Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
File:                     Ob52uHZXsJfc7qO0DURSok5WA4I.mft (raw, json)
Hash identifier:          wA3XgStDVz181ltwgL+GNZscetGS5xau5wFq2c5IDPE=
Subject key identifier:   38:38:3C:A9:51:91:E6:B4:7A:27:6A:05:28:50:61:79:88:0E:A0:FE
Authority key identifier: 39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
Certificate issuer:       /CN=F3688321AF/serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
Certificate serial:       016E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
Manifest number:          016D
Signing time:             Sat 26 Apr 2025 04:32:55 +0000
Manifest this update:     Sat 26 Apr 2025 04:32:54 +0000
Manifest next update:     Mon 28 Apr 2025 04:32:54 +0000
Files and hashes:         1: Ob52uHZXsJfc7qO0DURSok5WA4I.crl (hash: H1o73O9yR8wJQQW32rGmL6JHd0Y++hzTVIm1miSk6Ww=)
                          2: BCE5E01A0DFF11EFA7C0A7F8007001B1.roa (hash: m39T3fuh7q5xXJaI34cgegPgwSRYyjf0xq3cmG1FBwE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688321AF, serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
        Validity
            Not Before: Apr 26 04:32:54 2025 GMT
            Not After : Apr 28 04:32:54 2025 GMT
        Subject: CN=680c61f6-b591
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e4:00:17:16:d7:00:d3:ef:9f:e1:ae:c8:c4:
                    41:f2:3c:4b:55:da:b2:8c:bf:96:56:04:2e:24:64:
                    11:9c:8a:4c:c1:47:c1:53:ad:e9:a6:03:be:f2:cd:
                    ea:a3:50:f8:37:93:69:38:27:d5:49:dc:c5:1c:d9:
                    7b:ec:b8:5a:84:3e:d8:1b:87:da:ab:79:fc:75:99:
                    cd:9b:9f:91:a5:6f:45:42:6f:68:c0:a6:45:df:2f:
                    45:22:bc:fd:20:6b:9e:f0:9d:20:08:b8:83:d9:e6:
                    10:16:6e:8d:01:f4:cc:24:87:45:f7:94:d9:a4:37:
                    de:94:4b:89:9d:9f:b0:e8:ac:4f:b1:c2:9e:41:bc:
                    6a:a3:1e:15:bc:f8:0a:ad:7b:cc:c2:14:e7:16:c0:
                    8d:9a:6f:66:b2:f4:04:ae:58:29:1d:b4:76:ae:75:
                    71:fc:e9:09:30:97:53:49:a5:d1:89:b7:45:26:9b:
                    b4:42:b1:01:3e:74:e7:17:b7:2e:a2:a9:e2:81:bc:
                    c6:1f:65:83:6f:09:f1:84:4e:6b:c5:00:ae:c5:bf:
                    75:b3:67:d9:2a:8f:0a:ce:d0:ee:69:f2:b1:48:7a:
                    49:49:8b:37:bc:e5:c7:ef:9a:27:7e:e9:d9:56:f7:
                    33:f2:da:cc:6d:14:56:78:59:b3:46:87:2a:61:5c:
                    55:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:38:3C:A9:51:91:E6:B4:7A:27:6A:05:28:50:61:79:88:0E:A0:FE
            X509v3 Authority Key Identifier:
                keyid:39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:70:e7:27:ef:79:4d:9b:70:16:8f:2b:fc:b1:b1:fc:37:5e:
         7e:29:af:bf:d6:36:93:0f:4b:5b:b9:ef:8c:e0:16:f1:68:de:
         de:60:e8:a1:b0:5c:58:10:f5:94:2b:6a:34:a4:00:04:96:bb:
         20:dd:35:f6:f0:15:a0:c6:47:c7:9f:dc:65:9a:44:0b:63:33:
         22:c2:52:2a:dd:b6:7b:6c:a6:33:b2:74:6f:ad:d3:50:7e:8e:
         95:9c:49:70:60:4e:23:da:a8:31:38:bf:13:fc:ac:d2:da:a4:
         1b:f1:b2:95:84:3a:60:ab:b8:51:16:58:94:70:29:4b:f2:2a:
         6c:fc:ed:89:fd:93:3c:53:c8:1e:74:43:40:dd:a1:22:6a:1d:
         92:1b:c3:1f:7a:10:ec:b8:67:68:28:88:5b:b0:9c:68:12:dc:
         ec:c4:75:08:eb:20:6a:fb:18:33:f7:c2:1c:c4:49:e2:3c:91:
         6a:41:38:32:45:db:ea:7b:91:78:8e:d1:8b:58:34:d6:3a:9d:
         b9:9b:ec:70:0c:5e:01:c5:29:ab:ea:fc:e9:c4:78:fc:f5:42:
         44:ff:6c:00:85:b9:a5:96:b4:09:d8:a0:4f:04:d4:f8:5c:7b:
         d0:03:c3:4f:ec:87:13:1e:08:86:cc:dd:02:ba:df:28:e4:36:
         4f:fa:67:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:17:17 2025 by rpki-client on console.sobornost.net