Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.mft
File:                     VnyvmRgrnidPuabWkIh4qwHDQoE.mft (raw, json)
Hash identifier:          CH0xyCp/YB43Yn6boBAGPH8UAKasj5rVP9xCu8shgds=
Subject key identifier:   F1:AE:B9:6C:1C:3F:6E:F0:79:48:3F:51:A0:64:D0:15:3F:9C:D2:F2
Authority key identifier: 56:7C:AF:99:18:2B:9E:27:4F:B9:A6:D6:90:88:78:AB:01:C3:42:81
Certificate issuer:       /CN=F367EEA2AR/serialNumber=567CAF99182B9E274FB9A6D6908878AB01C34281
Certificate serial:       029C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VnyvmRgrnidPuabWkIh4qwHDQoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.mft
Manifest number:          0299
Signing time:             Mon 28 Apr 2025 03:57:39 +0000
Manifest this update:     Mon 28 Apr 2025 03:57:39 +0000
Manifest next update:     Wed 30 Apr 2025 03:57:39 +0000
Files and hashes:         1: VnyvmRgrnidPuabWkIh4qwHDQoE.crl (hash: ORqwJ5POumxUiVZeVbdkp2sGB+TDafSJX4DMR1H2mf4=)
                          2: 3FB5FE122F6711EE90A2841B4AD9E6FC.roa (hash: WJqH0lra+XjbqtJEVmP0k9XRwahFYNZjcO/TJSOHaQA=)
                          3: C069B486B24311EEB2664F99775412E6.roa (hash: NeIq4SLTxB0EhIQzCliNvAbug3avKsYrABorphJD/7A=)
                          4: E71E5D4C2EB411EEA206B6794AD9E6FC.roa (hash: hbtcT6eA8KL9XUcRwzBfgyp8AVJuRXtNG7MjkLclPW8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.mft
                          rsync://rpki.afrinic.net/repository/arin/VnyvmRgrnidPuabWkIh4qwHDQoE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367EEA2AR, serialNumber=567CAF99182B9E274FB9A6D6908878AB01C34281
        Validity
            Not Before: Apr 28 03:57:39 2025 GMT
            Not After : Apr 30 03:57:39 2025 GMT
        Subject: CN=680efcb3-bb39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:82:d6:38:67:cf:f7:1f:dc:c1:57:ad:14:4d:
                    0e:c4:c7:bd:68:6c:0d:ba:5e:52:48:21:6d:49:43:
                    79:11:37:42:cb:31:ea:a1:a6:40:f3:a9:9e:66:3e:
                    97:58:5a:c1:bf:c3:e5:5a:b2:97:bc:fd:da:f6:ba:
                    07:22:e4:95:b1:63:e6:49:d1:25:cf:44:f2:4d:e5:
                    ca:8e:95:78:bd:b6:86:37:52:4c:84:47:ab:15:09:
                    c0:23:1e:4d:ba:26:91:16:11:91:06:c3:6d:25:8c:
                    2d:46:e8:82:64:66:59:02:28:62:f3:32:73:97:54:
                    c4:da:e5:c5:cc:40:86:76:c4:9b:21:c6:11:e8:a3:
                    0c:3b:97:a0:96:54:40:82:ed:df:e0:39:6b:12:88:
                    86:46:64:f7:2e:70:27:33:a2:5b:be:ae:e7:5a:6f:
                    ac:51:3e:4f:c3:2b:00:b9:bc:8f:19:67:f3:6a:b4:
                    34:76:8b:19:61:68:ff:a5:26:42:33:87:b6:75:ad:
                    94:48:b8:f8:e5:e2:c0:3d:20:48:71:5b:bf:1f:e6:
                    a7:52:5d:7d:fa:20:40:17:0d:26:9e:8f:a5:24:cc:
                    0a:ca:11:13:92:11:63:f1:2f:32:5d:ed:03:66:73:
                    9f:93:37:c7:74:8e:fc:9d:ec:e2:2f:89:53:7c:9b:
                    b1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:AE:B9:6C:1C:3F:6E:F0:79:48:3F:51:A0:64:D0:15:3F:9C:D2:F2
            X509v3 Authority Key Identifier:
                keyid:56:7C:AF:99:18:2B:9E:27:4F:B9:A6:D6:90:88:78:AB:01:C3:42:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VnyvmRgrnidPuabWkIh4qwHDQoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/A459C8A22EB411EE89BAC3784AD9E6FC/VnyvmRgrnidPuabWkIh4qwHDQoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:4e:69:e0:1f:1f:cd:8f:f8:7b:cb:76:76:b9:d1:44:fd:23:
         fa:5b:10:85:ef:45:a0:45:09:65:a8:61:21:69:16:5b:d4:9e:
         0e:df:37:38:d9:12:97:a2:8d:8d:7f:51:67:d9:dd:83:06:a0:
         31:f4:ba:43:e8:a7:fd:1c:e6:15:89:30:f5:95:fa:e3:d1:2e:
         30:46:07:37:fb:fb:b5:4a:15:a6:32:09:00:12:41:88:d2:ea:
         51:be:62:d2:7e:13:18:ce:03:ad:a9:24:db:ce:00:ec:d1:5a:
         98:3e:69:cd:f8:37:ea:fe:ae:66:eb:ac:bf:0d:02:7d:9f:1d:
         0d:f9:e9:08:5a:7c:35:56:4d:94:c5:bd:d9:f2:9b:25:a9:b5:
         77:8a:eb:55:93:46:fb:5e:6f:e3:7e:98:99:9c:a6:4e:87:69:
         a9:07:4e:2a:02:ac:37:90:53:f3:61:4f:fd:a4:58:6a:ab:da:
         ed:e6:b8:d8:ba:63:6b:a3:50:ea:ac:c9:44:a2:73:2c:54:08:
         de:82:a5:85:4f:70:86:79:23:72:a2:26:72:dd:99:3b:bb:5a:
         a7:47:3f:07:64:bd:67:37:9f:45:03:5e:d8:05:67:24:2e:33:
         3c:ae:b5:af:53:71:6d:72:bf:d3:88:2f:57:8e:07:ef:4b:e3:
         d7:fb:95:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----