Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
File:                     jho3RHX7X1BwyGbGDdVeiurPcXM.mft (raw, json)
Hash identifier:          XXjTieD7GA/zsHxQUkiu6CPfT4ZebMCF8FCxmPZV/O4=
Subject key identifier:   F3:71:2F:48:96:00:B5:80:DB:51:35:0A:0E:4F:35:53:C2:04:F5:C3
Authority key identifier: 8E:1A:37:44:75:FB:5F:50:70:C8:66:C6:0D:D5:5E:8A:EA:CF:71:73
Certificate issuer:       /CN=F36A31C5AR/serialNumber=8E1A374475FB5F5070C866C60DD55E8AEACF7173
Certificate serial:       9E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
Manifest number:          9D
Signing time:             Fri 25 Apr 2025 05:02:47 +0000
Manifest this update:     Fri 25 Apr 2025 05:02:46 +0000
Manifest next update:     Sun 27 Apr 2025 05:02:46 +0000
Files and hashes:         1: jho3RHX7X1BwyGbGDdVeiurPcXM.crl (hash: jA8oViz2iUJHUdGhVntb8Q4qQZDxEg/DQqHv2+aTmBw=)
                          2: 77A53CFAAD8011EF8D542C9E762E951A.roa (hash: w9cTIDCHrbI8wxVcQWpv1wqBRl6yaH60seRon5+S8UE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
                          rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A31C5AR, serialNumber=8E1A374475FB5F5070C866C60DD55E8AEACF7173
        Validity
            Not Before: Apr 25 05:02:46 2025 GMT
            Not After : Apr 27 05:02:46 2025 GMT
        Subject: CN=680b1776-836b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4b:b0:b8:6f:30:78:12:b1:f4:da:04:d6:9c:
                    43:95:af:3c:c7:cb:d2:36:c5:de:47:ec:90:25:b4:
                    1a:77:15:55:7d:f0:78:53:ae:06:ff:12:12:78:91:
                    cb:5c:22:78:26:3a:81:4a:db:a7:f7:31:85:da:60:
                    c7:12:80:01:ef:b8:f2:bd:43:01:3a:57:97:20:00:
                    4f:76:0e:b5:2a:1a:64:c3:33:3d:4d:96:45:18:17:
                    8e:8b:a8:3c:46:79:67:fd:d3:a4:6b:26:dd:72:9f:
                    2a:16:31:e2:a8:67:aa:ca:2b:61:8d:9d:e2:3a:86:
                    3a:d3:84:a4:c2:17:bd:ca:c0:a6:33:a8:21:fe:6f:
                    50:60:60:6d:6f:5f:21:f5:97:11:e9:f6:4b:9e:25:
                    da:94:a7:31:a1:b0:c2:c4:03:1f:1c:d0:a5:44:68:
                    31:c2:26:70:d0:82:1c:52:2b:2a:61:68:60:4d:32:
                    a4:ff:93:78:f0:3f:20:bf:28:43:30:be:6f:19:a4:
                    f9:40:e2:70:76:07:7d:b8:9a:96:50:59:a9:68:cb:
                    3e:48:c0:f2:bc:49:e2:b6:a5:ae:bc:8d:66:95:b5:
                    bc:68:19:51:8a:f8:ca:d8:7d:db:00:25:13:6d:f6:
                    23:31:56:64:16:5d:12:4d:c6:22:c7:89:4e:f7:f4:
                    c0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:71:2F:48:96:00:B5:80:DB:51:35:0A:0E:4F:35:53:C2:04:F5:C3
            X509v3 Authority Key Identifier:
                keyid:8E:1A:37:44:75:FB:5F:50:70:C8:66:C6:0D:D5:5E:8A:EA:CF:71:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/jho3RHX7X1BwyGbGDdVeiurPcXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/591E3E86AD7F11EFAF967597762E951A/jho3RHX7X1BwyGbGDdVeiurPcXM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:76:f0:a2:15:67:a3:42:c7:71:7f:63:84:ff:7a:48:c0:5d:
         37:8e:16:cc:a3:3e:aa:03:28:9e:79:d3:16:24:32:94:11:d1:
         20:ac:a3:8c:db:47:66:7b:a6:5c:5f:6e:9d:1e:09:6b:a5:21:
         61:4b:17:a8:e7:c3:b8:dd:8e:68:5e:c2:bb:a2:d9:83:84:7e:
         8f:a2:01:8d:5f:66:45:ad:55:72:97:8d:42:73:5c:fc:ef:dc:
         ea:96:dc:e9:1b:eb:3d:7f:bb:a8:2f:c2:fa:7c:b9:ed:64:52:
         f6:5a:04:0b:bb:c4:94:f2:43:40:b2:19:88:e0:aa:24:d6:46:
         02:d4:62:13:a7:bd:f4:46:39:f5:d8:69:b5:d5:d5:3e:3f:d6:
         f1:91:89:16:3c:0e:9e:44:54:99:b2:d4:df:f1:1e:12:c7:86:
         ca:56:6f:62:ea:5b:70:34:5a:6f:06:3d:a3:5e:c2:c2:a1:c9:
         5a:de:aa:f0:f5:b9:60:21:f5:c7:8f:c7:1e:24:6f:63:6f:5b:
         45:af:2b:2e:9f:4c:54:cb:65:c7:bc:ec:47:cc:ca:55:1d:85:
         43:9a:cd:d7:a2:21:2e:62:ba:3f:8a:09:14:c0:03:f3:3d:41:
         00:01:3e:0e:58:d6:37:b3:94:83:fc:43:c4:b2:1d:aa:76:13:
         7f:e7:df:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:28 2025 by rpki-client on console.sobornost.net