Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.mft
File:                     N783y2Va9seOuogIKpvt0b5AScQ.mft (raw, json)
Hash identifier:          d7/hHVxJbBlK0BjrLMkplqc99TTff2/3bHY+E13A4LM=
Subject key identifier:   93:FB:9C:F0:D4:2B:8C:7D:B6:44:AC:1D:EB:01:89:5B:8D:60:74:93
Authority key identifier: 37:BF:37:CB:65:5A:F6:C7:8E:BA:88:08:2A:9B:ED:D1:BE:40:49:C4
Certificate issuer:       /CN=F368788DAF/serialNumber=37BF37CB655AF6C78EBA88082A9BEDD1BE4049C4
Certificate serial:       043D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/N783y2Va9seOuogIKpvt0b5AScQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.mft
Manifest number:          0438
Signing time:             Mon 28 Apr 2025 03:06:54 +0000
Manifest this update:     Mon 28 Apr 2025 03:06:53 +0000
Manifest next update:     Wed 30 Apr 2025 03:06:53 +0000
Files and hashes:         1: N783y2Va9seOuogIKpvt0b5AScQ.crl (hash: lIFpGTsvZuBpBRq1v9x/ij5iWvsxLI+akDM02Zr/28g=)
                          2: 4FA146B8A26D11EF8615AF63762E951A.roa (hash: 1lWOSLXoKapO4xyywLf2L4cW6uZX3BBDfChH/GRyj0g=)
                          3: 7D242F2063AB11EFA5073EA9762E951A.roa (hash: j6s7+D+sOoor2rnPY/jLlNXmijWZQCCdk4aJ0Yczhkw=)
                          4: 054F4B7C63BC11EFA8EF188F762E951A.roa (hash: sLm+VxrF0gqIYYWrMeaPyCiKXVb8QRFJvY1rOOeuSj4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/N783y2Va9seOuogIKpvt0b5AScQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1085 (0x43d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368788DAF, serialNumber=37BF37CB655AF6C78EBA88082A9BEDD1BE4049C4
        Validity
            Not Before: Apr 28 03:06:53 2025 GMT
            Not After : Apr 30 03:06:53 2025 GMT
        Subject: CN=680ef0ce-2697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e3:a6:71:02:83:c7:e3:db:e1:d7:7a:8f:48:
                    58:78:94:01:fc:18:7e:b6:b6:62:31:df:a8:da:f4:
                    e6:5a:cf:0d:97:13:8d:1f:e3:50:2e:a4:7e:2b:ca:
                    2b:68:ec:ca:c8:df:a2:54:7c:5a:ba:1c:3e:87:5d:
                    47:3e:1b:6f:e5:90:fa:cc:bf:6e:7f:30:1a:fa:68:
                    ea:fe:75:2f:07:cb:3f:2c:09:96:c3:38:b3:ea:09:
                    9c:2a:ef:49:0c:19:21:40:e6:fa:9b:d3:c6:77:80:
                    a6:04:fc:50:b7:18:e6:a9:00:ba:50:62:fe:b6:17:
                    66:8f:92:31:23:76:c4:6e:a9:b0:93:dc:9f:43:f0:
                    01:7e:1a:9e:ee:8c:57:ac:92:fd:50:13:c3:89:27:
                    41:ba:2f:98:57:a9:3f:78:98:2c:dd:e6:4c:f7:61:
                    38:07:9f:e3:c2:4d:9c:a2:d7:6b:d4:c4:06:cb:15:
                    e3:fb:dc:70:58:fa:30:34:b6:11:2d:04:d3:6d:cf:
                    e7:a3:4c:53:02:db:2c:56:78:21:da:70:88:dc:94:
                    5b:0d:b4:1b:6b:80:ba:fd:8f:a3:95:dc:60:38:2b:
                    12:ce:f3:d9:47:30:6a:e5:13:f1:82:33:e7:08:82:
                    c2:db:c0:cc:a6:d1:4c:e4:ae:ce:d8:1d:53:e8:b5:
                    b5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:FB:9C:F0:D4:2B:8C:7D:B6:44:AC:1D:EB:01:89:5B:8D:60:74:93
            X509v3 Authority Key Identifier:
                keyid:37:BF:37:CB:65:5A:F6:C7:8E:BA:88:08:2A:9B:ED:D1:BE:40:49:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/N783y2Va9seOuogIKpvt0b5AScQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368788D/764A656EF6BD11EC8E5B79BEF1222468/N783y2Va9seOuogIKpvt0b5AScQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:6f:8a:48:15:a0:d8:11:8d:01:b5:f6:cc:9a:7f:01:ba:e3:
         c6:77:3f:84:da:00:a8:28:5e:fe:35:6d:c6:77:fc:cd:c5:97:
         8b:b2:5b:31:1f:46:fc:78:00:44:e4:62:72:db:7b:7b:c0:20:
         f5:a5:40:c9:f4:80:14:fe:d2:e5:71:fa:4f:de:4a:1d:7c:47:
         c1:eb:19:f9:fa:70:c2:59:42:a9:24:73:a2:7b:44:92:5c:4d:
         5c:ce:ff:b9:4d:7e:1d:78:95:66:42:c7:cd:37:2f:ff:0a:6a:
         d3:54:b4:25:11:13:e9:b6:45:bc:6a:ca:51:34:ab:74:b8:26:
         3b:42:28:bf:63:4b:a5:e1:3b:ac:4a:83:17:03:5d:6a:33:ba:
         b9:9d:3d:83:0a:77:c9:0d:50:91:de:f3:ce:ce:3c:c6:29:ab:
         60:4c:58:08:3e:09:44:7b:4e:46:9d:09:65:65:0a:5c:8a:b8:
         a2:76:c4:70:3f:9b:aa:06:b6:d4:7c:02:de:86:b8:b3:6c:d2:
         58:e7:15:35:08:fa:86:d5:c7:78:e3:47:88:87:2e:10:94:5f:
         02:86:7c:48:46:5b:9b:86:e5:3f:b9:96:4e:9b:a7:ec:e0:90:
         92:8d:7b:4b:87:6b:df:a4:fe:f2:6c:18:f1:35:cf:f8:cd:6d:
         6e:83:f3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:02:36 2025 by rpki-client on console.sobornost.net