Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
File:                     ByjJuEVcZZd_owmH3klB3wGMZRw.mft (raw, json)
Hash identifier:          jxYvJEXILJbccOIKEbKurEibtJm04PK2OEp2uWONNlA=
Subject key identifier:   3F:B7:61:F0:3B:A2:55:1C:07:BD:D5:45:E8:CD:F2:89:32:86:EB:15
Authority key identifier: 07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C
Certificate issuer:       /CN=F369591CAR/serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
Certificate serial:       0331
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
Manifest number:          032C
Signing time:             Mon 28 Apr 2025 03:39:32 +0000
Manifest this update:     Mon 28 Apr 2025 03:39:31 +0000
Manifest next update:     Wed 30 Apr 2025 03:39:31 +0000
Files and hashes:         1: ByjJuEVcZZd_owmH3klB3wGMZRw.crl (hash: vSCAKeJ5hxr+HgIpuzEbjmBAm/SkrK9YPoSF8c3+sk8=)
                          2: B811D43ECF1811EE808B8C5E775412E6.roa (hash: QrAGxe4oVruW39R4XPjd+XQJmsbP5F1obpV9HSARoLQ=)
                          3: D8A1110C677511EEA95AE00F4AD9E6FC.roa (hash: lQ3w+g+egeVaiRf8i20abMGAcxtWSl4QyO728iot9bs=)
                          4: C9EDC80E6D9111EEBBC4540D4AD9E6FC.roa (hash: /aLKa+m3u4bbbNxxLb4yQplePbGqlVG3EB63Tc//Wr4=)
                          5: 702D9C2ACF1811EE9C5CF75D775412E6.roa (hash: XzsRw0+IeQTUDS6cZPKkg2vl+y5JacnZmeCymlZ679E=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
                          rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 817 (0x331)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369591CAR, serialNumber=0728C9B8455C65977FA30987DE4941DF018C651C
        Validity
            Not Before: Apr 28 03:39:31 2025 GMT
            Not After : Apr 30 03:39:31 2025 GMT
        Subject: CN=680ef874-34bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:96:7d:53:09:93:bf:ca:e8:d2:56:a4:ea:76:
                    b3:c2:57:8e:90:bc:4f:60:b3:91:b1:29:04:0f:b8:
                    61:69:ca:b8:ed:f1:1e:68:d5:31:c5:d7:2c:b9:c0:
                    d1:e7:fb:d4:0d:14:4f:21:25:a4:60:1d:1a:85:87:
                    72:72:70:24:07:ff:fd:54:fc:47:27:87:75:b4:ac:
                    3a:03:7e:c6:a4:49:80:c9:3b:c0:f0:71:4c:2a:b3:
                    f3:9c:43:40:e1:a1:1e:47:1f:54:2a:eb:b0:85:e1:
                    14:9f:c6:bd:d8:2c:8b:fc:28:79:83:61:0f:2b:fe:
                    a6:8e:1e:c0:21:20:f3:5c:3f:46:39:87:ad:22:6f:
                    33:91:a0:3e:17:09:f2:6e:9f:ac:86:b1:3d:55:8d:
                    52:40:07:60:9d:7e:80:0d:4a:9b:f0:bc:43:68:3e:
                    24:d8:1b:42:b7:6c:94:86:e7:9d:ca:16:d1:bb:e4:
                    22:b3:0c:ff:3c:a4:65:36:0e:2f:07:af:43:46:ac:
                    4c:fa:c6:79:f7:b7:c0:3f:a8:7e:82:39:b6:56:fa:
                    3d:7b:11:f5:b4:ab:41:08:b7:d4:ce:5d:2a:e5:9b:
                    53:19:20:96:b8:2b:05:7a:f0:c1:da:81:47:26:2d:
                    c2:fc:c7:86:90:9d:df:9b:79:9f:11:b4:4c:82:be:
                    80:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B7:61:F0:3B:A2:55:1C:07:BD:D5:45:E8:CD:F2:89:32:86:EB:15
