Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
File:                     HD250CDCm_5JEPoUqlAU9gSkJn8.mft (raw, json)
Hash identifier:          urf3T14C6ysDsdEboZpzHiyvBfvYjctt1Nt0+Q8f7Us=
Subject key identifier:   CE:96:C2:A7:06:18:D0:CE:D2:44:C1:DA:3D:0E:DD:45:7F:B6:C8:FE
Authority key identifier: 1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F
Certificate issuer:       /CN=F369E2BDAF/serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
Certificate serial:       079B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
Manifest number:          0795
Signing time:             Fri 25 Apr 2025 01:47:16 +0000
Manifest this update:     Fri 25 Apr 2025 01:47:15 +0000
Manifest next update:     Sun 27 Apr 2025 01:47:15 +0000
Files and hashes:         1: HD250CDCm_5JEPoUqlAU9gSkJn8.crl (hash: SRF8scg0DyxZ3wh7AUejw3Piorz9P3VpN/qnXIgMebQ=)
                          2: CDF0081C70F711EAA281FF20F8AEA228.roa (hash: fFYrreAZo5U4KWtK7vRj8cUH2mjucnzUUJT2VrDYVDc=)
                          3: 57DC8B94594311EAB1EE2E61F8AEA228.roa (hash: 9IdSgdrivSza8u+XWxxC8YvqMBQsdLiCPyERfG7cngg=)
                          4: A936AAF870F711EA8C00D420F8AEA228.roa (hash: h7Qbm3X2TCVgdgM0/cTt4WYwz33KdG8jIAvDj0CvfDA=)
                          5: EC2721A870F711EA94C12321F8AEA228.roa (hash: H0RK+OL9qt2hdg5NTBlkcYhhkAHhYl2IgSl91pWodCw=)
                          6: 8A7230BA70F711EAB773C020F8AEA228.roa (hash: +UY6ocsMAssEaQx/2vFU1pZTXFT3vRCaWp9MYhngoW4=)
                          7: 34EC88D2594311EAB19C1B61F8AEA228.roa (hash: YNJO/Fu0d3uU51SAVuG+ftYS08KKoUW6lE8R11S/eF8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1947 (0x79b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E2BDAF, serialNumber=1C3DB9D020C29BFE4910FA14AA5014F604A4267F
        Validity
            Not Before: Apr 25 01:47:15 2025 GMT
            Not After : Apr 27 01:47:15 2025 GMT
        Subject: CN=680ae9a4-3636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:95:ac:84:83:30:90:fd:53:1e:c3:38:b7:74:
                    6e:eb:f4:d3:30:91:16:36:e0:91:5d:3e:3b:1d:01:
                    75:e7:03:d7:cb:61:64:e8:17:80:43:f9:17:66:be:
                    27:68:ee:b9:d5:62:69:30:cc:fd:b7:03:0d:46:bf:
                    b1:0a:c7:80:bd:3a:e8:fc:b8:1d:4f:57:0a:cd:26:
                    5d:08:bd:c9:3e:bb:49:cb:d5:66:a9:0d:4f:f1:a7:
                    c4:27:41:e5:35:39:e5:e0:98:8f:41:0e:05:72:8a:
                    1f:1d:09:74:87:e4:1d:6e:7e:81:98:5a:43:eb:e2:
                    7e:4a:a2:e6:c7:5a:73:e2:7a:91:9d:6c:eb:ea:20:
                    67:07:d9:c8:f2:71:e1:47:61:82:79:46:d9:0e:90:
                    3c:c9:06:59:36:f8:f7:89:70:43:9b:a3:5c:c1:59:
                    e9:6a:c5:28:7f:69:25:78:b9:62:ac:09:fd:7b:1b:
                    44:04:69:e9:64:91:7b:aa:74:5d:fa:b2:0a:a7:0a:
                    8e:7a:01:7e:0d:d9:1e:ea:15:21:be:68:1e:68:0c:
                    01:e0:f6:6a:b3:78:c4:ba:38:dc:01:6a:8a:49:68:
                    80:93:10:40:d6:12:15:70:97:10:63:c6:82:01:0a:
                    ad:d6:f5:be:19:f7:41:32:5e:22:fd:09:58:85:4d:
                    8f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:96:C2:A7:06:18:D0:CE:D2:44:C1:DA:3D:0E:DD:45:7F:B6:C8:FE
            X509v3 Authority Key Identifier:
                keyid:1C:3D:B9:D0:20:C2:9B:FE:49:10:FA:14:AA:50:14:F6:04:A4:26:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HD250CDCm_5JEPoUqlAU9gSkJn8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E2BD/00F29B8E594311EABDC6E160F8AEA228/HD250CDCm_5JEPoUqlAU9gSkJn8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:c3:25:25:e5:44:e8:b7:0d:52:55:67:4b:dd:d5:a8:f4:ff:
         7c:3c:bf:53:35:90:52:b0:5c:50:c3:7c:c2:e5:ac:ea:31:a0:
         bc:25:35:0d:a8:ee:64:e6:18:37:9f:29:eb:18:b6:42:28:49:
         90:47:84:f2:80:cc:56:d8:e7:9c:09:22:8b:ca:76:63:89:9f:
         dd:ec:6b:bb:77:ea:88:53:81:13:d4:26:20:91:82:f6:e6:1a:
         14:5d:10:2d:c5:d2:5f:5f:76:5d:f2:39:81:49:68:e4:3c:7d:
         21:73:2e:71:92:de:84:aa:13:61:70:fe:f8:05:62:92:ff:27:
         e4:3c:7c:65:91:c6:74:62:77:35:67:b4:7b:3e:f1:56:65:ec:
         60:2d:9a:12:8f:ac:4b:0b:77:79:5c:09:c3:eb:d4:ee:40:ec:
         1a:9b:e9:33:41:3d:cb:be:19:91:60:01:ef:32:a2:fb:e1:53:
         1b:7a:23:81:db:8d:65:67:bd:97:37:5c:f3:56:24:92:af:c8:
         9c:7b:7d:b4:a3:44:1e:3f:e1:e5:cc:8c:70:ba:9a:26:29:9d:
         32:01:84:ba:29:a2:a2:7c:c8:5d:14:a0:75:96:c0:02:02:b2:
         e5:7a:a6:56:58:39:f8:36:8a:78:57:69:86:85:7f:a0:83:d9:
         6b:e7:04:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:01 2025 by rpki-client on console.sobornost.net