Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
File:                     8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft (raw, json)
Hash identifier:          O6MvlyHrOgByW5aqhewWEykyTH1x6Hr9AP/TEi0ok0Y=
Subject key identifier:   B8:07:0C:30:83:6E:AD:75:C1:3D:37:F6:D6:08:94:63:D9:B2:BE:D9
Authority key identifier: F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B
Certificate issuer:       /CN=F3692292AF/serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
Certificate serial:       C6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
Manifest number:          C5
Signing time:             Mon 28 Apr 2025 05:04:43 +0000
Manifest this update:     Mon 28 Apr 2025 05:04:42 +0000
Manifest next update:     Wed 30 Apr 2025 05:04:42 +0000
Files and hashes:         1: 8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl (hash: e5Ocsk1S+ySnj3UQx/h/ZNaf9lOZIu3lyQ+IeHMNxmc=)
                          2: F56FFE86912911EFAEEF2B78762E951A.roa (hash: CXZk+/Is0OxggDK9eJOwdsU1YQzXuO6D+yTuqbBLE28=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 198 (0xc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692292AF, serialNumber=F27B935F35E04B8FEAA3910DE5F1E2D23C5E007B
        Validity
            Not Before: Apr 28 05:04:42 2025 GMT
            Not After : Apr 30 05:04:42 2025 GMT
        Subject: CN=680f0c6b-5d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:13:ad:81:cc:c0:c7:f9:38:86:8e:f3:43:
                    8b:22:73:04:d2:3e:8f:96:02:71:83:e3:4a:c9:50:
                    63:4e:9c:dc:4d:09:8e:90:e0:c6:ee:39:c4:ce:a8:
                    5f:e3:b2:b7:59:86:d6:d8:ba:1c:cc:a5:66:80:8e:
                    62:1f:7c:15:d1:ad:55:a1:67:3f:d6:8b:21:33:15:
                    c7:14:fb:2f:f1:78:e7:ee:bb:bb:44:60:eb:f2:98:
                    bb:ca:7c:44:67:18:6f:dd:10:9a:41:4f:e3:4a:b8:
                    a8:9a:d5:23:62:44:2e:03:90:a2:96:e8:1e:cc:3c:
                    0d:f6:55:5b:3d:a1:81:ab:77:9c:c2:0b:8e:b5:7f:
                    f7:b1:4e:be:ea:6a:cc:7d:c3:67:fd:1f:f7:21:d1:
                    f1:9d:fd:b0:d2:ee:dd:69:ff:ad:ad:07:68:ee:f7:
                    07:76:8d:9d:eb:46:2c:a9:8f:1e:eb:e7:48:e0:70:
                    c9:00:df:07:46:17:f2:13:cc:16:2f:b1:dd:9c:fe:
                    19:23:3f:52:e9:f4:56:8c:8a:ce:df:44:e1:26:f4:
                    af:92:9c:c5:98:d3:73:8e:cd:70:a2:7f:51:19:f5:
                    1c:ac:aa:5a:b3:03:6c:8d:c9:8c:8d:76:04:53:2b:
                    39:66:1d:ba:39:b6:90:17:fc:a9:0a:d2:5e:53:82:
                    7c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:07:0C:30:83:6E:AD:75:C1:3D:37:F6:D6:08:94:63:D9:B2:BE:D9
            X509v3 Authority Key Identifier:
                keyid:F2:7B:93:5F:35:E0:4B:8F:EA:A3:91:0D:E5:F1:E2:D2:3C:5E:00:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8nuTXzXgS4_qo5EN5fHi0jxeAHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692292/481A5F60912911EF838CED73762E951A/8nuTXzXgS4_qo5EN5fHi0jxeAHs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:b0:eb:ab:eb:2a:8f:a5:7f:03:da:5b:26:63:b2:46:1e:41:
         c7:a7:2e:94:06:d0:29:4b:5e:3e:31:33:cb:93:45:69:9b:c1:
         3e:03:c3:37:20:4a:30:1b:d3:1f:12:75:ab:ac:e4:d6:0c:96:
         e2:78:a5:f9:d3:d6:dc:9f:38:7c:37:c5:b4:a6:1d:d5:c0:48:
         32:1b:a3:b2:0f:12:89:6f:02:8f:81:df:9e:d5:50:ee:5f:0c:
         37:1c:d7:ee:e8:ad:ec:8a:03:be:e9:0f:8b:73:6b:bd:98:b3:
         59:0d:73:95:53:f3:cd:d8:08:86:e8:b6:74:f4:07:9a:bc:2f:
         9a:4b:48:c3:27:47:68:af:0f:bf:ce:31:63:3a:4d:27:8f:f4:
         b5:90:08:42:7a:de:c0:37:7f:4a:c1:2f:b4:4c:bd:64:de:90:
         2d:1c:2a:67:15:bb:da:5f:52:68:dd:93:00:7f:1e:b3:4e:94:
         8a:30:c4:94:e4:c2:e6:f9:04:97:eb:cf:01:6d:bb:40:7e:06:
         d0:90:f4:59:41:f0:53:42:8d:74:6a:e2:95:9f:2f:d9:a3:30:
         af:b8:15:8e:ae:10:ed:ce:da:8c:a4:9a:13:e6:02:b2:31:5c:
         27:57:43:90:c8:38:8f:fd:0b:dc:c3:f6:99:2b:df:9f:14:ce:
         16:fd:10:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:25:16 2025 by rpki-client on console.sobornost.net