Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.mft
File:                     8H0xNKDMPAQpA5gVfKBVkucrz6s.mft (raw, json)
Hash identifier:          pUtK0ayXfspbJMAthWKq7FilTIEGpxHhjqlfn2kinpw=
Subject key identifier:   EA:5B:44:6A:75:B1:29:84:2E:04:80:41:AF:51:71:D6:5F:1D:7E:1F
Authority key identifier: F0:7D:31:34:A0:CC:3C:04:29:03:98:15:7C:A0:55:92:E7:2B:CF:AB
Certificate issuer:       /CN=F367B3D1AF/serialNumber=F07D3134A0CC3C04290398157CA05592E72BCFAB
Certificate serial:       86
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8H0xNKDMPAQpA5gVfKBVkucrz6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.mft
Manifest number:          84
Signing time:             Sat 26 Apr 2025 05:08:22 +0000
Manifest this update:     Sat 26 Apr 2025 05:08:21 +0000
Manifest next update:     Mon 28 Apr 2025 05:08:21 +0000
Files and hashes:         1: 8H0xNKDMPAQpA5gVfKBVkucrz6s.crl (hash: aP8mTwO0FpQdLCJAbgdwtwBGN2vin9e/oNAQwW7h9k8=)
                          2: 1561360CC12111EFA3DCFAAD762E951A.roa (hash: m44/mD69fqilQr5qakXjjSIMYxNycWbNcH5wLm+55Bk=)
                          3: EBC72644C12011EFA34E2AAC762E951A.roa (hash: FBA7XhhYZKd8zAiwrkhqOdWNSKf23ZrcRwoec3JtQJI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8H0xNKDMPAQpA5gVfKBVkucrz6s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B3D1AF, serialNumber=F07D3134A0CC3C04290398157CA05592E72BCFAB
        Validity
            Not Before: Apr 26 05:08:21 2025 GMT
            Not After : Apr 28 05:08:21 2025 GMT
        Subject: CN=680c6a46-ed17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2d:03:35:66:3b:8d:9b:f5:86:24:9f:64:dc:
                    9e:54:16:84:bf:ce:09:62:f9:36:ab:5b:20:c8:60:
                    01:bd:f9:ec:40:61:15:3b:7c:8c:f5:be:07:cb:66:
                    f3:37:21:e2:e7:ca:8c:c6:07:00:91:6c:43:a0:38:
                    7a:98:b8:8d:0c:00:98:e4:18:30:64:ee:88:c2:ab:
                    79:e5:a4:f8:ad:a6:0a:b6:9d:d7:a4:b7:c5:27:f1:
                    b1:8b:77:35:eb:41:5e:e8:55:19:44:49:77:ac:4f:
                    91:71:1f:e5:e4:d8:23:4f:59:7a:ea:37:6f:1e:8d:
                    8f:ca:0a:b1:b1:0a:5a:9a:7c:b7:f9:a4:45:8a:51:
                    65:eb:12:e8:66:7d:36:f6:b8:8c:e4:af:75:c0:cc:
                    15:0b:5c:75:0d:42:e9:18:16:fa:41:75:87:e5:ae:
                    9d:82:97:8f:43:05:e1:f1:f8:91:f4:20:f0:99:1a:
                    cc:80:83:18:f5:d7:62:b5:e2:6e:73:e9:fa:43:e5:
                    e0:4c:74:6c:f3:45:ec:07:5d:ea:4c:df:bb:33:79:
                    59:7a:48:68:43:fc:8a:ef:c4:7d:01:28:b8:9b:9e:
                    36:9f:da:b1:57:89:a5:3b:90:18:02:0c:36:3f:0e:
                    57:17:89:9b:30:2f:a7:87:25:63:53:1d:e1:42:0b:
                    fb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5B:44:6A:75:B1:29:84:2E:04:80:41:AF:51:71:D6:5F:1D:7E:1F
            X509v3 Authority Key Identifier:
                keyid:F0:7D:31:34:A0:CC:3C:04:29:03:98:15:7C:A0:55:92:E7:2B:CF:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8H0xNKDMPAQpA5gVfKBVkucrz6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3D1/C4C3AEB0C11F11EFA0B58AA4762E951A/8H0xNKDMPAQpA5gVfKBVkucrz6s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:72:e9:4b:d3:b7:f6:44:a9:aa:af:6a:76:e2:c2:57:7c:5d:
         b1:2a:c7:48:25:74:94:6b:8a:33:d9:bf:57:a1:ad:9a:91:49:
         1a:36:69:32:9f:30:c6:2f:b1:7b:a0:02:ad:27:6d:10:01:8d:
         0a:ed:1a:2d:3f:6a:19:b0:37:7d:5b:01:54:19:41:e1:aa:11:
         8d:4b:99:5a:4a:68:af:4e:b1:02:41:f7:54:02:0a:10:f7:7b:
         fc:fb:1e:d3:e2:05:38:03:08:39:41:2f:b0:3c:88:e6:35:a1:
         34:b3:eb:19:9b:a6:ee:24:38:cf:69:cc:d7:05:e0:a6:86:d5:
         1a:07:54:0d:50:25:88:07:0d:30:6e:24:2c:bb:6c:86:34:ed:
         07:d8:c3:a5:c6:45:92:1f:5f:ef:2d:56:6c:fe:a3:31:ce:0a:
         90:3c:d6:95:2c:61:88:7f:bb:1f:55:5c:96:a2:38:48:38:d9:
         96:92:84:0b:8d:10:c9:ab:13:cc:9d:50:34:f7:13:04:33:5d:
         30:e3:c6:a4:a1:56:d4:c7:17:43:a4:06:cb:1e:29:b0:e2:52:
         71:5e:91:d2:e3:03:ec:82:7a:9e:00:0f:0a:4b:5c:e0:68:d1:
         0f:c1:c4:68:98:bd:33:1e:19:05:12:43:59:7b:d2:5c:4b:e2:
         01:ba:ce:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:55 2025 by rpki-client on console.sobornost.net