Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
File:                     wD_daU9RquOPBRRWEBYXxW_YnEo.mft (raw, json)
Hash identifier:          Bgacg9N6QDFLn9iH1rjSJ1dN/ybR0XYAMlXJKJ3YBdE=
Subject key identifier:   1F:D9:58:F7:E4:89:B7:1D:DA:BD:70:75:5F:E1:E8:AD:C7:AC:F9:4D
Authority key identifier: C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A
Certificate issuer:       /CN=F3698DD0AF/serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
Certificate serial:       03B9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
Manifest number:          03AE
Signing time:             Sat 26 Apr 2025 03:20:36 +0000
Manifest this update:     Sat 26 Apr 2025 03:20:35 +0000
Manifest next update:     Mon 28 Apr 2025 03:20:35 +0000
Files and hashes:         1: wD_daU9RquOPBRRWEBYXxW_YnEo.crl (hash: l2Xx2Z8HCKt7fVKXkckz+9aHoAg4hojOVrEEiUOpA2k=)
                          2: 2258DA46D9E611ED9991A6FC2F6D8C1D.roa (hash: zJWQpnOJZG73raUB2XV36ffD+zWbugbvO1hLTY3gu00=)
                          3: F998A4B4A68111EF83490D8F762E951A.roa (hash: gRJbn7TUJdVqzLN1VGDb0fJr1Lg413PCOuxRtaJJTFU=)
                          4: 7E60CCBE817511EDBB60FBE8F1222468.roa (hash: 3botBW7CxliYrIkkF4AkSGZ+nyL0LTvgw3z56nnf7ps=)
                          5: 6069E9FA190611EFAAC79456017001B1.roa (hash: qaWE3oZP6UDJiJvSf/qTz0gA6Weypu8kgh11g/Q7Yjc=)
                          6: E621A12E190511EF8A909B51017001B1.roa (hash: /esz7AIhM5t30ub8s0aOAXHtnxsPkykRU/r4aTbVw0Y=)
                          7: 6DC5038018FE11EF8B80B516017001B1.roa (hash: prIb+/59lGAY5m7ee/w0QfgAEg0BFXE2ZtOJctQ1wsI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 953 (0x3b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698DD0AF, serialNumber=C03FDD694F51AAE38F051456101617C56FD89C4A
        Validity
            Not Before: Apr 26 03:20:35 2025 GMT
            Not After : Apr 28 03:20:35 2025 GMT
        Subject: CN=680c5104-29d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cc:e9:d6:4f:78:d4:79:1b:5d:8a:0a:0c:f9:
                    18:8e:1f:03:45:09:e3:34:d4:ec:55:f7:92:af:b7:
                    47:39:95:75:48:53:02:b5:1a:be:9a:7b:f6:00:0c:
                    72:26:3f:bc:a0:b0:ee:95:4a:bf:52:46:1f:fb:8c:
                    a8:a7:02:97:82:83:27:e2:09:8a:6b:d4:2d:73:51:
                    77:70:05:fe:03:5f:8c:ea:0f:e7:22:43:a3:90:1e:
                    d9:5d:b8:36:a1:e9:87:a0:77:5f:ef:19:64:91:ac:
                    b7:0f:f9:da:29:49:42:f8:ea:2a:19:02:03:89:7f:
                    8f:4a:57:75:ce:08:39:7f:ce:9d:b6:7a:5d:d3:24:
                    2c:df:f1:bc:38:2a:ee:c1:33:54:1d:e0:3b:0a:85:
                    b0:9d:00:59:91:58:03:71:3c:4a:aa:6e:96:aa:01:
                    3f:3c:de:8f:30:78:e0:3d:1c:ad:a8:a7:3c:bf:99:
                    a9:9f:1d:c7:c2:72:9b:40:e0:86:ab:87:b8:7a:33:
                    28:43:98:9e:5d:23:b5:34:b7:28:6d:93:86:5e:53:
                    d1:27:06:67:00:f9:4a:b2:4c:fd:4d:48:dc:01:d9:
                    8f:70:ee:30:cc:99:4d:e3:c9:b5:1b:fc:1f:b9:a5:
                    8c:9f:24:a3:93:17:c4:b9:32:8c:b5:18:53:ed:b0:
                    25:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:D9:58:F7:E4:89:B7:1D:DA:BD:70:75:5F:E1:E8:AD:C7:AC:F9:4D
            X509v3 Authority Key Identifier:
                keyid:C0:3F:DD:69:4F:51:AA:E3:8F:05:14:56:10:16:17:C5:6F:D8:9C:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wD_daU9RquOPBRRWEBYXxW_YnEo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698DD0/56C8EA4C667711ED967FC0A2F1222468/wD_daU9RquOPBRRWEBYXxW_YnEo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fe:fa:49:a1:25:01:e1:c3:0c:09:df:5f:8b:77:fa:a5:4b:
         4f:3f:42:47:b6:c4:4f:55:14:ad:0f:99:c3:c0:d1:93:96:69:
         6c:43:83:a8:fa:62:1d:66:91:b5:7d:5b:2e:0d:ab:41:9c:03:
         71:73:3a:a0:0b:92:e0:c0:09:70:85:02:f0:89:89:e8:76:09:
         fa:a2:92:7c:0a:d1:47:cc:41:c4:63:d5:a2:75:26:6c:4a:a1:
         09:d6:fe:0b:11:6f:a4:6a:45:f3:44:6f:0b:9e:dd:67:56:66:
         0b:28:c2:9b:11:4a:a0:fd:0a:46:4c:6d:bd:5f:11:a6:79:54:
         d3:15:57:51:b2:e7:91:e1:87:ac:57:69:97:b5:9f:71:d9:33:
         3a:9c:39:94:4d:0b:25:88:88:6e:ea:c4:a1:75:6c:d5:17:0b:
         f2:37:a5:28:28:f3:78:a6:54:6b:f9:bd:ce:b6:b0:d9:7c:15:
         75:ce:18:94:6c:3d:d9:3f:84:c1:25:3d:3c:a8:60:ad:61:8b:
         a1:b1:9b:e1:b4:42:e9:3c:74:21:01:1b:bb:e6:ff:1e:61:8d:
         1f:14:85:5e:61:0d:b4:c7:a5:ad:de:b5:be:00:a4:29:a5:74:
         33:8b:4f:c2:1e:6b:0a:fe:dd:48:9b:a6:76:ce:d8:83:7e:df:
         80:da:91:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:21:07 2025 by rpki-client on console.sobornost.net