Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
File:                     btXWd58RVP-e4YoO_T3bdQZOoeU.mft (raw, json)
Hash identifier:          O36ZnkONpufC/NcPTC7ZLYTu6SPQe/cMxbRzSgBkC+U=
Subject key identifier:   98:6B:47:C5:62:8F:A4:17:59:81:5F:E3:9E:78:AF:C6:A3:2A:13:F8
Authority key identifier: 6E:D5:D6:77:9F:11:54:FF:9E:E1:8A:0E:FD:3D:DB:75:06:4E:A1:E5
Certificate issuer:       /CN=F368F4A1RI/serialNumber=6ED5D6779F1154FF9EE18A0EFD3DDB75064EA1E5
Certificate serial:       012E
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/btXWd58RVP-e4YoO_T3bdQZOoeU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
Manifest number:          012C
Signing time:             Sat 26 Apr 2025 04:41:07 +0000
Manifest this update:     Sat 26 Apr 2025 04:41:07 +0000
Manifest next update:     Mon 28 Apr 2025 04:41:07 +0000
Files and hashes:         1: btXWd58RVP-e4YoO_T3bdQZOoeU.crl (hash: uE3eCUOSc1YtQWF9qO11uMBxabs0hWLzbxwaHjySbvk=)
                          2: 75003F36428711EFA3917E69762E951A.roa (hash: YrqehZ9aTTD1SJptceMXxXj5BazN802PieW8aLLUgFI=)
                          3: B08DAB06428711EF998F6D6D762E951A.roa (hash: wgn3fcAb9qeYaD4t6OvWITLhpGB5UIMeJ/S+H9QW0zg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
                          rsync://rpki.afrinic.net/repository/ripe/btXWd58RVP-e4YoO_T3bdQZOoeU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F4A1RI, serialNumber=6ED5D6779F1154FF9EE18A0EFD3DDB75064EA1E5
        Validity
            Not Before: Apr 26 04:41:07 2025 GMT
            Not After : Apr 28 04:41:07 2025 GMT
        Subject: CN=680c63e3-d5e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:90:a9:89:54:3d:b9:ac:d3:2a:95:21:86:
                    89:2a:07:8b:1d:19:74:8b:0f:2a:33:27:81:9e:a9:
                    68:fe:8b:8d:4b:56:b6:31:29:0d:31:e1:bf:a1:ee:
                    70:3b:f7:e8:63:73:77:90:64:7c:15:77:7f:29:55:
                    fb:f0:c4:84:ce:91:b2:89:5d:c6:2f:cb:a7:bf:00:
                    80:dc:bd:6e:77:71:51:ed:26:7f:e6:d3:aa:66:99:
                    8a:7b:ff:87:33:d7:9b:19:71:08:8c:76:54:93:d6:
                    13:79:02:67:f8:4b:a4:b3:af:dd:a6:8c:fd:41:fe:
                    af:ae:f1:81:07:ca:e1:83:19:96:d6:1a:ad:db:37:
                    76:a0:65:84:d8:c1:e7:92:39:d1:32:76:91:d2:ab:
                    0d:0e:42:62:f7:63:04:cc:79:da:8a:19:a6:24:18:
                    b1:fc:ff:6d:9e:03:91:dd:c0:db:5b:68:fe:f3:83:
                    7b:2a:02:f7:26:ea:d6:0a:c1:6d:bf:c7:dd:54:ad:
                    64:48:68:58:6d:df:1a:5d:86:f3:4c:ad:3c:6c:09:
                    41:a4:ba:60:0f:13:34:f4:18:4c:9c:07:08:a2:2e:
                    ef:cc:85:04:6c:10:11:7f:bb:9f:fe:95:43:e2:c1:
                    17:f0:63:42:2e:ac:c2:9d:dd:e8:e4:9a:31:a9:43:
                    09:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:6B:47:C5:62:8F:A4:17:59:81:5F:E3:9E:78:AF:C6:A3:2A:13:F8
            X509v3 Authority Key Identifier:
                keyid:6E:D5:D6:77:9F:11:54:FF:9E:E1:8A:0E:FD:3D:DB:75:06:4E:A1:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/btXWd58RVP-e4YoO_T3bdQZOoeU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/913882CC3F5C11EFA038A47E762E951A/btXWd58RVP-e4YoO_T3bdQZOoeU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:7f:74:bb:1e:1c:13:46:54:46:80:2d:e3:ff:0b:57:58:04:
         4c:82:6b:ef:0f:d1:aa:6e:85:15:00:69:64:76:5a:25:88:31:
         bc:43:76:2f:d6:bb:06:67:a4:dd:6a:ab:bd:1d:09:78:73:eb:
         19:e4:dd:dd:87:8b:15:f6:df:56:39:6f:41:51:a1:94:6e:ff:
         12:7b:55:62:df:bb:45:5a:d0:28:ce:e8:ec:77:b9:a1:d3:ad:
         08:60:45:c3:f3:20:f9:da:b7:71:67:20:db:8b:cf:17:43:8c:
         e2:a7:2c:5b:b6:25:a3:4c:d8:83:5b:a3:31:d3:fc:e9:ed:8c:
         aa:ba:d1:e4:1b:14:c8:a4:e8:6f:28:7f:4b:65:8b:53:fa:31:
         c2:41:2b:c8:1b:16:4f:26:a0:45:80:e4:f1:f4:63:4b:5b:87:
         b5:05:65:5f:81:43:cc:c8:39:2c:ed:28:b2:00:d9:d6:91:fe:
         57:8e:be:6a:35:5e:a1:ac:78:b8:5d:f3:32:4f:41:b0:50:6a:
         fc:94:06:ba:8a:bd:3e:da:fc:16:ed:9a:d3:bc:bf:f5:41:07:
         56:5e:d9:89:e9:99:02:61:8d:b7:6c:e0:ce:75:c5:7a:6f:e5:
         cf:03:58:56:a9:b4:11:4d:7d:41:7e:84:2e:15:d8:cb:fa:6b:
         37:12:d7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:51:33 2025 by rpki-client on console.sobornost.net