Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
File:                     hursQpTfunBFqIZC6d_EVRs0wlU.mft (raw, json)
Hash identifier:          lV2uWw+YcuvXrKR8onGQK3B5DpWYIwAvHFOQVk4A718=
Subject key identifier:   39:7B:71:FB:87:E3:F5:15:9A:B9:2A:1C:04:F0:75:C9:60:9B:24:BA
Authority key identifier: 86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
Certificate issuer:       /CN=F368588EAR/serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
Certificate serial:       0866
Authority info access:    rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
Manifest number:          0859
Signing time:             Fri 25 Apr 2025 01:38:47 +0000
Manifest this update:     Fri 25 Apr 2025 01:38:47 +0000
Manifest next update:     Sun 27 Apr 2025 01:38:47 +0000
Files and hashes:         1: hursQpTfunBFqIZC6d_EVRs0wlU.crl (hash: 49P9jehgbQAne1Fz7sYQlSUf9mWDBCH1zZ6FILSLEZI=)
                          2: 79F59A648E6611EBBC39876CF8AEA228.roa (hash: 23hasVT7STzhojJmCnzWqlWjP/WJmmjWHiydYYblzCA=)
                          3: E3CC92B2AB1811EF86C7F479762E951A.roa (hash: TFsOPlhZpWRBJYJKBHhEjMZSgDMfyDlwRle6Xdkgtls=)
                          4: D2F1A5928E6411EBBC748B6AF8AEA228.roa (hash: 6qK0G9UDQpIN5VB9HAdPfGyjLR6yeZQoNvVlRbOIFCk=)
                          5: 3F03153416A911EFA217550F017001B1.roa (hash: 9/pgGRkm3NQotfShqK62IqS8JeOjMdrxiB5oVZ+s0Go=)
                          6: D1CB5D328E6611EB8E50DC6CF8AEA228.roa (hash: Uj+iO4kxeUkmUkuThovmvQFW6hvGQ4iYoLoY2th9wkk=)
                          7: 2A782EBC8E6511EBBA24DF6AF8AEA228.roa (hash: yGZ6SnXS1RSRZj/wE1QJtTRTtRj6tcY4vFXhT5iHrl4=)
                          8: 97E367AE8E6611EB8103A46CF8AEA228.roa (hash: e2XQQBe/+KWcM7cIO5S9ibGFcKgcrbxG4dVNAASJpqI=)
                          9: A15549308E6411EBA8883A6AF8AEA228.roa (hash: rMD9Bdkw1CGzfMpgpTrn426f5jHiNnuNNjjZcqe2kgo=)
                          10: 028AE0848E6511EB9F7DB66AF8AEA228.roa (hash: 0qPx7Dwu8RjdR4H81YDiJJ6f5FFJ4STm+gTVCcpfY+w=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
                          rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2150 (0x866)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368588EAR, serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
        Validity
            Not Before: Apr 25 01:38:47 2025 GMT
            Not After : Apr 27 01:38:47 2025 GMT
        Subject: CN=680ae7a7-b220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2d:65:b4:8c:ac:ae:ac:06:89:53:a7:62:c1:
                    c3:b6:96:c3:29:54:84:9c:9b:46:93:e7:59:1c:7f:
                    79:e4:a6:39:40:2a:a8:f8:3e:be:44:94:91:9d:90:
                    50:a5:9a:0e:19:aa:60:6d:37:16:13:09:ec:0a:2a:
                    36:76:7d:54:a3:3d:90:bb:83:a4:20:31:7b:1a:7e:
                    62:d8:b3:6a:4d:0b:68:72:7c:ad:93:7f:3d:2c:6b:
                    e2:f4:90:9a:82:31:ad:08:c9:f8:f7:a4:63:f9:88:
                    85:95:0f:2d:d8:81:9d:95:23:b5:77:7e:ca:3f:cc:
                    6e:a8:22:a0:0f:03:e4:1d:29:ff:31:ed:89:ea:9b:
                    ad:56:33:d9:fa:1e:b7:7d:9d:d0:ca:46:b6:59:49:
                    95:e9:83:8e:33:81:96:14:8d:12:4d:26:4d:60:a3:
                    59:8a:79:83:00:45:97:cc:6f:d2:20:c8:79:1c:bb:
                    6f:1c:31:55:31:0e:3a:10:44:60:64:d1:e1:22:82:
                    82:32:2c:83:51:0d:23:60:c4:a4:ef:0a:16:95:26:
                    59:50:aa:a3:2d:81:c3:c5:74:d7:96:79:b6:e8:65:
                    6a:5c:5e:6a:d7:4a:c1:43:f9:28:fa:50:16:47:30:
                    44:8f:21:79:de:4d:fb:02:07:b0:fd:66:f4:21:9d:
                    e8:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7B:71:FB:87:E3:F5:15:9A:B9:2A:1C:04:F0:75:C9:60:9B:24:BA
            X509v3 Authority Key Identifier:
                keyid:86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:b5:c9:05:c7:92:16:ec:4c:14:80:f6:05:06:49:11:71:98:
         38:e4:a5:8f:b6:c2:6a:e8:b5:bb:90:77:4f:07:e6:c6:66:90:
         69:70:43:49:be:b9:cb:6b:ea:52:a1:79:9f:47:a8:80:77:23:
         69:4d:bb:a4:e3:9c:2c:df:b0:9a:ac:fd:45:b3:2e:29:81:d3:
         ac:e7:a4:c8:35:91:ab:e3:00:f7:f0:90:f0:b3:10:1a:f7:2d:
         b1:4e:9d:7c:77:07:a6:f1:97:dd:14:55:81:39:18:c6:8c:f8:
         c1:17:4f:cd:13:15:d0:ef:3c:3d:0c:ff:99:5b:0b:53:29:e8:
         c7:71:c2:bd:80:49:ed:37:a6:91:d1:d1:67:26:a2:55:80:5b:
         fe:66:c3:4c:9d:6e:68:0f:5d:83:7c:10:2b:55:92:86:ad:5f:
         9b:6e:88:05:a8:ee:37:59:5d:95:d9:9e:de:a3:ae:12:a6:e7:
         e6:d9:0b:12:0c:66:63:2e:83:91:53:a0:ee:93:82:80:5b:fa:
         03:31:56:54:58:93:db:e6:c1:8f:07:99:f0:83:f3:ff:bd:d6:
         84:69:4c:28:34:b0:fa:bc:29:48:11:dd:c1:d7:74:60:d4:9e:
         e9:1e:1f:a9:f9:96:3b:02:42:a3:06:a5:e7:45:df:f9:c9:cf:
         da:a0:71:28
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCGYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODU4OEVBUjExMC8GA1UEBRMoODZFQUVDNDI5NERGQkE3MDQ1QTg4NjQyRTlERkM0
NTUxQjM0QzI1NTAeFw0yNTA0MjUwMTM4NDdaFw0yNTA0MjcwMTM4NDdaMBgxFjAU
BgNVBAMTDTY4MGFlN2E3LWIyMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7LWW0jKyurAaJU6diwcO2lsMpVIScm0aT51kcf3nkpjlAKqj4Pr5ElJGd
kFClmg4ZqmBtNxYTCewKKjZ2fVSjPZC7g6QgMXsafmLYs2pNC2hyfK2Tfz0sa+L0
kJqCMa0Iyfj3pGP5iIWVDy3YgZ2VI7V3fso/zG6oIqAPA+QdKf8x7Ynqm61WM9n6
Hrd9ndDKRrZZSZXpg44zgZYUjRJNJk1go1mKeYMARZfMb9IgyHkcu28cMVUxDjoQ
RGBk0eEigoIyLINRDSNgxKTvChaVJllQqqMtgcPFdNeWebboZWpcXmrXSsFD+Sj6
UBZHMESPIXneTfsCB7D9ZvQhneiLAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUOXtx
+4fj9RWauSocBPB1yWCbJLowHwYDVR0jBBgwFoAUhursQpTfunBFqIZC6d/EVRs0
wlUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg1ODhFL0I1RjQyNTQwQ0IyRjExRTlBNjI5MjkyN0Y4QUVBMjI4L2h1cnNR
cFRmdW5CRnFJWkM2ZF9FVlJzMHdsVS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2h1cnNRcFRmdW5CRnFJWkM2ZF9FVlJzMHdsVS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2ODU4OEUvQjVGNDI1NDBDQjJGMTFFOUE2MjkyOTI3RjhBRUEy
MjgvaHVyc1FwVGZ1bkJGcUlaQzZkX0VWUnMwd2xVLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCWtckFx5IW7EwUgPYFBkkRcZg45KWPtsJq
6LW7kHdPB+bGZpBpcENJvrnLa+pSoXmfR6iAdyNpTbuk45ws37CarP1Fsy4pgdOs
56TINZGr4wD38JDwsxAa9y2xTp18dwem8ZfdFFWBORjGjPjBF0/NExXQ7zw9DP+Z
WwtTKejHccK9gEntN6aR0dFnJqJVgFv+ZsNMnW5oD12DfBArVZKGrV+bbogFqO43
WV2V2Z7eo64Spufm2QsSDGZjLoORU6Duk4KAW/oDMVZUWJPb5sGPB5nwg/P/vdaE
aUwoNLD6vClIEd3B13Rg1J7pHh+p+ZY7AkKjBqXnRd/5yc/aoHEo
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:15 2025 by rpki-client on console.sobornost.net