Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
File:                     i_LUycasChgyjdPrbLWQRBc3zug.mft (raw, json)
Hash identifier:          Bc9DN6HRNSUVWUHQLVCFtWWuT7crmrHgf8adIF3e/nc=
Subject key identifier:   54:78:DA:0F:BD:8B:A4:44:B6:5A:C2:C2:90:61:E5:8D:13:F1:B0:7A
Authority key identifier: 8B:F2:D4:C9:C6:AC:0A:18:32:8D:D3:EB:6C:B5:90:44:17:37:CE:E8
Certificate issuer:       /CN=F369442EAF/serialNumber=8BF2D4C9C6AC0A18328DD3EB6CB590441737CEE8
Certificate serial:       0686
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i_LUycasChgyjdPrbLWQRBc3zug.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
Manifest number:          0685
Signing time:             Sat 26 Apr 2025 02:04:20 +0000
Manifest this update:     Sat 26 Apr 2025 02:04:19 +0000
Manifest next update:     Mon 28 Apr 2025 02:04:19 +0000
Files and hashes:         1: i_LUycasChgyjdPrbLWQRBc3zug.crl (hash: 7MxyA/jFdiA9xCzq6jjVGYmdw5yUOI/BmnAKIcEuyIo=)
                          2: CA4847F0260111EBACE81C12F8AEA228.roa (hash: wvHb/Kw9w+IZBIpt5st+Xz0N4A4tUwQJ6TE8L7LFn7U=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i_LUycasChgyjdPrbLWQRBc3zug.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1670 (0x686)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369442EAF, serialNumber=8BF2D4C9C6AC0A18328DD3EB6CB590441737CEE8
        Validity
            Not Before: Apr 26 02:04:19 2025 GMT
            Not After : Apr 28 02:04:19 2025 GMT
        Subject: CN=680c3f24-4e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:53:ef:26:01:8b:6f:0a:ff:68:43:69:69:c1:
                    81:33:6f:6e:74:6d:ab:1b:c9:7f:2d:4d:b8:61:ac:
                    7c:70:7f:ec:ad:b4:0e:04:72:4d:8b:c4:cd:91:14:
                    3f:7e:55:06:95:e6:56:b0:3d:cc:ad:61:4f:de:c5:
                    38:42:81:4e:af:c8:66:e4:02:a2:1f:0b:83:b0:c7:
                    98:81:2e:c2:19:89:84:b1:4e:e0:35:e0:a3:e3:37:
                    0f:be:32:95:e3:68:92:4c:fc:f7:69:08:c1:de:3f:
                    e3:04:99:79:6b:f5:ec:53:ed:4a:42:e4:a7:21:49:
                    e2:be:e8:6f:f2:49:10:fb:6a:f4:cc:12:83:0f:4d:
                    75:0e:34:68:f7:73:2c:a4:d5:e3:76:89:56:0e:30:
                    84:75:1b:87:49:8c:9e:a4:03:f2:4d:e1:54:6b:61:
                    f2:c7:9f:ba:cf:ed:88:dd:9f:37:36:98:8b:50:82:
                    71:7d:30:73:47:a0:ab:24:b0:0d:d1:62:29:1c:58:
                    09:68:3c:6d:40:8c:b6:fb:cd:8d:d1:9e:ec:c7:ee:
                    8c:de:d9:28:50:27:c0:bb:55:f9:f1:10:6b:24:b3:
                    fd:d0:70:ba:0c:f4:b8:ff:95:a3:d4:ca:f1:b7:c4:
                    86:d7:1c:f5:8b:27:34:81:9d:d1:6c:b8:09:e3:56:
                    aa:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:78:DA:0F:BD:8B:A4:44:B6:5A:C2:C2:90:61:E5:8D:13:F1:B0:7A
            X509v3 Authority Key Identifier:
                keyid:8B:F2:D4:C9:C6:AC:0A:18:32:8D:D3:EB:6C:B5:90:44:17:37:CE:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_LUycasChgyjdPrbLWQRBc3zug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369442E/5C97DC7425FD11EBA75F8D0DF8AEA228/i_LUycasChgyjdPrbLWQRBc3zug.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:63:90:bd:c1:11:8d:37:95:d2:38:f7:05:6a:93:ad:37:eb:
         e6:4d:12:ee:4d:83:48:26:23:e1:2a:91:05:a0:f5:f3:a5:41:
         ad:75:16:a2:19:c5:b2:5a:06:cf:1e:44:12:46:3c:f7:37:35:
         af:01:83:e5:73:1f:aa:f4:2c:a0:7c:49:8f:cc:59:bd:a5:1f:
         7d:7f:28:c4:24:d3:8f:bf:a3:b4:91:0a:97:0c:93:c3:d2:e0:
         5b:92:1a:4d:df:c1:98:7e:5f:20:cf:29:cb:5b:8f:7c:fa:d1:
         8f:4e:3e:03:20:cd:81:ca:89:52:1d:da:3f:b5:b7:a8:0e:1e:
         8b:b7:33:05:f2:a7:11:ec:db:ef:27:50:c5:b7:0b:0c:01:eb:
         6e:04:3d:99:3e:6c:30:e0:5d:08:08:79:05:ad:13:21:3e:89:
         cc:48:ba:c6:7e:40:4d:a4:20:24:0b:99:e3:bc:3a:24:e4:75:
         65:81:57:52:15:d2:4a:67:58:d9:ba:91:5b:e6:76:d6:f4:35:
         36:af:39:8e:80:8a:e6:ed:7c:bf:cc:bb:5a:18:c5:da:76:86:
         44:53:e4:fb:19:8f:de:89:30:44:1a:82:81:86:db:56:97:8b:
         c3:2c:42:78:91:b4:86:ae:2e:3c:da:36:a8:2d:fa:59:28:c9:
         eb:07:dd:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:21:06 2025 by rpki-client on console.sobornost.net