Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.mft
File:                     jdcjjwE3sVj1PHvg_w0uWBnz638.mft (raw, json)
Hash identifier:          dF2qwDJuiFQcpiZkZ1oLGT14xkAaIVbp0+YwpP6h3/I=
Subject key identifier:   8C:AC:0F:CF:3A:EB:E2:51:C4:41:31:53:F3:BF:64:58:EB:F0:D3:0C
Authority key identifier: 8D:D7:23:8F:01:37:B1:58:F5:3C:7B:E0:FF:0D:2E:58:19:F3:EB:7F
Certificate issuer:       /CN=F36A15D5AF/serialNumber=8DD7238F0137B158F53C7BE0FF0D2E5819F3EB7F
Certificate serial:       085B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jdcjjwE3sVj1PHvg_w0uWBnz638.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.mft
Manifest number:          0859
Signing time:             Sun 27 Apr 2025 01:36:34 +0000
Manifest this update:     Sun 27 Apr 2025 01:36:33 +0000
Manifest next update:     Tue 29 Apr 2025 01:36:33 +0000
Files and hashes:         1: jdcjjwE3sVj1PHvg_w0uWBnz638.crl (hash: BgK7TXEQ8gE4x0LTKLgs/2dnJe5/pLGPTUGMhu097MM=)
                          2: 93BEE2E806AE11EA96835D44F8AEA228.roa (hash: ympYrU6cVzeM/Zo6Ql2gUr5WY/OKcA1alTUO/oYBqs8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jdcjjwE3sVj1PHvg_w0uWBnz638.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2139 (0x85b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A15D5AF, serialNumber=8DD7238F0137B158F53C7BE0FF0D2E5819F3EB7F
        Validity
            Not Before: Apr 27 01:36:33 2025 GMT
            Not After : Apr 29 01:36:33 2025 GMT
        Subject: CN=680d8a22-05a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:94:45:cb:8b:98:fc:e6:70:3a:19:9a:67:2e:
                    50:76:ae:b0:7d:4e:05:68:a3:c8:89:ee:e2:75:d5:
                    4a:4d:ee:7a:45:06:2f:17:c6:43:25:1a:9e:fa:a9:
                    4b:9f:fa:b0:5a:59:98:fb:18:24:71:72:e0:cc:3a:
                    7b:67:76:55:53:15:f0:0e:13:00:5c:67:fd:bb:d9:
                    63:bf:ea:6b:bd:26:ce:a5:76:27:a8:0f:65:2b:6c:
                    f6:ee:af:8f:6c:82:38:db:d4:63:9d:30:7f:a2:e5:
                    3b:27:9e:9d:18:c0:22:99:83:b0:ea:16:bb:fd:ff:
                    7f:9e:5a:ee:18:a0:cd:b6:44:44:56:b2:55:15:87:
                    98:ad:b5:53:64:b4:0e:98:d1:79:28:0a:8a:19:bd:
                    5c:34:f9:34:e2:42:61:9a:ef:cf:e1:2f:c5:0e:0c:
                    4f:fc:c6:78:e4:d7:e6:74:87:37:b7:d5:20:d3:0e:
                    c5:d4:36:b1:bf:46:80:f2:1c:52:e1:55:6e:f2:a7:
                    92:4c:09:4f:a6:d0:ef:39:35:58:d5:63:6e:bf:cd:
                    c9:84:fe:f0:5c:65:30:f3:f9:14:e8:dd:4d:16:fc:
                    8e:55:4e:b6:ea:69:fd:3d:af:b2:6a:e6:39:6d:e0:
                    1a:57:b9:d0:86:7f:23:88:2d:a0:10:f1:ab:e8:1e:
                    b7:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AC:0F:CF:3A:EB:E2:51:C4:41:31:53:F3:BF:64:58:EB:F0:D3:0C
            X509v3 Authority Key Identifier:
                keyid:8D:D7:23:8F:01:37:B1:58:F5:3C:7B:E0:FF:0D:2E:58:19:F3:EB:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jdcjjwE3sVj1PHvg_w0uWBnz638.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/F6F2AF36C3E511E99DA50E70F8AEA228/jdcjjwE3sVj1PHvg_w0uWBnz638.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:14:1f:9f:09:ad:91:2e:2d:fa:4d:4e:6c:16:b3:38:e4:5f:
         e5:bd:fa:77:8c:bd:67:76:93:8a:cf:f4:20:cc:33:85:be:53:
         63:3b:cf:b7:a8:62:c8:21:1d:78:73:d2:d2:25:80:9d:86:65:
         03:45:72:f8:71:aa:d4:84:8b:1c:9d:cc:4f:09:4f:7a:d0:23:
         e8:33:f5:79:72:a6:e4:ce:61:34:c0:5e:74:fa:93:79:7b:d4:
         6e:f6:7c:5b:ce:e3:94:73:39:b8:02:14:f5:62:06:55:a9:01:
         54:16:a5:10:6f:45:09:20:d7:8f:3a:99:25:24:2b:9e:47:6d:
         0a:92:d2:e9:44:5a:b3:b1:18:2f:94:a4:63:87:d8:ac:6a:3f:
         03:1a:e2:0d:43:17:5a:34:8b:56:47:6c:97:aa:c3:8e:96:88:
         a5:0a:1c:84:10:76:15:dc:e2:c2:1a:c6:74:98:4c:36:56:2a:
         81:c1:48:4a:54:4e:64:08:8a:6e:83:42:4a:b6:43:1f:b1:41:
         be:ae:b5:fa:09:45:1b:cc:be:85:24:7b:82:f9:b0:76:cd:7a:
         59:e0:46:81:8e:30:de:b7:8b:1f:42:0c:4c:3a:17:16:c8:b6:
         d9:17:3c:79:df:75:f5:b6:f2:be:5e:a9:13:38:24:c3:c3:1e:
         cb:3c:21:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:45 2025 by rpki-client on console.sobornost.net