Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
File:                     LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft (raw, json)
Hash identifier:          hytRsm73DC+cxHFpxiffcyYkgn71aTqJArHYJbyPeCk=
Subject key identifier:   94:F2:97:E2:D4:DD:BA:4B:A0:4B:FE:DE:C7:E9:F6:46:D5:4E:F3:9A
Authority key identifier: 2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA
Certificate issuer:       /CN=F3675C2BAF/serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA
Certificate serial:       0333
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
Manifest number:          0332
Signing time:             Sun 27 Apr 2025 03:31:55 +0000
Manifest this update:     Sun 27 Apr 2025 03:31:54 +0000
Manifest next update:     Tue 29 Apr 2025 03:31:54 +0000
Files and hashes:         1: LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl (hash: BduP3rSk68iaX3r9kdcd7n3d8g+DP6j+zpL5iZCmbLQ=)
                          2: 9AA2C8F4A72111EFAFB5507D762E951A.roa (hash: BkVr0GywD5ne77AbuN3SlJGoFofC7j3OIJUx5FhoLhs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819 (0x333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675C2BAF, serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA
        Validity
            Not Before: Apr 27 03:31:54 2025 GMT
            Not After : Apr 29 03:31:54 2025 GMT
        Subject: CN=680da52b-41fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c2:69:78:c7:d5:6e:3c:36:1d:80:14:22:bb:
                    99:66:2c:6c:66:dc:84:78:8d:0f:d0:bd:08:a6:8d:
                    d9:a7:27:90:a1:4c:25:96:57:80:38:21:e4:74:99:
                    db:8f:b1:4d:3f:af:42:56:72:36:84:fd:af:33:6a:
                    bf:29:c8:20:5a:b7:94:fa:df:ea:f4:51:1f:46:a7:
                    4a:38:31:51:68:9c:b7:21:89:f0:81:af:a2:b3:df:
                    fb:7e:22:0c:6b:71:fe:87:92:1f:a6:55:82:05:73:
                    8d:60:01:51:b9:60:71:46:01:d1:d0:bc:5e:02:9a:
                    f4:e9:3c:87:18:9e:63:d6:f7:7d:da:fc:07:02:3b:
                    7b:21:ca:18:95:d3:56:83:b4:57:5e:15:31:d3:d2:
                    80:9e:7b:e1:b4:68:b4:4f:41:48:a2:7c:cb:e8:2c:
                    b3:43:52:98:3a:e3:e5:35:33:71:64:83:13:16:68:
                    ba:0d:05:4a:72:79:30:fc:d7:bd:16:c2:9d:7f:18:
                    0b:a2:f8:c0:f0:5f:08:27:cc:c7:89:de:f7:27:d5:
                    73:93:6f:eb:11:aa:9a:e2:88:27:66:07:65:7e:fa:
                    b0:2a:1a:0c:4b:18:b5:c7:0e:c4:f2:ea:dd:94:8f:
                    9e:a3:b8:d1:25:79:ee:53:fd:65:a8:d1:ba:a4:07:
                    04:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F2:97:E2:D4:DD:BA:4B:A0:4B:FE:DE:C7:E9:F6:46:D5:4E:F3:9A
            X509v3 Authority Key Identifier:
                keyid:2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:9d:f3:a9:1a:71:ac:93:02:11:84:d4:79:18:49:7d:33:76:
         61:22:ef:49:57:4b:8c:0b:2c:a3:d3:ed:cc:f9:ae:b4:c8:bc:
         43:76:17:6f:fd:60:09:bb:9e:f8:a1:99:73:67:28:30:e4:37:
         f2:31:9d:ed:c2:bd:d5:78:14:98:93:a3:60:81:0b:fd:9e:3a:
         2e:e6:54:8d:81:68:93:c4:99:06:b4:52:0e:cd:c7:bb:9e:1f:
         e2:76:3a:ec:6b:40:90:6f:f6:f9:d1:be:bc:b8:9c:11:6a:f7:
         53:76:24:f5:4c:04:76:e0:d7:2a:ad:8b:33:df:11:c1:03:03:
         52:6d:00:10:8f:db:54:25:1d:35:d8:f0:75:2e:13:13:a7:31:
         80:48:60:da:a4:3a:55:fc:9c:04:9b:e4:4c:2c:82:de:c1:39:
         9c:5d:1d:60:c7:9e:47:62:1c:73:c3:60:d7:03:c1:13:b6:5c:
         60:f2:f6:45:fe:e3:c8:03:d2:3a:17:65:e7:63:90:24:8d:e9:
         a9:2d:c7:73:f9:5b:21:f2:c5:f5:6e:b7:87:60:fd:5a:21:1c:
         a1:05:01:bc:fa:c0:9d:b5:b6:48:b8:6d:a2:fc:ba:91:c1:7e:
         31:b3:a9:b4:1a:4c:2e:6d:15:70:5e:f2:41:55:5f:b8:06:ac:
         b4:8d:ec:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:43 2025 by rpki-client on console.sobornost.net