Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
File:                     XKOJ-4BR0kErpd-AHYmyys5XJZw.mft (raw, json)
Hash identifier:          sKT5x1krOLCInEcWUusgpZE+IoN4tZmulbemjgLZk60=
Subject key identifier:   E4:E5:77:05:EE:DC:B4:9F:47:C5:5B:79:BA:4C:D6:02:BA:11:FE:13
Authority key identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
Certificate issuer:       /CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Certificate serial:       036D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
Manifest number:          036B
Signing time:             Mon 28 Apr 2025 03:26:48 +0000
Manifest this update:     Mon 28 Apr 2025 03:26:47 +0000
Manifest next update:     Wed 30 Apr 2025 03:26:47 +0000
Files and hashes:         1: XKOJ-4BR0kErpd-AHYmyys5XJZw.crl (hash: OAn1Oq3xkNrOC3H+OUZ5e5hobwrfqMcUdqe5QKD+nd8=)
                          2: FF42A1988F3211ED86A292BAF1222468.roa (hash: x+yQ5t8NNejDnfE2F13L3hSaxA+eL6ATRpRXB3MRfYU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 877 (0x36d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662DABAF, serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
        Validity
            Not Before: Apr 28 03:26:47 2025 GMT
            Not After : Apr 30 03:26:47 2025 GMT
        Subject: CN=680ef577-2755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dc:b4:da:44:cf:69:09:8f:f5:c3:2c:d6:c6:
                    04:2c:89:02:48:bf:21:56:c7:0e:4d:98:99:a0:84:
                    7e:4a:54:e8:5b:86:39:a7:06:fc:9f:61:d5:67:de:
                    77:e7:b9:44:70:e8:2d:80:90:39:53:4d:40:08:45:
                    3a:b3:87:fe:f9:36:96:18:63:52:82:9d:a6:cb:7c:
                    64:71:a6:ea:d7:ef:5e:fc:b8:72:0b:52:5b:12:ea:
                    fb:e5:34:67:55:26:03:53:f5:47:f0:28:a7:cd:c6:
                    c2:b9:5a:31:67:73:14:73:c1:e8:ca:43:5c:6c:de:
                    ca:e3:b2:09:de:c2:80:b4:39:5c:bd:9d:ef:20:db:
                    dc:66:8e:cf:58:a2:ce:61:49:88:f6:34:e9:bc:bd:
                    44:49:41:36:1a:84:34:18:48:3b:ae:5b:5b:2a:f2:
                    f8:07:ac:08:4e:1d:3f:ce:9a:56:aa:54:d6:4a:cf:
                    36:23:b5:8e:17:35:73:1b:c5:ce:67:4f:da:8d:79:
                    7c:b5:85:12:cf:ed:f2:f4:46:94:70:ed:48:b1:83:
                    43:d8:42:53:13:46:c3:2b:fb:57:53:90:af:8f:b3:
                    bc:21:c2:f1:ec:0f:34:9f:db:bb:99:72:23:66:40:
                    78:34:25:c6:7d:81:f0:43:c4:d6:7b:be:55:ad:84:
                    ba:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:E5:77:05:EE:DC:B4:9F:47:C5:5B:79:BA:4C:D6:02:BA:11:FE:13
            X509v3 Authority Key Identifier:
                keyid:5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:0e:de:aa:0a:79:34:a8:6e:f4:b9:2d:f6:5c:16:1a:dc:af:
         74:97:b0:16:01:bd:51:6d:8d:ab:87:c6:cd:2f:03:0d:19:f5:
         20:35:b7:a0:52:72:a0:87:b5:9e:ad:d4:b7:3d:9d:c7:74:fc:
         b3:49:55:58:08:fa:e0:c1:92:a1:c4:6d:b0:1e:8b:3d:a8:f0:
         8c:a7:b3:89:9a:6a:98:da:f7:b7:c5:7f:04:c2:27:f0:31:b3:
         63:6d:39:e0:88:22:fe:18:90:85:8b:83:fc:68:7b:64:e3:76:
         2c:22:2c:77:84:6e:34:18:42:5c:ca:0f:35:76:f4:c4:00:2e:
         93:56:ce:17:db:ec:87:b7:a3:37:85:c6:7f:96:50:b0:c8:f2:
         f8:81:60:58:e1:b8:20:af:f6:7e:2b:76:32:bd:a4:9d:ae:a5:
         80:65:e6:1d:f1:bb:55:92:04:b7:2b:b5:a2:a5:82:51:00:63:
         96:d2:d1:4a:65:b3:9e:fa:91:3f:b0:ff:a3:0a:cd:5a:24:62:
         e5:d5:ff:6d:d5:d5:07:34:f7:a5:7f:5e:89:21:b0:e3:d1:22:
         ee:1c:f5:15:0d:ec:33:9e:2e:0d:e3:42:62:b9:ae:f6:ff:57:
         73:ad:46:59:ca:2f:d5:be:c1:8f:03:9a:01:5a:0a:87:c1:e5:
         51:52:5d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:02:33 2025 by rpki-client on console.sobornost.net