Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
File:                     3MPWc23vjmmxdsLjgI6oQGpetKE.mft (raw, json)
Hash identifier:          OOWWeJ4iFWF0hlKDPUny30CjK4SGG28D0UP9au78KWA=
Subject key identifier:   B6:FE:30:EC:B6:BC:7D:0D:65:77:C2:EE:6A:E7:C8:56:F4:1B:23:98
Authority key identifier: DC:C3:D6:73:6D:EF:8E:69:B1:76:C2:E3:80:8E:A8:40:6A:5E:B4:A1
Certificate issuer:       /CN=F36A2F84AR/serialNumber=DCC3D6736DEF8E69B176C2E3808EA8406A5EB4A1
Certificate serial:       0586
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
Manifest number:          0583
Signing time:             Sat 26 Apr 2025 02:27:03 +0000
Manifest this update:     Sat 26 Apr 2025 02:27:02 +0000
Manifest next update:     Mon 28 Apr 2025 02:27:02 +0000
Files and hashes:         1: 3MPWc23vjmmxdsLjgI6oQGpetKE.crl (hash: r1QsxKUvc6LZA7cnQEcYBvMGGy67UiUIJBe+Mij7WKM=)
                          2: 5F04C4C62D9B11ECA647564FD8A014CE.roa (hash: zW0DV4hdw90fXmQHrES0qIG730a3Er4NWHsJMqXehd8=)
                          3: 09859B12EEB511EBAC07A132D8A014CE.roa (hash: QJgNFrSSnI5wUL7064SxE7ymTJEcB6oc8kqJd8ZGe2E=)
                          4: D68FB06AEEC011EB8A6E3C44D8A014CE.roa (hash: FZohHGP60efclGdlHNaaNbxSbBTri6OJhgg/NinDFR0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
                          rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1414 (0x586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2F84AR, serialNumber=DCC3D6736DEF8E69B176C2E3808EA8406A5EB4A1
        Validity
            Not Before: Apr 26 02:27:02 2025 GMT
            Not After : Apr 28 02:27:02 2025 GMT
        Subject: CN=680c4477-fbd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4a:14:60:36:33:97:18:d3:6e:60:d7:d2:7b:
                    75:1e:24:4c:c1:5e:c9:74:7e:ca:d5:9c:77:88:d3:
                    ac:4c:3b:ba:59:4b:9e:ee:71:20:0c:2f:ba:96:55:
                    7d:b7:c7:8b:bf:bf:97:e6:92:39:ef:e0:a0:65:0c:
                    69:68:67:be:4d:bb:85:4c:ca:f7:90:08:39:21:3d:
                    c6:6b:97:81:5e:42:30:15:7b:76:0b:03:f9:a7:0c:
                    f7:29:74:b6:dc:0f:26:ef:1e:6c:12:0e:d8:bd:56:
                    ae:ca:d9:bc:68:4b:0d:fc:dc:da:fc:56:89:68:89:
                    1c:45:49:e7:ee:fc:3a:d2:1d:98:5e:b2:19:9c:41:
                    da:e3:87:60:f9:bf:3a:18:e0:f2:0b:73:3e:12:b5:
                    e2:38:29:a4:25:b0:20:ca:68:da:b4:16:f3:65:b5:
                    da:3d:ff:fa:28:b4:f0:72:ca:17:6b:08:48:44:24:
                    18:a6:d3:30:09:04:eb:ef:46:71:68:d5:ef:dc:4a:
                    1c:8f:d1:14:ec:cc:a2:ff:4c:12:47:27:b9:1e:67:
                    3f:44:b5:4d:00:db:fc:c0:04:8b:af:17:c7:72:7b:
                    0c:be:11:8e:95:0b:5f:13:ae:c7:d2:24:85:08:78:
                    8e:39:18:3d:47:10:d7:e0:3b:60:ea:6c:7f:a6:c5:
                    80:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:FE:30:EC:B6:BC:7D:0D:65:77:C2:EE:6A:E7:C8:56:F4:1B:23:98
            X509v3 Authority Key Identifier:
                keyid:DC:C3:D6:73:6D:EF:8E:69:B1:76:C2:E3:80:8E:A8:40:6A:5E:B4:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3MPWc23vjmmxdsLjgI6oQGpetKE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/935BF350EEAF11EB91CC6D2AD8A014CE/3MPWc23vjmmxdsLjgI6oQGpetKE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:2c:53:76:b8:62:63:3c:64:5d:77:99:31:5b:22:5f:39:29:
         a8:47:33:f7:e5:a1:f0:bb:6c:25:42:21:d7:c6:da:f4:a9:be:
         c5:fd:19:a1:ed:e7:c0:ce:21:85:6c:67:5b:76:ac:e7:dc:0d:
         fc:f8:8e:1d:8e:66:da:b6:43:98:97:3b:fe:3c:43:05:c5:78:
         1f:eb:fc:58:a4:da:db:c5:3c:42:54:2d:49:13:f1:58:cc:ad:
         29:e2:67:27:3e:68:d8:07:4c:e2:a8:53:7c:20:dc:91:6a:48:
         0e:1e:10:ec:65:33:8b:8b:b3:fe:98:85:ab:c6:11:6f:b2:8c:
         bf:6d:44:bf:f1:f6:0b:f0:57:2a:2c:bf:ec:0c:5e:59:7d:af:
         e9:b1:d8:c9:6c:12:e1:d2:6e:2e:14:22:1e:42:ca:8e:36:96:
         84:4e:65:7a:ef:13:7b:c3:ad:86:f3:91:f1:c0:fd:56:1c:f3:
         74:bc:40:a4:83:8e:38:2f:c8:19:10:22:1d:98:74:94:3d:fe:
         e7:8b:b1:1f:b1:ba:bf:dc:b8:85:31:0b:3a:19:48:ff:9f:b6:
         fa:3d:b5:28:5b:01:aa:52:70:ba:d9:ad:5c:1f:c1:43:c5:0e:
         33:2c:5e:5c:d0:40:bc:0c:80:2e:47:45:97:fd:b1:28:ac:9a:
         cd:b6:0d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:21:08 2025 by rpki-client on console.sobornost.net