Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
File:                     fitobmq6qC0Tpu6fS-fmmmuN_3k.mft (raw, json)
Hash identifier:          l3fiYq5NISCoCr72K+nGW2QZ6os1TYMf0UOx9bmcK9A=
Subject key identifier:   16:51:92:2E:89:2E:A9:3A:8B:1F:66:A2:11:E8:2C:23:50:DD:B1:9D
Authority key identifier: 7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79
Certificate issuer:       /CN=F366AE59AR/serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
Certificate serial:       018F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
Manifest number:          018E
Signing time:             Sun 27 Apr 2025 04:27:11 +0000
Manifest this update:     Sun 27 Apr 2025 04:27:10 +0000
Manifest next update:     Tue 29 Apr 2025 04:27:10 +0000
Files and hashes:         1: fitobmq6qC0Tpu6fS-fmmmuN_3k.crl (hash: a+IYmNHPhzXjTd1KomLHEi6fcLUF/mbhycbZ9DPdTyk=)
                          2: D55071E2F57711EE9C79B75F775412E6.roa (hash: JwIZwppDkh7nSLuQ5FmIaDKSeTXhtwFxqvQi4jhkWJQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                          rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366AE59AR, serialNumber=7E2B686E6ABAA82D13A6EE9F4BE7E69A6B8DFF79
        Validity
            Not Before: Apr 27 04:27:10 2025 GMT
            Not After : Apr 29 04:27:10 2025 GMT
        Subject: CN=680db21f-9b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f4:85:ee:5b:d4:06:fb:46:d1:49:79:6e:43:
                    e1:5e:57:f0:38:82:7e:b5:ca:2a:89:c3:50:d3:a0:
                    86:ec:35:fe:5e:bf:e3:d6:26:85:3f:e2:c3:6a:2e:
                    c0:1f:c8:b8:4e:74:0f:73:24:f4:ba:4c:9e:c3:75:
                    16:99:7b:79:c2:e6:07:01:44:fa:2f:48:9b:90:48:
                    2b:5f:8c:42:30:c7:de:8f:b5:a2:46:fd:b4:cc:a2:
                    e9:0f:88:b1:c4:d0:4e:8b:8c:64:c7:eb:38:6c:2d:
                    53:fa:da:65:6b:e6:6f:68:bf:a9:13:04:4d:b4:13:
                    62:ea:05:fa:27:af:da:ff:0f:17:60:1a:1c:fc:6d:
                    00:18:51:2f:98:4a:f1:7f:44:73:d9:9b:84:7c:52:
                    7a:d5:c4:9a:dc:f6:2d:bd:52:22:02:55:80:d8:dc:
                    97:e1:4e:06:8c:e7:69:67:6f:d3:c0:a1:e9:f5:b9:
                    78:bc:2a:75:e6:1a:27:ca:67:8e:6b:97:1f:d7:f1:
                    68:e9:f8:d8:14:b3:99:ed:51:e2:15:92:02:a6:f9:
                    f7:f0:5a:5c:8d:6e:ac:44:7d:62:1a:52:44:cc:a5:
                    1d:d0:4a:b9:4d:50:5d:0a:49:56:21:af:08:ca:fa:
                    f6:12:45:87:b8:f0:29:d6:45:68:21:d4:1b:a9:72:
                    a4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:51:92:2E:89:2E:A9:3A:8B:1F:66:A2:11:E8:2C:23:50:DD:B1:9D
            X509v3 Authority Key Identifier:
                keyid:7E:2B:68:6E:6A:BA:A8:2D:13:A6:EE:9F:4B:E7:E6:9A:6B:8D:FF:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/fitobmq6qC0Tpu6fS-fmmmuN_3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366AE59/CF5E36C2F57511EEA00BCD4F775412E6/fitobmq6qC0Tpu6fS-fmmmuN_3k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:c6:da:95:e0:1a:90:a1:87:db:60:9e:85:ce:ae:ad:54:e8:
         5e:8e:44:a9:e5:96:83:1d:9d:51:3a:27:99:e9:df:01:b9:ff:
         f6:2b:5c:af:ec:8c:4d:6d:ae:c7:51:af:6d:d2:c2:53:fa:10:
         fc:54:f6:0c:5d:81:2c:c8:b8:8b:18:61:68:ae:ed:e1:95:4d:
         71:c8:41:a3:76:91:2c:6e:cc:62:41:a5:ea:06:74:bd:17:53:
         da:4b:b8:26:ed:b8:cd:6f:0e:69:7a:cc:cf:27:fa:13:bc:e5:
         cb:6b:8d:47:a7:71:21:2e:20:2e:f5:df:c2:85:40:11:5e:05:
         a1:87:04:00:54:5a:67:e4:d0:52:ce:68:d0:19:9f:f9:41:3e:
         08:b3:1e:07:9d:4c:de:de:5b:91:88:10:8f:d5:4d:84:f5:2c:
         2d:76:9c:4d:a3:17:65:65:dc:e6:8c:8d:fb:ca:02:a4:b7:63:
         bd:f0:d8:c6:d6:c4:1a:0b:64:ab:04:48:2d:b2:f3:e1:4d:d3:
         68:54:53:5d:e2:86:90:dd:1e:c0:2d:55:25:ea:a5:99:c8:af:
         3d:7d:cb:14:cd:f5:8d:d2:10:05:30:78:18:59:da:74:e6:3e:
         5d:23:9f:f4:7b:a7:57:5f:50:07:af:e8:61:2a:05:7b:22:af:
         f9:9a:0d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:38 2025 by rpki-client on console.sobornost.net