Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
File:                     8F9eT4U_K8znmCtaZOAuRn1NY3k.mft (raw, json)
Hash identifier:          1i08Xp4FIQij1I/EEJyYtvuTpnfbP+NUAVRt/uZtQ10=
Subject key identifier:   D0:EA:20:DC:21:12:BD:54:33:03:8A:CB:14:CE:8E:F9:0F:C1:97:62
Authority key identifier: F0:5F:5E:4F:85:3F:2B:CC:E7:98:2B:5A:64:E0:2E:46:7D:4D:63:79
Certificate issuer:       /CN=F368CD07AF/serialNumber=F05F5E4F853F2BCCE7982B5A64E02E467D4D6379
Certificate serial:       CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
Manifest number:          CE
Signing time:             Mon 28 Apr 2025 05:03:49 +0000
Manifest this update:     Mon 28 Apr 2025 05:03:48 +0000
Manifest next update:     Wed 30 Apr 2025 05:03:48 +0000
Files and hashes:         1: 8F9eT4U_K8znmCtaZOAuRn1NY3k.crl (hash: saEQH2e+yJcvipaIi+hgIHFHhnv1t0QDZU/mKVCY00Y=)
                          2: 0587256289A811EF93AD2A50762E951A.roa (hash: 6JhA3S1UqVY6eY/SMX4lyeIJmn8FI+S8y3sFftIT63s=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 207 (0xcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368CD07AF, serialNumber=F05F5E4F853F2BCCE7982B5A64E02E467D4D6379
        Validity
            Not Before: Apr 28 05:03:48 2025 GMT
            Not After : Apr 30 05:03:48 2025 GMT
        Subject: CN=680f0c35-68ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:df:31:61:09:e4:45:a2:9d:28:44:df:b2:c4:
                    7a:55:73:26:3a:8f:a9:d4:18:b9:dc:5a:a7:d0:b0:
                    50:1d:83:b8:fd:d8:d8:5f:a6:ac:af:10:05:92:2f:
                    10:d2:7a:d2:55:38:fd:d1:84:10:18:b2:5e:8a:f9:
                    a2:fa:ea:76:28:ac:08:fc:f4:80:7c:37:63:a0:d8:
                    18:d9:2a:8d:ba:1e:9d:bd:8c:1c:22:e6:72:3d:81:
                    67:0c:2f:7a:85:f2:d4:d7:05:53:9d:62:a1:24:75:
                    5a:f7:9e:56:a6:bf:5a:33:7d:38:7e:65:6e:98:f0:
                    d7:a5:ac:04:89:1d:a2:fd:c1:9e:bb:40:61:74:6c:
                    a0:8f:de:3f:9d:92:fb:3c:07:c1:d9:7f:0a:32:c4:
                    dd:3c:49:88:62:ca:fc:7b:7c:b0:9c:79:15:ec:5e:
                    9d:71:a5:36:5b:7f:7c:15:b0:93:cd:11:6f:0e:3e:
                    3c:ed:9d:e9:d6:60:b5:5b:5b:a1:23:86:f6:b9:5a:
                    86:bc:d0:43:13:11:8f:4c:34:81:34:7c:a9:d5:78:
                    ec:c7:c6:5c:05:6a:ef:f3:eb:1a:69:58:3f:82:66:
                    47:18:a0:d2:bf:fa:73:cc:42:5d:44:d0:7b:8c:7c:
                    ed:39:93:a6:9a:83:5b:b3:d4:5c:7a:d8:69:54:19:
                    6c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:EA:20:DC:21:12:BD:54:33:03:8A:CB:14:CE:8E:F9:0F:C1:97:62
            X509v3 Authority Key Identifier:
                keyid:F0:5F:5E:4F:85:3F:2B:CC:E7:98:2B:5A:64:E0:2E:46:7D:4D:63:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8F9eT4U_K8znmCtaZOAuRn1NY3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368CD07/4C6DDDB4897011EFBB193A82762E951A/8F9eT4U_K8znmCtaZOAuRn1NY3k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:b3:dd:58:2e:00:39:b6:00:f6:80:18:75:51:c8:c2:f8:fe:
         02:c4:ab:3c:0b:fd:13:28:d1:01:35:76:e5:41:6c:21:43:f8:
         82:f9:52:5e:6b:1a:ad:95:4b:9a:83:07:d6:33:81:bd:86:3d:
         72:23:35:f2:93:4b:67:2c:1f:64:bd:34:45:cd:5f:01:a1:ea:
         98:ca:a2:ec:21:94:f8:a8:fe:89:f7:11:fe:9c:88:bf:61:2e:
         b1:f5:4c:11:92:85:07:72:78:ef:d0:b6:b5:c6:7f:6f:d4:31:
         f3:c3:35:e9:e4:70:92:66:95:ca:80:a8:a6:b1:9c:88:93:23:
         3a:a0:53:08:6c:37:bb:25:00:cb:3c:7f:0b:fb:ca:10:cc:dd:
         08:2c:6f:ab:53:55:19:9f:29:c8:18:09:3b:e2:79:92:bb:54:
         91:8f:34:fc:3d:81:fb:8f:f3:37:14:08:d0:e2:89:a7:a7:d5:
         05:25:50:ad:a3:d3:42:80:71:60:07:c6:ac:d2:68:55:2a:6b:
         45:e8:e0:a6:1c:57:6a:b7:29:54:bc:cb:4f:0c:5e:17:ef:f1:
         20:ce:29:0a:74:2e:c0:38:6a:f1:5e:0d:8b:16:ba:aa:49:4b:
         36:8d:ac:c6:63:69:57:69:e4:7e:b4:17:29:dd:13:18:1b:a3:
         af:b9:e5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:23:04 2025 by rpki-client on console.sobornost.net