Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3659308/A28749C8B42211EBB7623561F8AEA228/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.mft
File:                     W_jUsLUcWoJ84QAnXwmz2qGWPmQ.mft (raw, json)
Hash identifier:          1A9LFImoRpriCezpAhQL937J1CdZU68qPWocClNbVXs=
Subject key identifier:   FB:D8:FA:41:59:18:A6:F3:C5:79:09:A4:BF:01:59:43:11:04:CA:A9
Authority key identifier: 5B:F8:D4:B0:B5:1C:5A:82:7C:E1:00:27:5F:09:B3:DA:A1:96:3E:64
Certificate issuer:       /CN=F3659308AF/serialNumber=5BF8D4B0B51C5A827CE100275F09B3DAA1963E64
Certificate serial:       05D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3659308/A28749C8B42211EBB7623561F8AEA228/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.mft
Manifest number:          05D3
Signing time:             Mon 28 Apr 2025 02:18:11 +0000
Manifest this update:     Mon 28 Apr 2025 02:18:10 +0000
Manifest next update:     Wed 30 Apr 2025 02:18:10 +0000
Files and hashes:         1: W_jUsLUcWoJ84QAnXwmz2qGWPmQ.crl (hash: wxhlFd+r1yh1eyJwpOM2uWkdQ32XjPXQ3es+zDM1sFg=)
                          2: 8CC62B08B87E11EBAF9A7E6AF8AEA228.roa (hash: 92mRoDJb/uCNie5wFmUGwLfKgji5VHv1+cWi4LYckXc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3659308/A28749C8B42211EBB7623561F8AEA228/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3659308/A28749C8B42211EBB7623561F8AEA228/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1492 (0x5d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3659308AF, serialNumber=5BF8D4B0B51C5A827CE100275F09B3DAA1963E64
        Validity
            Not Before: Apr 28 02:18:10 2025 GMT
            Not After : Apr 30 02:18:10 2025 GMT
        Subject: CN=680ee563-d4ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9c:b7:b3:12:f4:e0:e0:1f:be:46:90:5c:04:
                    76:b9:70:51:82:e3:61:29:4a:c5:b6:78:b7:8d:d3:
                    76:4a:9e:64:8a:d8:df:f1:83:77:7a:18:ee:05:5b:
                    46:8f:53:21:cb:b9:ef:34:ab:0b:af:6d:d8:ba:cf:
                    03:27:5a:ab:9e:6e:53:33:3a:74:50:3b:f4:4e:6c:
                    94:8f:73:c4:b5:05:62:f0:5f:98:52:1b:7f:26:05:
                    ef:1b:3f:ea:1e:dd:da:91:53:c1:fa:bb:a4:7f:be:
                    91:18:9e:15:7a:5c:8f:82:3c:3a:c9:61:df:ea:f2:
                    11:a1:15:98:67:ed:08:59:11:aa:81:cc:b9:04:97:
                    8f:f8:30:67:4c:ec:30:56:42:0b:78:cf:cb:b1:54:
                    33:91:8a:56:03:e6:d9:f1:1a:03:24:57:17:6d:65:
                    ba:a9:71:f3:4c:1b:18:5f:40:e2:93:ab:ae:e3:95:
                    1f:49:1c:45:74:6b:38:14:dd:fa:2c:3f:ae:13:b4:
                    5f:a6:67:c5:bf:99:df:34:c0:c3:2b:2f:39:5a:97:
                    7f:61:3e:d9:7e:ae:c8:b5:1e:7b:41:19:c5:f7:6a:
                    cc:53:12:9c:a9:dd:a6:98:25:0c:e5:56:99:15:ed:
                    07:6f:1a:98:6d:f8:6e:14:48:2b:ba:49:bb:68:96:
                    05:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D8:FA:41:59:18:A6:F3:C5:79:09:A4:BF:01:59:43:11:04:CA:A9
            X509v3 Authority Key Identifier:
                keyid:5B:F8:D4:B0:B5:1C:5A:82:7C:E1:00:27:5F:09:B3:DA:A1:96:3E:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3659308/A28749C8B42211EBB7623561F8AEA228/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3659308/A28749C8B42211EBB7623561F8AEA228/W_jUsLUcWoJ84QAnXwmz2qGWPmQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:09:7a:df:de:5a:37:5f:c8:3c:84:5c:64:c7:40:d0:a5:39:
         88:b1:c0:75:38:25:1a:89:d9:96:0c:33:9c:47:31:bc:92:10:
         de:d3:bb:8b:a2:4a:2f:9a:87:0c:13:f2:64:c2:1d:91:ee:cf:
         e1:a9:6b:7e:64:6c:60:5b:46:f2:5c:85:c4:b5:6e:8e:f5:d7:
         c3:bb:55:b9:10:87:6d:d6:c0:bc:39:c2:3a:3e:89:53:da:02:
         52:df:e2:12:76:8b:a7:a4:f1:dd:5e:1d:42:dc:d6:ed:7b:80:
         79:02:78:f6:e7:69:4a:4a:4c:6e:42:f8:00:22:f9:ac:00:35:
         0f:a7:73:fc:f6:72:4a:76:1e:7d:18:8b:17:f1:b9:88:95:98:
         a0:0a:7a:dc:3d:04:da:f4:23:f4:f9:de:87:67:4d:b2:a2:48:
         46:4e:41:ef:f1:b8:bc:c3:72:b9:02:88:8d:bf:79:ad:73:4e:
         28:e9:02:d2:8a:47:94:be:bd:7e:c4:9c:dc:f4:23:af:3e:a9:
         fc:46:86:f5:55:ec:ac:6c:1e:ae:c4:da:14:a9:a1:d7:15:e7:
         ba:01:2a:a0:fa:1f:49:fc:d0:54:86:32:31:c3:7a:89:78:52:
         0e:f8:ed:17:a6:f3:8e:42:e1:f4:78:37:af:57:d4:6a:47:6b:
         c5:35:65:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:02:30 2025 by rpki-client on console.sobornost.net