Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
File:                     eRR9PW5TftaH0IV7r4SSgRj9pOU.mft (raw, json)
Hash identifier:          iCX+EH/exrVgWibhffuhUJMl4EiTgltbK7e4mssbfiQ=
Subject key identifier:   DA:6E:88:F2:8F:44:53:FB:96:8F:1A:E4:98:F6:BB:AC:37:09:09:7D
Authority key identifier: 79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5
Certificate issuer:       /CN=F3688163AF/serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5
Certificate serial:       01C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
Manifest number:          01C3
Signing time:             Sun 27 Apr 2025 04:22:31 +0000
Manifest this update:     Sun 27 Apr 2025 04:22:30 +0000
Manifest next update:     Tue 29 Apr 2025 04:22:30 +0000
Files and hashes:         1: eRR9PW5TftaH0IV7r4SSgRj9pOU.crl (hash: EJgq4sF2IVtCei2+wgMkFKolmoPKQUartwYQjHR7vZ4=)
                          2: E8A5A2BCCBC911EE8E9BEF77775412E6.roa (hash: uW1ZZtqf2li8jzBd7IN42gC/xPbqnD5CcVOfHA/YQtE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688163AF, serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5
        Validity
            Not Before: Apr 27 04:22:30 2025 GMT
            Not After : Apr 29 04:22:30 2025 GMT
        Subject: CN=680db107-a27c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:47:e7:05:a5:c7:bf:4e:cb:71:6c:84:8a:a8:
                    96:11:93:c4:42:76:f5:93:a4:8e:3b:9f:69:dc:8b:
                    9a:cb:b7:8c:5d:2c:01:6e:08:be:84:84:e8:23:fc:
                    69:c3:f0:6d:c5:4b:cf:f4:ef:78:3d:98:6d:52:88:
                    57:c5:5c:91:43:cf:cc:4a:72:05:fe:a1:c7:a1:a4:
                    ce:37:98:5f:5f:c1:8a:56:2e:a0:18:e3:bc:e5:02:
                    a6:05:fa:6c:c5:14:98:98:6c:5d:99:37:08:1f:75:
                    e3:5b:4a:96:7a:f8:bd:54:99:8e:86:8d:d4:97:91:
                    fe:cb:8a:aa:df:f3:d5:7b:25:e0:c8:d8:fa:c0:bd:
                    a4:5e:ad:51:9d:a5:a3:7c:c8:e2:cb:b3:0d:42:9d:
                    c7:7c:0a:28:45:58:d9:f2:d4:70:f9:6e:b0:bf:9e:
                    2c:55:09:76:f3:bf:ff:1a:84:2b:ce:13:05:33:fc:
                    f6:94:37:50:c3:6f:ce:bc:22:e6:51:03:45:a7:cc:
                    74:35:4b:f3:c3:de:95:20:0a:76:7e:02:45:da:1c:
                    58:39:d4:04:c5:d9:d4:3a:c4:26:04:bd:60:1a:3a:
                    91:f2:ab:13:79:65:49:38:c4:e3:16:c4:a8:78:4e:
                    20:91:0d:71:1a:89:29:51:4d:2a:e5:34:12:1a:a2:
                    99:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:6E:88:F2:8F:44:53:FB:96:8F:1A:E4:98:F6:BB:AC:37:09:09:7D
            X509v3 Authority Key Identifier:
