Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
File:                     LQAVTmAKZArDKjKF2c6fxQqUGrM.mft (raw, json)
Hash identifier:          tlOJCj4af45wmRWI0BkpuDYRDujk9R0FPP3OokJQmVw=
Subject key identifier:   EB:DC:37:77:87:B0:0F:80:2D:52:D9:61:66:60:5D:E4:82:46:A6:C5
Authority key identifier: 2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Certificate issuer:       /CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Certificate serial:       0439
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
Manifest number:          0433
Signing time:             Sun 27 Apr 2025 03:01:00 +0000
Manifest this update:     Sun 27 Apr 2025 03:00:59 +0000
Manifest next update:     Tue 29 Apr 2025 03:00:59 +0000
Files and hashes:         1: LQAVTmAKZArDKjKF2c6fxQqUGrM.crl (hash: JQjPo2yvvMjpTMA9p3Z+NmGZXOGnAUDUtg+wH2dZd1s=)
                          2: 5AD2351EF62211ECA5384CCEF1222468.roa (hash: O2TbmJ0oluer0UrOj7dugRw2nzmfuIBjrJGzVgObtfc=)
                          3: 441FBD96F62211ECAEA706CEF1222468.roa (hash: eOgo72NBB1TzX9MDNE5guVogIR1WbLYMRiu06PhqwRs=)
                          4: AEB3FD70F61811ECA343ACAFF1222468.roa (hash: yr8c8nv1fl6R2/dpv4d+UEGlhaBD6Mc7GC6CbBKlwUE=)
                          5: 92592E3EF62211ECB1890ECFF1222468.roa (hash: r+2CApErk9WQshLvMZh/1Yeo8KK9DMqaF9+XKRWgW4w=)
                          6: 76C25FA6F62211ECA4A5A1CEF1222468.roa (hash: bltEFXn7G4T8us2DT/CcL4lO2ojz0kPAbTbNgBQhLGQ=)
                          7: C977373AF61811ECAE6C16B0F1222468.roa (hash: I6EVPppAZg4DBAMr2DMZolkT3ClI2lJdmUjSbTKJ71k=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1081 (0x439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BC44AF, serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
        Validity
            Not Before: Apr 27 03:00:59 2025 GMT
            Not After : Apr 29 03:00:59 2025 GMT
        Subject: CN=680d9dec-083f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:fc:a3:82:6f:97:a9:14:0a:78:d8:0a:94:5b:
                    91:ef:9d:0c:fb:e9:ce:34:9e:95:9c:89:77:2c:1b:
                    70:4f:d7:f4:a5:c9:40:a9:35:9d:aa:74:52:74:6a:
                    6c:27:54:a3:21:fe:0d:d0:69:2f:f9:18:3e:bb:89:
                    ad:41:13:6e:23:91:ee:22:94:2d:77:41:3a:e0:40:
                    8b:e0:b6:28:b2:4d:3b:5b:10:cd:32:7f:2d:d5:70:
                    1a:57:f5:fd:88:c6:34:fe:ce:52:b0:60:5b:41:36:
                    0f:2d:1f:06:e8:21:8e:3c:94:53:bc:bf:13:29:7d:
                    1e:3e:ac:24:6b:55:ef:eb:95:33:fc:07:5f:0e:59:
                    73:5f:67:36:bd:89:30:04:8a:f5:4d:b2:33:af:09:
                    68:57:6e:57:83:fb:a4:3a:3f:8d:0e:bc:35:68:f4:
                    bb:31:c5:4c:f3:43:15:40:e6:a2:c9:08:bc:3f:bb:
                    94:1e:4f:1c:4e:15:68:9a:61:4d:1d:3e:fa:07:1a:
                    ae:f9:c9:b5:da:57:d3:03:62:1a:90:ae:62:0e:3a:
                    96:56:70:d2:b8:7e:3a:0f:ff:0d:1d:b2:80:06:c5:
                    dc:cf:82:6a:33:8c:43:b5:66:50:35:4d:5b:83:c6:
                    ad:66:a0:1b:ca:0b:57:63:89:bd:a9:71:61:5e:21:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DC:37:77:87:B0:0F:80:2D:52:D9:61:66:60:5D:E4:82:46:A6:C5
            X509v3 Authority Key Identifier:
                keyid:2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:32:1e:f1:87:5d:d7:94:23:eb:67:29:16:bc:61:62:46:2a:
         95:30:f7:57:1e:ca:57:37:14:84:f8:b9:36:77:bf:41:81:50:
         1d:3d:54:2a:fe:d2:ef:a0:67:f7:ee:bd:3e:4f:63:75:94:63:
         36:43:75:f9:92:6f:15:c5:bd:f5:94:45:ff:0f:7f:7e:71:f8:
         f9:31:df:7a:2f:b8:a4:81:62:f7:b4:2c:14:14:42:f0:84:1a:
         4a:1a:ea:b8:dd:7c:59:09:06:7b:50:e4:68:fb:7f:48:cc:d0:
         fd:cb:a5:d1:05:ca:7f:a0:56:c4:2f:aa:a2:6a:5e:d0:11:be:
         89:8b:cf:49:a8:1a:37:c5:ff:c7:ca:83:37:aa:6c:50:68:a7:
         5c:6a:4b:82:12:a3:5b:2d:6b:51:7f:e4:dc:e2:38:41:10:7e:
         36:6d:97:50:18:2a:d5:e1:d2:70:5c:e2:e8:1e:ec:10:f8:8f:
         f2:a8:89:b4:c9:7c:2f:b2:9c:71:e9:0f:0a:02:52:19:6b:20:
         41:0f:1a:11:bb:0f:e8:b8:04:cf:72:f8:29:dc:81:28:04:0c:
         1f:f2:07:46:ff:63:3c:8b:a3:48:d8:60:7d:15:9a:74:54:39:
         57:84:10:d9:36:59:40:61:79:48:69:11:04:b0:e4:c2:3f:c1:
         64:fe:06:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:41 2025 by rpki-client on console.sobornost.net