Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
File:                     fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft (raw, json)
Hash identifier:          6mr8uxhRpi0EQUNOR2GCdsFnZm5JVxsJTZ7jUxZU3y8=
Subject key identifier:   DC:84:B9:68:2F:88:3D:D3:4C:F5:30:6F:91:40:BD:AD:26:F6:B3:27
Authority key identifier: 7D:D5:23:58:2E:85:5A:9F:9A:64:76:04:04:13:BE:8E:C6:C0:B6:57
Certificate issuer:       /CN=F367F176AF/serialNumber=7DD523582E855A9F9A6476040413BE8EC6C0B657
Certificate serial:       0564
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fdUjWC6FWp-aZHYEBBO-jsbAtlc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
Manifest number:          0563
Signing time:             Fri 25 Apr 2025 02:29:59 +0000
Manifest this update:     Fri 25 Apr 2025 02:29:58 +0000
Manifest next update:     Sun 27 Apr 2025 02:29:58 +0000
Files and hashes:         1: fdUjWC6FWp-aZHYEBBO-jsbAtlc.crl (hash: jAo2L47aT9UGf0IgKqCk+JcYo0t3ILBSPZKgs46QFA0=)
                          2: D12E90E00A1E11ECA685D114D8A014CE.roa (hash: UQyl88URJgmyqxKhcag2REopBe8MadhSu1C5UDauq54=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fdUjWC6FWp-aZHYEBBO-jsbAtlc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1380 (0x564)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F176AF, serialNumber=7DD523582E855A9F9A6476040413BE8EC6C0B657
        Validity
            Not Before: Apr 25 02:29:58 2025 GMT
            Not After : Apr 27 02:29:58 2025 GMT
        Subject: CN=680af3a7-b6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4a:cd:28:5c:1b:a7:5b:be:a4:eb:31:27:e5:
                    7b:16:ec:dd:b0:9d:d8:51:a0:a6:df:1a:e9:ec:86:
                    40:08:5e:a2:30:7c:9e:26:a3:23:ce:c1:d2:fd:5b:
                    f9:b5:be:b1:4b:d7:66:9f:f8:82:cd:ca:7c:55:8b:
                    23:ea:47:64:21:85:bc:cf:ab:fa:24:40:ee:b0:02:
                    b3:dc:6b:7d:cc:c0:6b:7b:e6:2e:54:82:c8:6e:f8:
                    49:26:da:2b:c5:42:e9:12:f3:18:bb:d8:9d:96:57:
                    6b:04:22:b9:ea:9d:f6:83:02:22:33:30:2f:42:45:
                    75:fa:4a:5a:b5:f7:a6:5e:1c:43:21:57:3e:aa:9d:
                    c6:2c:27:03:16:55:55:37:01:f6:6c:c5:97:05:15:
                    46:96:a6:82:ac:e1:24:b8:5d:60:13:18:31:69:22:
                    c8:3b:1b:cc:7b:8d:2b:02:57:16:39:6d:55:70:da:
                    55:9b:d4:cf:f6:48:05:c7:43:f3:82:b9:8f:c1:cf:
                    1a:0a:a8:b3:63:e3:77:ee:1d:3b:db:69:b3:ad:25:
                    5e:5e:e3:6e:51:29:bb:9f:21:00:b7:b2:2e:01:bb:
                    0e:a8:35:93:e6:c6:9a:be:2b:35:1c:56:7f:83:12:
                    bf:ab:a2:4a:06:28:ad:64:95:b4:bb:b4:04:b8:5b:
                    73:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:84:B9:68:2F:88:3D:D3:4C:F5:30:6F:91:40:BD:AD:26:F6:B3:27
            X509v3 Authority Key Identifier:
                keyid:7D:D5:23:58:2E:85:5A:9F:9A:64:76:04:04:13:BE:8E:C6:C0:B6:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fdUjWC6FWp-aZHYEBBO-jsbAtlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F176/947F74C4056511ECAECFA729D8A014CE/fdUjWC6FWp-aZHYEBBO-jsbAtlc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:a0:16:33:c2:a2:de:48:a5:e8:5e:2d:a4:a1:4a:08:b4:13:
         79:e0:2c:a5:4c:fd:41:52:ba:52:51:14:61:b0:52:03:0a:6d:
         a0:19:b1:eb:4a:4c:89:4f:a9:83:17:e6:57:d8:fe:85:8a:a0:
         26:06:4d:08:93:42:28:ac:76:eb:d6:de:28:d3:92:82:d5:4a:
         71:92:da:bd:51:a7:e7:c2:38:fa:75:9e:72:bc:55:39:ae:bc:
         ed:b4:cf:4a:b6:92:6e:c0:7a:d6:1c:ff:4e:a2:b7:6b:f6:fa:
         07:4d:fa:e8:06:b4:e2:bf:63:28:38:30:47:0d:53:30:dc:74:
         90:2f:6a:79:99:fc:4a:8d:f8:1d:6a:68:cd:a8:eb:07:76:2e:
         81:9c:0a:89:22:62:de:6e:51:32:0b:b0:5c:06:6c:1f:2e:c3:
         8e:9b:da:58:65:b2:2e:f6:fd:bd:cc:da:b0:e8:2b:24:c9:6b:
         3a:af:0f:9f:0e:c3:58:f3:35:c6:f3:df:62:d9:b3:29:0b:93:
         90:e2:00:be:57:0b:57:03:54:68:04:97:f2:8e:71:d7:c0:c7:
         80:ad:5f:ce:06:ba:87:b5:96:d0:be:e2:6f:8d:55:4d:66:42:
         c8:a1:1e:1a:16:1f:2b:09:fa:2b:a5:e5:82:87:74:eb:cb:33:
         48:cb:92:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:13 2025 by rpki-client on console.sobornost.net