Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
File:                     4ugF6J3fkHsrUo9CZBtP92ImmxY.mft (raw, json)
Hash identifier:          sBsIe6soZk9PBzb8SskBuh3J5YgrLHQeAInf98nh2uc=
Subject key identifier:   39:54:88:47:B8:60:2E:13:7A:6F:9C:1D:C3:45:B2:46:9E:28:87:8D
Authority key identifier: E2:E8:05:E8:9D:DF:90:7B:2B:52:8F:42:64:1B:4F:F7:62:26:9B:16
Certificate issuer:       /CN=F3688321AR/serialNumber=E2E805E89DDF907B2B528F42641B4FF762269B16
Certificate serial:       016F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
Manifest number:          016E
Signing time:             Sun 27 Apr 2025 04:32:15 +0000
Manifest this update:     Sun 27 Apr 2025 04:32:15 +0000
Manifest next update:     Tue 29 Apr 2025 04:32:15 +0000
Files and hashes:         1: 4ugF6J3fkHsrUo9CZBtP92ImmxY.crl (hash: Q9BUeNB1FGluHzmqh6PbKMdKzjGKpC5QqSMpH1Cp3sc=)
                          2: 7E32B2260DFF11EF971154F4007001B1.roa (hash: mMlz9+L3Eog8WKMUxfqqOF5aG0LcyYUooSiKu/ea8uI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
                          rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 367 (0x16f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688321AR, serialNumber=E2E805E89DDF907B2B528F42641B4FF762269B16
        Validity
            Not Before: Apr 27 04:32:15 2025 GMT
            Not After : Apr 29 04:32:15 2025 GMT
        Subject: CN=680db34f-3802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:40:b1:57:ef:9e:98:19:9d:96:a1:84:cf:31:
                    91:b0:95:74:4d:33:c5:95:a0:5c:7f:34:24:63:37:
                    b6:9f:74:ad:99:d5:9d:d7:7f:ed:6f:d2:d0:48:99:
                    d0:77:d5:ac:2b:78:a4:04:84:4f:54:5e:f5:80:bd:
                    ca:a7:b0:70:11:c2:e7:3b:71:b3:ff:8b:c3:17:ab:
                    f5:82:f1:22:c9:93:a8:0d:e7:65:ad:ec:1f:8b:ec:
                    d5:1a:2b:0d:52:5c:ba:77:1a:1c:87:28:ea:47:92:
                    a9:a4:d1:79:da:e5:c9:59:27:76:e6:65:13:e2:9c:
                    5e:f3:52:61:7b:94:6b:81:3d:c6:df:c8:23:14:8f:
                    21:dd:a5:fc:04:ef:4d:54:91:88:0c:28:41:b9:3d:
                    a2:76:56:e6:8a:67:c2:5f:42:a3:02:0b:6c:00:1c:
                    b5:9f:d8:61:3f:a8:da:f2:9e:5b:d8:10:af:7b:11:
                    85:dd:ea:09:5e:27:ca:8c:64:6f:eb:67:f9:10:75:
                    eb:b0:92:a0:f5:44:97:af:ba:5c:64:cd:10:82:0d:
                    11:01:3b:89:27:f7:91:91:3b:ce:d7:e0:d0:85:01:
                    2b:b0:1a:9a:1e:96:7b:88:68:6d:c2:ed:2b:96:12:
                    b6:77:86:29:8e:e8:a7:77:fd:83:81:4d:66:a8:d1:
                    27:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:54:88:47:B8:60:2E:13:7A:6F:9C:1D:C3:45:B2:46:9E:28:87:8D
            X509v3 Authority Key Identifier:
                keyid:E2:E8:05:E8:9D:DF:90:7B:2B:52:8F:42:64:1B:4F:F7:62:26:9B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4ugF6J3fkHsrUo9CZBtP92ImmxY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/9CE7374E0DFC11EFBBC58B5B017001B1/4ugF6J3fkHsrUo9CZBtP92ImmxY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:82:df:02:4a:3f:9e:75:26:78:43:9f:c5:09:3a:ee:d3:2a:
         cb:ea:23:5e:c1:db:5d:17:87:60:ab:dc:cc:6f:ac:b6:b3:7c:
         0b:59:8b:02:45:95:b7:f1:cc:fb:18:78:61:e7:64:7d:f1:48:
         14:1b:52:3f:2b:44:d1:8d:d4:af:9c:be:0d:cd:3d:fc:ad:ea:
         88:a8:04:9d:6a:dd:f3:bf:72:07:76:d7:89:10:f1:90:38:98:
         74:e4:c2:77:f2:4e:5a:f1:94:cf:7f:81:00:db:dd:e8:e5:85:
         ac:e0:26:21:7b:e7:86:64:b5:52:f0:3b:47:7a:3d:b3:c3:21:
         a9:c9:5d:d4:4e:af:94:f2:63:02:c2:55:05:94:f3:37:d7:24:
         d1:e6:62:13:6e:12:06:de:0e:0d:69:00:03:ee:88:71:85:8d:
         0c:8a:87:dc:6b:98:15:b8:32:02:4d:b4:23:0d:a4:fd:74:f3:
         a8:0b:7c:3b:00:1d:be:d0:71:b6:2f:43:e9:3c:09:d4:ec:92:
         4e:96:51:25:6c:c1:74:78:4d:c0:6c:dd:fe:cc:1f:b9:1e:03:
         3d:73:fb:78:81:b3:7f:80:ab:92:43:c2:c5:7d:dd:d7:2d:40:
         7c:6a:8e:dc:31:8a:b2:c7:23:fd:9b:5c:0f:70:63:ab:80:c1:
         6b:f2:8b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:38 2025 by rpki-client on console.sobornost.net