Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
File:                     HWc407_GEdh98N50A9JdoPZOseA.mft (raw, json)
Hash identifier:          53kELGCZRt95BpaSnN46govdGIZT9wNkZbjvjvR/nj8=
Subject key identifier:   3D:5D:0D:B8:AF:E5:8B:AC:46:58:48:A1:26:65:1E:DC:C5:87:43:07
Authority key identifier: 1D:67:38:D3:BF:C6:11:D8:7D:F0:DE:74:03:D2:5D:A0:F6:4E:B1:E0
Certificate issuer:       /CN=F3690C51AR/serialNumber=1D6738D3BFC611D87DF0DE7403D25DA0F64EB1E0
Certificate serial:       AE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
Manifest number:          AA
Signing time:             Sat 26 Apr 2025 05:04:10 +0000
Manifest this update:     Sat 26 Apr 2025 05:04:10 +0000
Manifest next update:     Mon 28 Apr 2025 05:04:10 +0000
Files and hashes:         1: HWc407_GEdh98N50A9JdoPZOseA.crl (hash: 6+zM+Jo13HRQqxGUE/fQHZOl03+SSpZ4BsuPK792VyM=)
                          2: 315F293AEEF411EF81CB7343762E951A.roa (hash: V4KjGZgIPKcP1/MjXCNEypEICjJinDEh0PjdL2zARpk=)
                          3: 6B46698EEEEE11EF911C519D762E951A.roa (hash: Tu4GUApjh+qdeFTI+yn4KBIGDwp03a2AGvdYk9j0K9w=)
                          4: B68CCC76A68211EFA7605193762E951A.roa (hash: hVK4/Rx1S8B8kokV3evOakeSn1xgDl+NOOvc1/7Zypc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
                          rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690C51AR, serialNumber=1D6738D3BFC611D87DF0DE7403D25DA0F64EB1E0
        Validity
            Not Before: Apr 26 05:04:10 2025 GMT
            Not After : Apr 28 05:04:10 2025 GMT
        Subject: CN=680c694a-de31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:08:49:94:fb:fc:55:1f:86:4a:69:ac:9f:
                    c6:5b:84:a1:b6:68:f2:b3:30:5e:e1:67:59:e2:c9:
                    9e:ec:59:2a:37:8d:93:bf:8f:15:30:5a:3c:c4:a0:
                    f0:47:16:71:68:29:c8:7f:75:07:ef:03:f5:1c:94:
                    a6:52:0f:65:44:25:c9:dd:ae:ca:93:3c:b2:ce:b9:
                    e5:2f:2c:6e:49:e6:6c:03:27:9a:8d:49:19:63:f4:
                    2d:c6:30:f7:97:66:1d:b1:18:ea:97:ad:85:ec:62:
                    8a:b3:8f:6e:b1:85:b2:73:cb:23:98:f3:d9:de:bb:
                    0b:04:bc:af:52:98:71:5b:32:92:1e:ef:c9:62:8d:
                    79:0c:7a:91:20:81:d9:a1:5d:18:a9:c1:85:3d:9a:
                    b7:be:6b:d7:5a:2d:a5:98:4b:96:95:ff:b0:e2:61:
                    94:f9:89:57:1d:4d:20:c3:e8:c5:05:f2:b2:21:61:
                    b2:9a:eb:33:6b:df:cc:b9:98:f7:91:61:ac:51:3f:
                    17:61:bc:4f:81:2b:e5:73:44:d0:84:9b:41:95:02:
                    38:6f:71:ec:81:da:f2:bd:7b:c4:59:37:02:a8:70:
                    47:17:4f:f1:ee:0b:25:c6:d4:fb:ca:3a:51:b3:4b:
                    27:c6:9b:9a:b1:a3:d6:58:5f:a5:62:e0:c8:82:f8:
                    ab:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:5D:0D:B8:AF:E5:8B:AC:46:58:48:A1:26:65:1E:DC:C5:87:43:07
            X509v3 Authority Key Identifier:
                keyid:1D:67:38:D3:BF:C6:11:D8:7D:F0:DE:74:03:D2:5D:A0:F6:4E:B1:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/HWc407_GEdh98N50A9JdoPZOseA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690C51/C742F386A67F11EFBA546082762E951A/HWc407_GEdh98N50A9JdoPZOseA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ff:f1:77:d9:3d:56:ff:52:33:32:0b:e5:79:cb:57:dd:35:
         7b:5d:d6:4e:50:b9:85:6d:c8:79:48:65:5f:74:04:c3:83:3e:
         8a:7e:47:0f:4b:c5:04:93:78:f4:25:4f:fa:03:04:1f:97:46:
         20:5d:ae:53:ea:f4:b0:4d:45:ff:b3:a2:89:03:bf:c5:0d:87:
         2d:75:d4:e3:31:59:8e:e9:40:42:3e:9e:6e:e0:38:a5:5a:77:
         fc:8f:a2:6d:cc:40:a6:11:46:cb:b7:a8:29:b0:c6:5d:38:e3:
         63:3d:a0:4e:de:dc:58:ae:24:16:1b:af:99:fb:1e:34:bb:7f:
         9e:50:8c:a5:05:bd:9f:3b:12:a8:e7:82:8d:13:ef:09:ea:9e:
         f2:c6:6e:df:f7:8c:d6:cf:6d:fe:c7:32:44:1f:05:36:30:d7:
         d7:f4:73:43:8a:45:2f:b3:ff:0a:37:ea:f6:60:c3:e3:5e:64:
         f9:b1:79:d2:89:1a:ef:2c:17:20:8d:08:83:b0:65:50:14:3d:
         8e:42:2a:e4:a5:5e:66:60:25:bc:cd:24:85:f2:bc:de:be:df:
         40:f0:0a:41:60:d0:3e:f6:a8:db:2f:3e:bc:f0:0d:82:b0:23:
         96:03:99:45:d8:83:4a:81:c5:92:6b:7c:a2:c7:ac:62:59:72:
         01:e8:8f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:51:33 2025 by rpki-client on console.sobornost.net