Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
File:                     JlfA2qREzLm--MKoWGoOdJzqm1I.mft (raw, json)
Hash identifier:          DsGAGUPr18An+eTTlVh4ZmpGU6viOZ0tmLixJHTzInc=
Subject key identifier:   A0:76:C8:1C:25:40:80:6A:68:0C:15:0A:C9:28:71:4C:58:D6:77:0E
Authority key identifier: 26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52
Certificate issuer:       /CN=F3680C14AR/serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
Certificate serial:       0CBD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
Manifest number:          0CBA
Signing time:             Sat 26 Apr 2025 01:04:10 +0000
Manifest this update:     Sat 26 Apr 2025 01:04:09 +0000
Manifest next update:     Mon 28 Apr 2025 01:04:09 +0000
Files and hashes:         1: JlfA2qREzLm--MKoWGoOdJzqm1I.crl (hash: X4q1x67idRQBSobLqM7p4TSp/2uxl2ZDpGjDWFPw4Ic=)
                          2: F4602E7A7D7A11EFAF08EC65762E951A.roa (hash: haY/GuoRZps/E0T0DW+Xq+UzSC93SwDzI9EXCFdllhw=)
                          3: B72B3B7459DA11EC8F6187BD5A40D577.roa (hash: lX5w/V9IxiCR5OIdQ46QZvuvbFy5St8N0ELixEctQHI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                          rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3261 (0xcbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680C14AR, serialNumber=2657C0DAA444CCB9BEF8C2A8586A0E749CEA9B52
        Validity
            Not Before: Apr 26 01:04:09 2025 GMT
            Not After : Apr 28 01:04:09 2025 GMT
        Subject: CN=680c310a-4c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0f:b1:a0:b1:60:a2:34:95:82:18:d5:45:5d:
                    5d:cd:0a:de:8d:6f:cf:38:d7:2b:1c:b5:0f:fb:20:
                    4e:45:7a:c4:78:07:35:e4:ca:e0:d5:bf:5c:07:47:
                    5a:8a:6b:4d:ca:90:1d:dd:0d:3c:54:1c:de:63:70:
                    f5:b6:e1:5f:48:4e:ff:9e:31:91:48:6f:96:d6:44:
                    31:6b:7a:eb:46:a9:76:0f:59:00:e7:06:e9:4c:31:
                    11:ab:04:5a:b6:97:6b:74:02:cb:3b:29:31:7f:b7:
                    ef:cd:3d:32:7c:6a:c0:b3:4b:b3:4a:ee:e8:67:54:
                    0e:4e:7d:d1:01:97:e5:44:28:a9:0a:c5:03:4f:59:
                    1e:34:81:0b:2b:69:95:19:69:d9:d8:fe:73:4e:d3:
                    34:34:3a:62:95:d8:40:c9:ac:e6:dc:52:42:98:c5:
                    c7:4b:57:3d:1e:3f:2b:c2:4c:b9:6d:51:d5:41:d4:
                    c4:fa:19:8b:f2:6a:df:2a:13:f5:a6:bc:cb:da:96:
                    d8:eb:2f:b5:81:c5:a4:74:10:89:d6:c2:41:01:72:
                    61:33:a6:12:cb:c0:90:2b:96:f6:4d:74:e8:ee:33:
                    60:a8:4a:15:66:3d:27:48:48:cb:c9:be:7f:49:ef:
                    d5:27:f8:25:d3:8d:cc:0f:67:89:ae:e0:67:75:d0:
                    08:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:76:C8:1C:25:40:80:6A:68:0C:15:0A:C9:28:71:4C:58:D6:77:0E
            X509v3 Authority Key Identifier:
                keyid:26:57:C0:DA:A4:44:CC:B9:BE:F8:C2:A8:58:6A:0E:74:9C:EA:9B:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JlfA2qREzLm--MKoWGoOdJzqm1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680C14/7707FAD65AE011E69FAE5E32F8AEA228/JlfA2qREzLm--MKoWGoOdJzqm1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:1f:63:7a:fd:e9:aa:6b:67:39:84:9a:45:da:ad:77:d5:da:
         4c:2e:ff:5d:70:0c:01:48:0d:79:a5:80:52:71:74:a5:97:4d:
         01:46:a4:d2:c6:13:f0:79:55:3c:5a:63:ba:e2:4c:78:a4:27:
         c5:c9:bb:84:e5:d7:79:46:61:1c:fc:4c:88:b9:ab:cd:5f:a6:
         2a:70:b5:26:97:d7:53:12:a2:55:70:5f:87:28:e9:f3:49:11:
         4c:a6:29:5d:09:e9:13:d3:b5:cb:d3:c2:60:89:20:bc:7f:21:
         34:62:13:7e:d2:d6:3e:c7:ea:0d:50:9e:13:68:ed:91:23:af:
         db:51:ec:66:98:59:aa:06:21:c8:39:3b:c2:e9:1d:18:f4:b1:
         74:31:8e:39:65:a1:28:a9:0c:f4:48:cd:d2:88:4a:92:e6:6f:
         6c:b9:65:da:d8:3f:d7:e9:ef:25:21:27:07:42:c0:a2:3b:8c:
         2b:f6:8b:bb:de:e3:2a:08:e8:94:38:97:4f:4b:cf:32:2e:8c:
         e8:be:af:c2:f5:9f:3c:d3:50:b6:df:f7:80:fb:d5:a3:3d:06:
         37:ec:92:a4:17:59:fe:fe:f4:1c:83:f6:aa:ec:e6:1f:93:27:
         e6:cc:be:a7:f8:38:bd:89:b5:fc:4c:23:24:c1:54:4a:c6:b9:
         ed:49:3c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:17:15 2025 by rpki-client on console.sobornost.net