Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
File:                     KxftsiWoqa1OodSC-tfzt4JwvaQ.mft (raw, json)
Hash identifier:          rPxXc57WKrqkzwFiaVBKpe/hHkNTm5mP7ADI38KXzow=
Subject key identifier:   D2:E7:90:2B:7D:BA:95:97:4B:C4:4C:44:86:71:84:62:C0:7E:1E:E2
Authority key identifier: 2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4
Certificate issuer:       /CN=F36746EBAF/serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
Certificate serial:       04F2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
Manifest number:          04F1
Signing time:             Sat 26 Apr 2025 02:45:17 +0000
Manifest this update:     Sat 26 Apr 2025 02:45:16 +0000
Manifest next update:     Mon 28 Apr 2025 02:45:16 +0000
Files and hashes:         1: KxftsiWoqa1OodSC-tfzt4JwvaQ.crl (hash: JtWyRV5jwBe/l4tK6SoSNAWF/pAgVRrSyzqAwCb0h20=)
                          2: 0755AE8C5E4911EC910446DF5A40D577.roa (hash: AItjzWPSlit+SXvmdCFmobWIhqJxwMx7F/NvBd+HRhQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1266 (0x4f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36746EBAF, serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
        Validity
            Not Before: Apr 26 02:45:16 2025 GMT
            Not After : Apr 28 02:45:16 2025 GMT
        Subject: CN=680c48bd-6cc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:00:b1:67:f0:af:e5:dc:62:cf:52:a5:76:ea:
                    53:80:8a:b1:b3:09:1e:dd:12:34:e1:21:19:2e:18:
                    4f:4f:ca:da:71:f3:69:86:84:f0:a7:a4:de:d0:1b:
                    36:45:99:70:3f:6d:fd:9b:1e:60:a9:e0:e9:a7:86:
                    c0:85:7b:4d:91:b7:7c:68:27:43:f4:d0:4c:d8:99:
                    74:ee:b1:a8:da:17:15:51:7e:18:e3:c7:ab:ab:1c:
                    17:b2:19:fb:7a:39:54:e2:cc:62:d1:c0:f8:03:d0:
                    a7:44:a7:1f:b9:1e:ab:18:e4:e1:0d:d6:67:6f:ea:
                    88:36:84:0b:99:6b:6d:49:f1:cb:df:30:3e:8a:bb:
                    93:a5:32:cc:3c:4d:3b:7a:83:c0:f5:d7:61:8e:b4:
                    a2:84:37:77:4f:f5:ab:01:34:ac:b9:cf:91:40:2a:
                    61:f7:33:9f:82:6a:83:ed:3f:55:b1:e3:64:2f:8a:
                    1e:00:77:9a:12:dc:0b:2c:16:46:5f:db:1c:30:73:
                    f6:7f:b6:10:3d:4f:c9:4f:3a:4c:99:20:e0:65:10:
                    89:55:df:d1:b2:e4:7c:1b:28:18:9c:04:46:cc:0b:
                    5a:16:02:12:2d:1f:35:41:5e:b1:ca:44:7a:9c:e6:
                    13:53:1f:30:b6:5b:0a:15:00:79:9d:05:15:0e:6c:
                    a3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E7:90:2B:7D:BA:95:97:4B:C4:4C:44:86:71:84:62:C0:7E:1E:E2
            X509v3 Authority Key Identifier:
                keyid:2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:3d:f8:db:02:d6:e8:e0:ad:a7:d6:be:26:89:8c:0a:99:f2:
         53:03:1f:39:a6:3a:30:0d:d6:6e:1f:0b:42:b7:c3:48:73:f3:
         75:67:00:bd:27:5d:1f:c0:0f:e9:03:a1:ef:57:82:39:59:ad:
         81:6f:62:ab:50:5e:6c:06:27:a9:eb:b4:08:fb:87:41:a8:38:
         05:c7:ac:1c:20:cf:d0:d5:54:b4:f9:ab:be:f9:11:cf:45:ab:
         b6:5b:3f:e8:52:f4:d2:31:88:a3:c4:8b:ba:aa:ba:23:8a:3a:
         63:dc:d4:a8:56:70:62:95:a7:09:33:f9:f3:c4:67:9b:8f:d6:
         df:af:bd:6f:4e:cc:ed:5f:0f:88:7e:94:ed:e9:63:de:b6:46:
         e0:73:dd:1f:c0:8c:d4:55:41:da:4f:88:eb:ad:58:9c:12:ab:
         42:ee:4f:31:23:0c:44:cd:60:49:ed:25:18:6c:7b:77:d2:b0:
         85:a4:3b:e1:c1:a6:7d:e7:b1:8c:24:55:c9:e1:8a:65:fc:01:
         85:c8:25:61:96:e2:75:fb:be:a3:ec:c9:0b:34:b7:71:3d:35:
         57:03:93:9f:93:37:8e:1a:48:e3:b6:6d:9c:de:77:cf:9c:ca:
         2a:69:58:2f:fe:b1:ba:9a:69:81:4f:6a:2a:0f:96:89:b2:be:
         d5:5e:8c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:17:14 2025 by rpki-client on console.sobornost.net