Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
File:                     yD3GjOK-QyU6qlUariL5Wh8drSs.mft (raw, json)
Hash identifier:          bqv162dWdKjKfzx3oXRjcIZ9B3ItXuGKqTwuQqNS+yw=
Subject key identifier:   F7:81:0D:D6:EA:8C:C1:09:E0:2B:3C:92:2C:C3:C1:7E:10:A7:D1:3C
Authority key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
Certificate issuer:       /CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Certificate serial:       040E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
Manifest number:          040C
Signing time:             Sun 27 Apr 2025 03:06:00 +0000
Manifest this update:     Sun 27 Apr 2025 03:05:59 +0000
Manifest next update:     Tue 29 Apr 2025 03:05:59 +0000
Files and hashes:         1: yD3GjOK-QyU6qlUariL5Wh8drSs.crl (hash: TqaZ5uR3KMz1fQU6ScWyLQOTm1wp2m++5hiuvj17/Ag=)
                          2: B1BFBFEA278711ED8808E3CDF1222468.roa (hash: Assvrj8OD6s30X7gj/5howMI7VisH2Gq7WxHn9j6+kQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                          rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1038 (0x40e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671DBDAR, serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
        Validity
            Not Before: Apr 27 03:05:59 2025 GMT
            Not After : Apr 29 03:05:59 2025 GMT
        Subject: CN=680d9f18-e164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:54:c6:ba:df:d1:a3:d3:ed:55:0a:69:df:5c:
                    30:93:fc:a8:5b:aa:e2:97:05:77:fb:17:d2:b0:ef:
                    d9:60:28:46:5e:cc:b4:70:4a:8f:13:5d:ce:3e:71:
                    21:f4:ac:6e:71:0d:8a:d9:5c:59:c1:9e:da:e9:0c:
                    bf:80:ce:38:1e:1d:cf:af:38:45:0a:80:3f:d4:e9:
                    dd:e2:23:3c:18:5b:91:83:5a:47:4a:52:6e:3e:6f:
                    8a:28:d2:9f:3a:00:5b:29:30:9b:92:09:db:bc:5e:
                    e0:b0:4e:29:ee:06:03:12:32:2d:47:c4:de:33:e3:
                    9f:f8:4b:4d:7d:c0:3e:80:ef:29:70:30:a9:9e:97:
                    d5:36:d3:41:b4:ac:e5:82:4a:d7:bd:12:7c:68:d3:
                    e3:bc:f9:5c:5f:94:8c:40:bb:a8:50:c9:e6:0c:d2:
                    f1:49:36:61:37:80:ce:eb:38:cf:a3:8f:bc:92:7b:
                    22:9d:4f:b5:3f:36:f3:87:56:8c:0e:76:8e:5a:4a:
                    aa:82:63:a2:c6:24:b0:18:22:07:3c:c1:91:7e:a6:
                    5e:7d:8a:a2:53:90:92:c5:36:ab:71:be:a4:30:0e:
                    ea:36:76:45:47:61:5f:5f:69:28:eb:cf:14:c5:bb:
                    7c:2c:8d:d6:82:a9:68:1b:91:80:66:75:e1:37:dd:
                    b4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:81:0D:D6:EA:8C:C1:09:E0:2B:3C:92:2C:C3:C1:7E:10:A7:D1:3C
            X509v3 Authority Key Identifier:
                keyid:C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:0e:d9:f8:72:6e:98:05:f6:26:a1:2e:82:b1:f6:99:84:b0:
         db:f6:13:20:55:44:36:df:8d:e0:77:a3:b6:67:50:e0:ed:cf:
         8c:af:99:0f:9a:5f:b0:df:db:27:ad:f3:27:2d:00:28:f9:ef:
         aa:d5:b0:7e:ef:43:11:31:04:e0:19:82:4a:0f:88:2c:1e:16:
         1d:ac:78:ed:9a:16:4a:66:3b:df:5a:17:86:af:1f:c0:cf:5f:
         46:3b:fc:ad:a4:30:64:63:7b:4f:4a:b2:c1:ed:1f:d7:ef:a1:
         48:ab:1d:26:69:e2:0c:d1:81:49:ef:33:0f:9c:6e:be:56:42:
         a6:ea:36:b6:ce:a5:4c:75:f8:3d:be:a3:d0:f3:40:a8:7f:fc:
         31:78:9c:ff:d5:81:e5:35:ae:c6:18:4e:11:f7:51:8f:4a:6f:
         ac:22:12:f9:ae:cb:d6:6a:ab:95:d4:fa:46:72:95:e0:c3:96:
         e8:8d:04:e7:73:d0:90:9e:68:b5:d4:d5:2f:ac:a5:42:4e:2f:
         ad:de:fe:cd:a9:2b:08:40:5a:d5:78:bd:59:48:f7:d5:90:45:
         13:ae:18:02:56:0b:07:bc:4e:c8:ae:53:34:9f:0b:fd:67:61:
         11:f7:91:6c:5b:cc:59:24:ce:ee:e5:6b:7a:7f:37:e2:b8:79:
         e9:97:71:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:43 2025 by rpki-client on console.sobornost.net