            X509v3 Authority Key Identifier:
                keyid:07:28:C9:B8:45:5C:65:97:7F:A3:09:87:DE:49:41:DF:01:8C:65:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ByjJuEVcZZd_owmH3klB3wGMZRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369591C/4D92EC26C24711EDBF9323A0F1222468/ByjJuEVcZZd_owmH3klB3wGMZRw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:de:ef:47:9d:e2:e2:18:12:04:c1:c3:15:71:90:14:8a:4c:
         a0:25:75:f0:0b:ae:18:a5:19:f9:19:05:64:d6:c9:95:8d:41:
         c1:3c:ca:b7:0f:c3:cf:6a:ae:95:bb:49:16:b7:1a:0a:70:97:
         12:f0:75:75:f7:22:2e:2f:9d:56:d9:a6:cc:1e:2f:00:05:65:
         6d:ff:4b:d0:eb:28:3c:ab:83:c1:02:e4:41:fc:ad:e8:53:e5:
         59:67:85:60:33:b6:12:7a:e8:3d:ec:ce:12:33:8c:70:5e:81:
         5c:4d:85:ad:40:ee:ca:33:b3:91:fe:23:31:cd:81:02:58:32:
         11:e1:bb:22:8e:bc:ca:0b:17:fb:b9:a4:97:71:d8:dd:72:e9:
         f3:c2:2a:bf:02:97:b3:17:31:22:cd:a4:0c:cd:6d:63:fc:7c:
         32:39:76:4f:83:a5:60:d4:ef:38:e7:b2:da:7c:3e:90:cc:fa:
         f1:d7:bb:34:a7:79:8f:a2:ec:7a:db:51:d1:19:7e:d9:d5:e9:
         a5:2b:dc:58:d6:15:09:08:0a:3c:0e:13:63:16:6a:79:fa:e6:
         df:c3:0d:ec:2f:78:d6:35:81:60:19:c2:08:e5:f3:91:59:cd:
         4d:43:da:36:ba:73:a1:2d:6a:71:58:30:6e:ad:dc:a7:f3:38:
         1d:38:a0:46
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAzEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTU5MUNBUjExMC8GA1UEBRMoMDcyOEM5Qjg0NTVDNjU5NzdGQTMwOTg3REU0OTQx
REYwMThDNjUxQzAeFw0yNTA0MjgwMzM5MzFaFw0yNTA0MzAwMzM5MzFaMBgxFjAU
BgNVBAMTDTY4MGVmODc0LTM0YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuln1TCZO/yujSVqTqdrPCV46QvE9gs5GxKQQPuGFpyrjt8R5o1THF1yy5
wNHn+9QNFE8hJaRgHRqFh3JycCQH//1U/Ecnh3W0rDoDfsakSYDJO8DwcUwqs/Oc
Q0DhoR5HH1Qq67CF4RSfxr3YLIv8KHmDYQ8r/qaOHsAhIPNcP0Y5h60ibzORoD4X
CfJun6yGsT1VjVJAB2CdfoANSpvwvENoPiTYG0K3bJSG553KFtG75CKzDP88pGU2
Di8Hr0NGrEz6xnn3t8A/qH6CObZW+j17EfW0q0EIt9TOXSrlm1MZIJa4KwV68MHa
gUcmLcL8x4aQnd+beZ8RtEyCvoBTAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUP7dh
8DuiVRwHvdVF6M3yiTKG6xUwHwYDVR0jBBgwFoAUByjJuEVcZZd/owmH3klB3wGM
ZRwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk1OTFDLzREOTJFQzI2QzI0NzExRURCRjkzMjNBMEYxMjIyNDY4L0J5akp1
RVZjWlpkX293bUgza2xCM3dHTVpSdy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0J5akp1RVZjWlpkX293bUgza2xCM3dHTVpSdy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2OTU5MUMvNEQ5MkVDMjZDMjQ3MTFFREJGOTMyM0EwRjEyMjI0
NjgvQnlqSnVFVmNaWmRfb3dtSDNrbEIzd0dNWlJ3Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC23u9HneLiGBIEwcMVcZAUikygJXXwC64Y
pRn5GQVk1smVjUHBPMq3D8PPaq6Vu0kWtxoKcJcS8HV19yIuL51W2abMHi8ABWVt
/0vQ6yg8q4PBAuRB/K3oU+VZZ4VgM7YSeug97M4SM4xwXoFcTYWtQO7KM7OR/iMx
zYECWDIR4bsijrzKCxf7uaSXcdjdcunzwiq/ApezFzEizaQMzW1j/HwyOXZPg6Vg
1O8457LafD6QzPrx17s0p3mPoux621HRGX7Z1emlK9xY1hUJCAo8DhNjFmp5+ubf
ww3sL3jWNYFgGcII5fORWc1NQ9o2unOhLWpxWDBurdyn8zgdOKBG
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:06:13 2025 by rpki-client on console.sobornost.net