Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft
File:                     k84fICcYK4EpqwxxOo_1IcE9RI8.mft (raw, json)
Hash identifier:          kLBv6EDGYISLq9cpDnrI7PggSU58jG9iZUAK3xdsoN8=
Subject key identifier:   8F:4C:D1:78:D3:DA:1D:21:4E:0B:76:39:B9:B4:67:18:A0:3A:F4:B8
Authority key identifier: 93:CE:1F:20:27:18:2B:81:29:AB:0C:71:3A:8F:F5:21:C1:3D:44:8F
Certificate issuer:       /CN=F365FB04AF/serialNumber=93CE1F2027182B8129AB0C713A8FF521C13D448F
Certificate serial:       01DF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k84fICcYK4EpqwxxOo_1IcE9RI8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft
Manifest number:          01DA
Signing time:             Sat 26 Apr 2025 04:19:26 +0000
Manifest this update:     Sat 26 Apr 2025 04:19:25 +0000
Manifest next update:     Mon 28 Apr 2025 04:19:25 +0000
Files and hashes:         1: k84fICcYK4EpqwxxOo_1IcE9RI8.crl (hash: Xf9lDCDjYY8bw55bEQeKv5hNDHu+7bzRtn5NJ7mWCvY=)
                          2: 84F4D7E4C01E11EE96125668775412E6.roa (hash: foQPn6FWgsOZWx9YjKT409OmY84gXqjIzpo0LoTYpbM=)
                          3: 318B732EC01E11EE8B99BA67775412E6.roa (hash: EvtUtlYSfWZNzMNqGozZFQ05R7pmC383dcyBeyy04bo=)
                          4: B3968148BF7811EEB0ABC6B6775412E6.roa (hash: nQGeEEKitg0zBrxMzLb+bML7Bdg6QLf+TUFkV5DPzoE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k84fICcYK4EpqwxxOo_1IcE9RI8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365FB04AF, serialNumber=93CE1F2027182B8129AB0C713A8FF521C13D448F
        Validity
            Not Before: Apr 26 04:19:25 2025 GMT
            Not After : Apr 28 04:19:25 2025 GMT
        Subject: CN=680c5ece-889a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ca:23:d9:1b:e3:0b:cf:0d:de:d0:65:86:ae:
                    8c:6f:2c:13:93:73:0d:37:e7:b5:13:a0:b7:15:cf:
                    44:d7:d9:7a:94:48:0f:98:06:38:54:cb:cd:75:6d:
                    c7:d9:c9:de:90:46:c3:bf:40:85:0e:5f:13:d8:2a:
                    4a:b9:24:95:09:4c:95:36:96:a9:db:a8:f4:29:d7:
                    75:33:60:48:e5:96:24:94:62:2c:b1:ce:d5:ea:c1:
                    6f:ad:2c:43:93:f7:55:4c:15:6b:4a:98:74:90:d8:
                    c2:9c:fe:6a:1b:de:a1:b1:cd:14:68:13:83:cb:03:
                    5f:0a:3f:38:9e:d3:79:1b:8f:5d:79:85:92:ef:f3:
                    ec:5d:2d:fb:af:04:59:cb:99:5b:4f:98:44:93:c2:
                    bb:5e:41:45:46:de:d4:49:c4:33:20:4e:8f:85:e7:
                    69:6d:a9:8c:8d:2f:ee:27:2e:9b:c2:21:b6:68:78:
                    d9:c0:9d:9c:cd:03:0d:81:f5:7a:e2:9d:eb:98:12:
                    65:e1:0d:c2:ca:f4:81:64:4f:4e:5e:42:7d:62:11:
                    af:a4:dd:a9:40:d8:74:4b:3f:95:08:c5:04:23:a6:
                    25:20:f5:3f:28:48:ad:fd:71:d4:cc:29:33:b3:2b:
                    ee:50:8e:da:27:91:80:29:07:62:de:78:cb:26:fe:
                    15:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4C:D1:78:D3:DA:1D:21:4E:0B:76:39:B9:B4:67:18:A0:3A:F4:B8
            X509v3 Authority Key Identifier:
                keyid:93:CE:1F:20:27:18:2B:81:29:AB:0C:71:3A:8F:F5:21:C1:3D:44:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k84fICcYK4EpqwxxOo_1IcE9RI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365FB04/A0030BD0BF7611EE98EA44B3775412E6/k84fICcYK4EpqwxxOo_1IcE9RI8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e2:d8:38:84:27:cb:55:e3:b7:5c:f1:2d:21:29:d6:a4:39:
         22:39:07:8e:b3:11:26:80:60:3a:02:6d:f9:fe:08:00:d8:af:
         dc:a1:bc:50:6f:9f:de:a6:02:44:31:84:33:66:78:0e:a7:94:
         0b:93:b6:ea:b2:25:74:f7:f6:46:45:7c:2b:6a:6f:35:c9:64:
         3d:a2:63:f1:1c:9b:1a:8b:1f:d4:ba:c8:4e:8c:a1:2d:97:ad:
         78:90:b4:78:4a:41:56:bd:b1:89:c9:3c:56:ef:00:2a:28:8c:
         bf:41:0f:d6:c8:0c:87:69:5a:e1:e1:d9:50:fa:ff:2b:76:1f:
         7a:30:03:c1:bb:75:b1:4d:91:28:95:1f:e6:2e:ae:f2:18:c9:
         bf:78:1c:60:7d:c0:5a:13:28:9e:86:0a:5b:19:86:34:15:b2:
         93:02:6a:f9:16:81:8e:33:43:57:c4:4c:9e:e1:cf:3e:ac:2a:
         3c:11:f5:b7:24:4d:69:67:03:9a:92:f8:88:28:b6:73:63:65:
         8a:d4:9f:5b:26:75:aa:3e:3e:c7:a6:3e:8a:8a:e9:82:ad:97:
         ee:dc:9c:c9:66:3d:60:89:4a:23:e8:09:70:d7:a7:c0:bd:1d:
         16:89:8c:0f:da:b9:5b:3e:c9:e8:3c:4a:7a:b4:4e:17:87:36:
         e3:44:23:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:17:10 2025 by rpki-client on console.sobornost.net