Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
File:                     u_8lJAsgf5usxcuVSmIwmrulNl0.mft (raw, json)
Hash identifier:          d8Vq/hwYKwoZ9mD+jw/ZRbIMabbj0g6d0TaISHV2qS4=
Subject key identifier:   27:4D:92:61:4F:8E:03:96:EF:7F:9F:E7:1A:3D:22:36:56:7F:E2:6A
Authority key identifier: BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D
Certificate issuer:       /CN=F369D48AAF/serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
Certificate serial:       0529
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
Manifest number:          0527
Signing time:             Sat 26 Apr 2025 02:41:04 +0000
Manifest this update:     Sat 26 Apr 2025 02:41:04 +0000
Manifest next update:     Mon 28 Apr 2025 02:41:04 +0000
Files and hashes:         1: u_8lJAsgf5usxcuVSmIwmrulNl0.crl (hash: O2DH85uUdQA7ylTL3I2QCUWLTCiejune9PD/DzawDZg=)
                          2: 5C15170E7C3F11ED8559019DF1222468.roa (hash: Fnw4e2Z6mQxfu98S+Kvx8lPub/zYdBqQ2Qpl3ytsjPY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1321 (0x529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369D48AAF, serialNumber=BBFF25240B207F9BACC5CB954A62309ABBA5365D
        Validity
            Not Before: Apr 26 02:41:04 2025 GMT
            Not After : Apr 28 02:41:04 2025 GMT
        Subject: CN=680c47c0-9c0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:49:96:e6:7c:e4:9c:fd:a2:75:9c:6e:d3:88:
                    6f:d0:33:af:aa:f1:0a:d3:12:7f:09:71:ee:70:26:
                    17:94:89:30:c6:54:4f:bb:bd:0e:7c:c2:eb:a5:7f:
                    eb:1e:bc:71:81:42:4a:ce:d0:5c:a3:db:74:86:7b:
                    23:1b:17:52:6c:d0:98:50:d5:4b:90:ed:32:66:d6:
                    a6:e1:c1:8f:40:7f:46:4f:c0:91:6b:8c:38:6a:04:
                    05:93:9f:62:2f:c4:c1:aa:c6:48:d6:de:f5:fe:85:
                    02:27:76:20:1e:a3:a4:91:fc:ac:d4:22:68:40:58:
                    2d:7b:f4:e1:a1:2c:01:35:99:af:63:50:a6:61:de:
                    55:f9:08:69:a6:01:83:94:20:16:1c:44:7e:93:ed:
                    b0:c1:e2:05:48:4b:26:f0:ae:e2:6d:d8:50:05:f4:
                    75:07:5d:c8:69:45:14:bf:3a:db:b1:e0:aa:43:57:
                    0d:72:6a:eb:2b:9a:7c:be:95:6a:78:1f:46:c8:23:
                    45:55:e0:90:34:2c:a5:ba:62:02:7b:a3:44:d3:21:
                    32:c9:cb:fe:9b:b0:e9:cf:da:60:3f:b8:31:68:29:
                    4b:d6:74:5d:6d:f6:3f:78:4c:be:22:63:f8:f4:f0:
                    cb:00:a1:dc:3f:13:a8:59:85:d3:21:e9:0c:f8:b9:
                    e9:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4D:92:61:4F:8E:03:96:EF:7F:9F:E7:1A:3D:22:36:56:7F:E2:6A
            X509v3 Authority Key Identifier:
                keyid:BB:FF:25:24:0B:20:7F:9B:AC:C5:CB:95:4A:62:30:9A:BB:A5:36:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u_8lJAsgf5usxcuVSmIwmrulNl0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D48A/C4097DD038D611ECA501247DD8A014CE/u_8lJAsgf5usxcuVSmIwmrulNl0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:89:fd:51:7c:42:93:ae:b7:7a:3d:29:e2:80:7e:c1:07:68:
         79:48:d8:b5:fa:6a:ec:a8:09:97:23:a8:08:e1:bb:91:85:70:
         ad:08:dd:0a:7a:3c:e6:33:fb:30:4c:ef:f6:6b:f0:a1:cb:77:
         09:35:99:8d:90:bd:b2:9e:b9:c7:f7:44:03:12:61:4b:31:c4:
         59:c0:95:8d:94:94:91:5c:15:44:f6:4b:c7:3d:90:93:0e:4e:
         09:90:d1:29:3a:e9:24:60:e6:e9:28:a2:c8:1a:15:ef:d3:19:
         2b:a3:b0:cd:1f:f5:71:ae:1a:03:f9:66:f6:a8:18:45:35:74:
         d0:51:ec:a9:5a:0b:ad:a0:73:db:44:21:07:77:d8:62:68:ac:
         b3:ec:ba:0f:fb:d1:b9:f4:6c:2c:11:6c:f8:16:81:3b:24:be:
         ce:ff:b0:d6:a9:e2:18:02:0c:93:d6:0e:55:64:d7:8e:ad:d6:
         41:bd:f3:2c:ba:4d:d9:3b:15:6b:4b:28:56:65:95:e9:dd:d9:
         5e:a4:25:93:33:1f:de:1c:e6:7b:c7:8e:e1:12:5d:4b:6a:09:
         8f:55:53:c7:d3:39:02:c6:8b:bf:f1:52:f3:d1:7c:cc:53:07:
         13:57:f4:ee:b5:b7:32:12:e5:d7:fa:a9:30:e9:5b:9e:85:a7:
         a3:06:b2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:21:07 2025 by rpki-client on console.sobornost.net