Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
File:                     oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft (raw, json)
Hash identifier:          CRTL6dO4JfrGjLpxNtqW2lwj2fxoAy4YadQHXWmcKHM=
Subject key identifier:   8C:4C:9A:9E:3C:B2:65:EB:C8:0D:C6:77:2B:A2:3E:B4:73:FC:C9:AE
Authority key identifier: A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C
Certificate issuer:       /CN=F36776F1AR/serialNumber=A0F7897F67587CA645B35141010A5AA1A3057F6C
Certificate serial:       AE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
Manifest number:          A3
Signing time:             Sun 27 Apr 2025 05:05:40 +0000
Manifest this update:     Sun 27 Apr 2025 05:05:39 +0000
Manifest next update:     Tue 29 Apr 2025 05:05:39 +0000
Files and hashes:         1: oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl (hash: hpcTX6NZIjmEd0LwGVxicJLZUy00x0Wr3anY/dwNaAc=)
                          2: F891118CBE3711EF94207A53762E951A.roa (hash: /BSsoHmVYWT3uZmtUs29hLyCS4VFjhVXegvsldImsTY=)
                          3: F4E3CCE6C2FB11EFB2921875762E951A.roa (hash: em5+W6hV5wb4UsoaGm9yNPcphUOmzIzRc/FvZi8E2vQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
                          rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36776F1AR, serialNumber=A0F7897F67587CA645B35141010A5AA1A3057F6C
        Validity
            Not Before: Apr 27 05:05:39 2025 GMT
            Not After : Apr 29 05:05:39 2025 GMT
        Subject: CN=680dbb24-5f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ed:9e:1a:ef:9c:75:e0:e0:31:d1:3c:bb:44:
                    db:c1:51:62:23:b7:8f:9c:6b:b6:bd:0b:79:8f:5b:
                    c2:d8:6f:62:6f:1e:32:c6:93:4c:bd:cf:df:47:52:
                    28:26:20:ee:75:be:d2:d5:60:bb:e9:c4:e3:36:36:
                    12:c7:f9:dd:b0:5c:b3:16:b2:26:c3:1b:30:9d:80:
                    9e:67:60:2c:46:22:eb:a1:ed:32:62:6c:4f:c9:80:
                    3a:00:61:69:a1:7b:49:07:de:4a:15:e8:e1:3d:54:
                    df:2f:ba:ba:61:b5:30:e7:e8:40:89:97:b2:12:33:
                    1e:d3:b2:e3:f5:d3:6f:a5:e7:55:89:80:9e:db:89:
                    fc:0b:28:fc:10:42:07:53:2a:77:29:73:0f:08:5d:
                    18:53:b5:17:00:3c:6b:f1:53:63:6e:d4:8e:77:58:
                    40:c6:b1:34:da:82:c9:12:ed:67:25:b0:9a:21:61:
                    52:50:be:0f:04:21:8d:61:3b:96:15:03:c3:e0:65:
                    07:83:a4:0a:ad:8e:e5:36:ed:7f:00:fb:14:4d:02:
                    e7:42:95:3f:7c:41:ec:41:18:4b:b0:ba:ee:67:f5:
                    7e:91:e9:e4:f4:56:e1:a3:c0:e1:fa:5a:4d:d6:bd:
                    c0:f4:bc:ee:e2:5f:45:34:06:25:20:9b:36:d7:3d:
                    c1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4C:9A:9E:3C:B2:65:EB:C8:0D:C6:77:2B:A2:3E:B4:73:FC:C9:AE
            X509v3 Authority Key Identifier:
                keyid:A0:F7:89:7F:67:58:7C:A6:45:B3:51:41:01:0A:5A:A1:A3:05:7F:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oPeJf2dYfKZFs1FBAQpaoaMFf2w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36776F1/592DF6A2B89511EF93752D6B762E951A/oPeJf2dYfKZFs1FBAQpaoaMFf2w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:be:19:34:cd:78:de:7b:fd:99:88:fd:a4:49:04:3b:b5:6a:
         df:8d:d8:ab:b9:02:de:61:2e:f7:c0:f7:37:02:ba:1a:cd:54:
         03:75:53:45:c3:db:b9:59:e7:51:d0:b6:13:a6:0d:7f:c2:13:
         c5:c5:16:c4:0c:5b:5c:30:db:f2:c4:b8:46:7f:0a:30:1c:7e:
         d7:bd:15:19:c9:9f:5b:2e:6e:03:57:ba:f4:55:98:a6:dd:62:
         2b:e4:1f:9e:0f:53:60:ca:44:fa:fa:cd:59:ff:cf:eb:53:ba:
         83:70:20:d2:c9:5e:2d:4e:57:6c:9a:51:0e:55:34:1f:4c:b1:
         4b:35:d0:3b:da:6f:7b:12:40:cc:d9:c2:ba:b7:75:90:81:05:
         d6:3b:a4:c0:7a:dc:e2:2c:4a:6a:f0:6d:a1:6d:22:ab:2a:af:
         94:bd:45:6c:6e:7b:bf:9c:53:fd:5a:89:cd:9e:e7:9c:3e:19:
         87:03:3c:72:37:3c:2c:77:fd:c6:8c:69:90:32:1f:83:40:6f:
         82:29:85:5b:f7:64:d5:28:09:70:84:2e:1b:f1:24:ee:c4:24:
         2a:34:db:5c:38:19:60:d9:f5:a1:9e:4c:ed:20:30:12:e9:fe:
         6a:6a:d5:8f:05:82:27:ee:d0:02:36:c0:55:8d:48:3c:8f:9f:
         5e:b1:4c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:38 2025 by rpki-client on console.sobornost.net