG6K3xQg.mft (raw, json)
Hash identifier:          ZU8WxGO8WRXfKxZjZEh6k+kcgeX9FT5nKJqaHWATws0=
Subject key identifier:   37:6D:11:AB:30:79:D9:4C:E9:99:F8:64:C1:B1:FE:41:14:75:86:06
Authority key identifier: FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08
Certificate issuer:       /CN=F3658583AF/serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
Certificate serial:       0117
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
Manifest number:          0117
Signing time:             Sat 26 Apr 2025 04:44:14 +0000
Manifest this update:     Sat 26 Apr 2025 04:44:13 +0000
Manifest next update:     Mon 28 Apr 2025 04:44:13 +0000
Files and hashes:         1: -_THz17IYtQtyBCgQwAhG6K3xQg.crl (hash: /DObIpJNtslnd707mxRUFA69L4SOv6UxSiPShzQJMoc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658583AF, serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
        Validity
            Not Before: Apr 26 04:44:13 2025 GMT
            Not After : Apr 28 04:44:13 2025 GMT
        Subject: CN=680c649e-6860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6c:d0:ba:ec:81:a6:2f:17:00:f5:cf:39:fb:
                    32:19:a3:2a:27:71:b0:11:33:c1:7b:26:45:78:37:
                    f2:63:f5:8f:e5:08:d5:3e:99:41:4b:ba:35:26:24:
                    94:59:8a:b9:7e:b8:56:bd:12:84:fe:86:9d:2d:53:
                    b6:89:98:e4:07:90:88:46:fc:ee:96:d2:c9:29:d9:
                    bc:6e:75:aa:22:b7:23:62:56:c9:39:44:63:cb:e3:
                    7d:62:e1:76:2c:d6:af:a2:02:e3:d3:c9:ec:97:2a:
                    6e:a0:38:49:3c:d8:23:90:13:7f:29:3a:0f:1e:bd:
                    15:c9:7c:15:5f:e9:e5:4e:6a:2c:41:7b:f2:5f:70:
                    a6:d6:79:c7:95:fe:e2:24:53:d2:38:5a:43:d6:a9:
                    16:bd:c6:35:75:ea:6a:c0:9b:8e:5e:08:8d:61:bd:
                    7c:68:d5:9e:f2:99:c6:9e:04:68:1c:57:bc:56:b2:
                    d6:3d:85:95:51:7f:87:c1:72:ac:af:0a:c4:1e:84:
                    f9:fe:37:70:06:11:75:37:4c:e9:e6:d0:87:8f:f0:
                    d5:66:9f:77:47:ea:c1:6b:79:b1:49:45:b3:d7:c3:
                    80:84:9a:80:60:a9:03:26:b6:c4:e8:a0:7a:87:67:
                    2a:97:e4:d1:2d:40:fb:3d:cf:cc:20:72:8f:67:0e:
                    19:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:6D:11:AB:30:79:D9:4C:E9:99:F8:64:C1:B1:FE:41:14:75:86:06
            X509v3 Authority Key Identifier:
                keyid:FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c9:02:ca:e2:34:61:d5:de:d6:7f:22:9d:ac:88:58:dd:8f:
         bf:51:67:db:67:43:3a:47:94:84:6b:37:89:95:31:77:a8:12:
         79:38:31:83:24:de:a2:74:34:ba:7d:81:ab:b1:f2:62:3d:3e:
         5c:8e:8e:a8:a1:1d:11:5e:89:50:d1:69:30:8f:26:c7:43:2d:
         d6:3e:14:e7:32:8b:e9:bf:94:d4:1a:b0:c2:e0:8d:f3:30:a5:
         ad:1f:dc:a2:b8:7d:5f:ed:94:8d:c1:a4:1b:a6:b1:77:27:01:
         04:32:83:2f:4f:30:fd:9a:86:b5:60:7f:b2:51:b3:67:ae:22:
         b7:82:43:1d:ab:2a:4f:e4:8a:b5:05:52:8d:4c:9c:7d:cb:a4:
         c4:90:3d:99:4d:31:ca:c6:19:4a:82:5c:4c:93:50:a9:37:df:
         a7:2c:41:3c:4a:ef:4e:99:0f:1d:ff:7b:f3:73:78:26:ce:29:
         35:a3:f0:9b:e8:73:86:bc:d0:cb:92:ec:ad:f1:06:77:88:ba:
         30:ec:05:bb:1e:de:20:d3:51:03:e0:55:3a:51:42:f0:8e:ea:
         1a:df:3b:20:d0:a4:87:88:94:75:76:6a:53:e8:8c:f8:71:9a:
         e3:17:d1:49:b4:5e:a2:75:6b:37:2d:2d:b2:9e:4c:5a:37:cc:
         ad:45:ea:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:55 2025 by rpki-client on console.sobornost.net