Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.mft
File:                     jXM8lU5mTeBH--8DjdEt57DxtNY.mft (raw, json)
Hash identifier:          sqkJ84s0aTWX7hf9Lk1tBgrFhDzu0xBKPTra2DXHyr0=
Subject key identifier:   71:51:A1:B4:E2:5A:60:AA:D2:F1:CE:A3:48:E7:64:D2:9D:E1:85:79
Authority key identifier: 8D:73:3C:95:4E:66:4D:E0:47:FB:EF:03:8D:D1:2D:E7:B0:F1:B4:D6
Certificate issuer:       /CN=F366C302AR/serialNumber=8D733C954E664DE047FBEF038DD12DE7B0F1B4D6
Certificate serial:       0185
Authority info access:    rsync://rpki.afrinic.net/repository/arin/jXM8lU5mTeBH--8DjdEt57DxtNY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.mft
Manifest number:          0183
Signing time:             Sun 27 Apr 2025 04:28:57 +0000
Manifest this update:     Sun 27 Apr 2025 04:28:56 +0000
Manifest next update:     Tue 29 Apr 2025 04:28:56 +0000
Files and hashes:         1: jXM8lU5mTeBH--8DjdEt57DxtNY.crl (hash: vAz+9KjQtEqqkT1pOoWYK4nVjSBsLJw1/qDc/lQnU9I=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.mft
                          rsync://rpki.afrinic.net/repository/arin/jXM8lU5mTeBH--8DjdEt57DxtNY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 389 (0x185)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C302AR, serialNumber=8D733C954E664DE047FBEF038DD12DE7B0F1B4D6
        Validity
            Not Before: Apr 27 04:28:56 2025 GMT
            Not After : Apr 29 04:28:56 2025 GMT
        Subject: CN=680db289-cd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0b:10:15:e1:cd:61:5e:66:14:da:20:05:f6:
                    46:4b:eb:8f:e4:1c:d0:a5:1f:04:b4:ab:b2:f1:e6:
                    d1:10:b6:68:aa:fa:5a:f6:1a:6c:71:7e:ec:da:eb:
                    c2:49:fa:4b:e3:b2:c8:93:0a:42:df:d3:71:2f:a1:
                    30:14:5c:36:ed:3e:20:ae:50:4d:d1:91:55:e6:73:
                    97:85:18:43:ed:60:52:36:1f:ab:dd:a4:e9:96:31:
                    bc:bc:c9:a6:83:e8:f0:c2:bc:3c:93:aa:46:fd:a4:
                    ae:42:c0:e4:90:cc:58:ef:88:8a:aa:84:e4:18:41:
                    52:63:be:71:16:75:0a:3b:8c:00:6d:cf:28:6b:07:
                    9d:9f:2e:54:3a:58:8c:a3:c6:ff:da:a9:2f:ab:83:
                    2f:d6:28:dd:47:08:49:d0:02:2d:e7:17:82:08:b1:
                    60:c7:8f:0a:61:12:43:e5:2c:bc:c8:74:7f:5a:30:
                    b9:43:a4:3e:ba:e8:ef:d0:1e:55:99:cf:22:fb:65:
                    30:7c:d3:9b:ed:a6:61:ea:e2:74:7e:8e:f2:62:ed:
                    a7:2d:e2:5c:0f:74:e6:73:b3:7b:c6:b8:60:28:df:
                    52:fb:20:f0:60:55:b8:b7:ef:eb:3f:8e:c7:9a:55:
                    9e:62:bd:57:5c:a6:cf:28:3f:ba:21:d3:48:33:3a:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:51:A1:B4:E2:5A:60:AA:D2:F1:CE:A3:48:E7:64:D2:9D:E1:85:79
            X509v3 Authority Key Identifier:
                keyid:8D:73:3C:95:4E:66:4D:E0:47:FB:EF:03:8D:D1:2D:E7:B0:F1:B4:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/jXM8lU5mTeBH--8DjdEt57DxtNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:6f:52:e7:31:03:a1:74:6e:c5:99:d8:16:f7:fb:2b:25:7b:
         1b:f7:b2:7a:8e:29:79:00:e7:18:3f:97:9b:fb:ac:de:d9:19:
         f3:03:10:8a:7d:e5:48:52:40:9d:fb:a2:8b:9b:a4:35:eb:50:
         bf:c9:b7:6f:11:f0:9d:be:85:4a:81:4b:85:36:65:86:d5:b2:
         0a:28:a9:6c:e3:c8:10:18:0f:89:0f:39:7e:bb:91:43:52:a1:
         fe:c4:c1:a8:c8:76:c9:58:dc:64:d6:68:9b:22:04:df:e5:49:
         a5:27:04:6b:b4:95:4b:71:50:02:63:a0:db:95:00:92:6a:46:
         97:7f:2e:6a:61:d9:00:0d:f4:1d:5d:bc:af:1c:dd:ed:d2:24:
         3e:47:9b:a0:6c:5f:96:a3:c0:29:0f:cd:c7:91:1d:10:a1:ed:
         27:54:d7:2f:f0:4d:b8:f6:a2:b0:9e:aa:bb:7a:3a:7b:94:a9:
         92:e4:91:ae:b1:45:22:bf:16:ce:1b:03:fa:2c:08:22:82:67:
         fd:94:10:35:18:af:22:60:91:c1:8d:21:d7:4a:4e:60:39:0a:
         08:69:ba:8e:cf:49:21:2f:af:bb:84:0d:d4:6a:ec:e3:62:b0:
         ce:45:f1:e8:05:58:ea:4f:5e:64:bf:6d:ac:45:3e:12:25:d0:
         5a:18:94:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:38 2025 by rpki-client on console.sobornost.net