                keyid:79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:a6:b9:56:80:d6:e1:b3:dc:8d:e3:47:2f:9c:08:d9:15:da:
         b4:fe:f6:72:64:7f:e4:c8:a3:09:72:8f:95:e5:d6:08:09:83:
         1e:42:76:e8:0b:28:76:a6:0f:fa:91:50:9d:e5:f3:60:52:6f:
         6c:27:bb:9f:85:b2:cb:8f:ca:97:51:3b:fa:c1:36:1a:33:c3:
         c6:c8:d1:cd:00:93:8d:c9:9f:6e:ae:96:a9:f5:f6:f7:28:3c:
         68:90:06:b0:f6:2b:1b:2b:d8:01:40:bb:60:d1:78:b0:64:05:
         12:53:25:46:a9:4c:ae:21:f2:eb:91:dd:42:1d:e7:45:13:b9:
         6a:d3:d2:69:dd:8d:ef:51:a4:75:47:78:96:d3:5f:96:43:b6:
         11:f9:d1:dc:0e:e4:24:55:73:67:33:46:67:d4:ed:1e:da:2d:
         a9:c5:98:3e:dd:0a:06:27:eb:88:3e:f8:88:8f:e7:c0:36:65:
         76:d7:45:e0:42:9b:2b:4d:e6:a9:1b:05:a7:52:bb:7f:cb:15:
         55:ad:78:18:80:1b:08:ee:c5:09:7c:66:0c:a7:ae:fb:e8:fe:
         2f:e9:5f:b2:d2:b5:a8:89:e0:ec:c5:20:8a:c7:8a:39:af:99:
         35:af:6a:70:98:93:25:98:63:94:f4:a0:0c:69:6d:9e:d5:d0:
         25:2e:c6:1e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODgxNjNBRjExMC8GA1UEBRMoNzkxNDdEM0Q2RTUzN0VENjg3RDA4NTdCQUY4NDky
ODExOEZEQTRFNTAeFw0yNTA0MjcwNDIyMzBaFw0yNTA0MjkwNDIyMzBaMBgxFjAU
BgNVBAMTDTY4MGRiMTA3LWEyN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCYR+cFpce/TstxbISKqJYRk8RCdvWTpI47n2nci5rLt4xdLAFuCL6EhOgj
/GnD8G3FS8/073g9mG1SiFfFXJFDz8xKcgX+ocehpM43mF9fwYpWLqAY47zlAqYF
+mzFFJiYbF2ZNwgfdeNbSpZ6+L1UmY6GjdSXkf7Liqrf89V7JeDI2PrAvaRerVGd
paN8yOLLsw1Cncd8CihFWNny1HD5brC/nixVCXbzv/8ahCvOEwUz/PaUN1DDb868
IuZRA0WnzHQ1S/PD3pUgCnZ+AkXaHFg51ATF2dQ6xCYEvWAaOpHyqxN5ZUk4xOMW
xKh4TiCRDXEaiSlRTSrlNBIaopmRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2m6I
8o9EU/uWjxrkmPa7rDcJCX0wHwYDVR0jBBgwFoAUeRR9PW5TftaH0IV7r4SSgRj9
pOUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4MTYzLzM5ODJBNzRFQ0JDOTExRUVBN0Y1RjU3Njc3NTQxMkU2L2VSUjlQ
VzVUZnRhSDBJVjdyNFNTZ1JqOXBPVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2VSUjlQVzVUZnRhSDBJVjdyNFNTZ1JqOXBPVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODgxNjMvMzk4MkE3NEVDQkM5MTFFRUE3RjVGNTc2Nzc1
NDEyRTYvZVJSOVBXNVRmdGFIMElWN3I0U1NnUmo5cE9VLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcprlWgNbhs9yN40cvnAjZFdq0/vZy
ZH/kyKMJco+V5dYICYMeQnboCyh2pg/6kVCd5fNgUm9sJ7ufhbLLj8qXUTv6wTYa
M8PGyNHNAJONyZ9urpap9fb3KDxokAaw9isbK9gBQLtg0XiwZAUSUyVGqUyuIfLr
kd1CHedFE7lq09Jp3Y3vUaR1R3iW01+WQ7YR+dHcDuQkVXNnM0Zn1O0e2i2pxZg+
3QoGJ+uIPviIj+fANmV210XgQpsrTeapGwWnUrt/yxVVrXgYgBsI7sUJfGYMp677
6P4v6V+y0rWoieDsxSCKx4o5r5k1r2pwmJMlmGOU9KAMaW2e1dAlLsYe
-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:38 2025 by rpki-client on console.sobornost.net