Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
File:                     3IJjhe1IHHwjMIBE24nEU5kq3E8.mft (raw, json)
Hash identifier:          HbddXS16U5HLpxacwQVEnIO9X2EGiawcJ+WSUJ9RLqE=
Subject key identifier:   9A:A3:5D:70:46:E3:18:23:FE:28:98:E6:E7:87:4E:4C:28:06:9D:7B
Authority key identifier: DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F
Certificate issuer:       /CN=F365E0EFAR/serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
Certificate serial:       0455
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
Manifest number:          0453
Signing time:             Sun 27 Apr 2025 02:55:25 +0000
Manifest this update:     Sun 27 Apr 2025 02:55:24 +0000
Manifest next update:     Tue 29 Apr 2025 02:55:24 +0000
Files and hashes:         1: 3IJjhe1IHHwjMIBE24nEU5kq3E8.crl (hash: PjQLMdXWluyrGoLnZJqEdtIabG+8EjrFTCzzHWd3Xaw=)
                          2: DAB5B58871A111EF9A6AEC6F762E951A.roa (hash: YivpnequhZt8XqJ2qMGWn/m6KFZdSXQEvVcrsKtKSmY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
                          rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1109 (0x455)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E0EFAR, serialNumber=DC826385ED481C7C23308044DB89C453992ADC4F
        Validity
            Not Before: Apr 27 02:55:24 2025 GMT
            Not After : Apr 29 02:55:24 2025 GMT
        Subject: CN=680d9c9d-ef83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:53:d9:1a:55:f2:ff:69:14:18:61:16:33:eb:
                    a7:15:d5:f3:25:70:b9:46:70:f1:dd:87:65:59:f7:
                    26:bb:9a:7e:f5:16:82:42:9f:ec:aa:0f:cd:93:a6:
                    0a:7f:48:6f:22:b0:0f:99:36:c1:ef:f5:a1:7d:de:
                    db:d7:2d:d6:16:4c:60:34:c6:30:75:92:13:22:fe:
                    3b:b4:37:95:5f:a4:a4:09:a0:91:08:b4:a8:a5:22:
                    b8:2c:fd:5c:9c:cb:23:f4:35:02:4a:be:d0:c1:e5:
                    d4:68:ec:43:c5:86:e3:b9:f6:bb:07:af:30:71:95:
                    55:e4:f8:d4:b3:ab:a3:19:c6:dd:2b:8f:84:7e:cf:
                    2a:b8:ea:87:03:8c:4d:30:dd:8c:59:1d:92:46:fa:
                    a0:e0:72:52:4b:7f:11:24:f2:b9:92:d6:51:b3:72:
                    27:88:fc:56:4a:0e:4c:6d:03:6a:9b:e8:20:24:8b:
                    e1:c7:2d:b2:7d:64:55:b4:34:82:08:fc:c9:5e:f4:
                    ac:9f:14:8a:71:e7:de:4a:c2:5d:18:30:9d:11:69:
                    21:d9:f5:c2:a0:08:fb:48:7f:32:d3:01:81:a7:fb:
                    e7:15:2b:26:aa:a1:a1:7b:75:d2:72:1f:64:54:ab:
                    e1:ae:3e:34:e5:08:c8:0b:f5:0c:76:4d:6e:7c:35:
                    8f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:A3:5D:70:46:E3:18:23:FE:28:98:E6:E7:87:4E:4C:28:06:9D:7B
            X509v3 Authority Key Identifier:
                keyid:DC:82:63:85:ED:48:1C:7C:23:30:80:44:DB:89:C4:53:99:2A:DC:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3IJjhe1IHHwjMIBE24nEU5kq3E8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/4AFF94D6DAAE11EC98B8F0D3F1222468/3IJjhe1IHHwjMIBE24nEU5kq3E8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:71:10:53:ad:72:60:54:20:ea:1e:84:f5:08:e2:5d:17:d6:
         74:c5:3c:87:e1:6f:4e:02:4b:cb:cc:2b:3f:29:7a:ff:7a:c6:
         92:58:65:cb:4e:ad:75:55:12:8d:ff:3c:bd:a7:d2:d8:ab:75:
         fc:b3:fa:f0:70:09:5f:f5:1e:af:e8:48:c2:ca:d6:85:f1:4c:
         44:36:c2:69:5b:fe:41:8d:fe:61:fa:6d:5a:7e:89:e7:4f:13:
         6e:2c:5b:72:1d:a7:ac:b5:c4:da:ae:08:9c:00:b2:b6:bb:6a:
         9a:08:9c:75:d3:30:01:5f:0c:08:71:24:a0:99:bf:52:d0:a0:
         ce:a6:28:f2:a8:cf:bc:8d:fb:34:7b:76:37:94:bb:cf:b5:4e:
         30:a0:a4:2c:89:70:12:4b:09:2b:fc:ff:4a:68:85:19:75:5f:
         72:ce:4b:cc:71:21:24:52:92:b4:f8:47:54:6f:4e:3e:45:64:
         9d:21:7c:1b:de:fc:b5:54:cf:43:ec:82:b4:1a:bf:9d:17:7c:
         ca:b9:ed:53:88:d0:e1:08:c4:c1:ee:9c:4c:08:f1:09:d5:71:
         b1:98:07:06:7a:72:29:57:ea:07:a6:a1:c9:4a:34:37:a1:36:
         8a:84:2f:f2:61:a9:95:d0:ce:7c:09:d0:7b:fa:55:ba:a3:e2:
         8c:c7:47:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:42 2025 by rpki-client on console.sobornost.net