Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
File:                     hLwioUu1-Im8EKIs8XycGbUZsog.mft (raw, json)
Hash identifier:          zBeAxprHC63u5etXLHm2OMTimZHyP0VU+xjOQE/oXdQ=
Subject key identifier:   01:35:68:DC:22:08:FE:49:28:7E:FD:4B:EA:29:A4:67:4E:04:1A:13
Authority key identifier: 84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88
Certificate issuer:       /CN=F36A4459AF/serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
Certificate serial:       03F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
Manifest number:          03F2
Signing time:             Mon 28 Apr 2025 03:14:50 +0000
Manifest this update:     Mon 28 Apr 2025 03:14:49 +0000
Manifest next update:     Wed 30 Apr 2025 03:14:49 +0000
Files and hashes:         1: hLwioUu1-Im8EKIs8XycGbUZsog.crl (hash: VGIcSPTNpMqoTMDv0ymJ+vfNhy21XDFnC7AMkWVsUZY=)
                          2: C3901116387411EF9F0A6753762E951A.roa (hash: qdBvOaIzW2ROmvZO0TJkM8Fru7b3r82SzgASgXYo2aY=)
                          3: 262E806A2D1D11ED9D41FE8EF1222468.roa (hash: 9GZ0//sbJ3vFwpfgXt6yk5rqOfS3J7V+TWWZnRbeOv8=)
                          4: C59A0A6C2D1C11EDB02E0A8EF1222468.roa (hash: Y1g+dPExFN1MrB2P2z+NSyvwa7SBT+wcu+TZRMMx4+8=)
                          5: C08D1C382D1E11ED81F11D93F1222468.roa (hash: lVr4qDLggHX3PLabm1ZYWRZMbT4vO1C7CbkdD5snQVw=)
                          6: 2986AA742D1F11ED80553694F1222468.roa (hash: k/pZPcK4mbEaTzMdMQoO2iiJYX2nlpbZfqRbx3IuK68=)
                          7: DDD5C20E089A11F09138F44B762E951A.roa (hash: bND5/v8oDzRkyVCYCyJ/tZXWrbjdrK9HzUJFL2fgT00=)
                          8: 59614966387611EFA5607E60762E951A.roa (hash: lnqdSRdxl7sl5sos8mLO/d6MRVMLzwHHBU5Tg+jt3lU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1017 (0x3f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A4459AF, serialNumber=84BC22A14BB5F889BC10A22CF17C9C19B519B288
        Validity
            Not Before: Apr 28 03:14:49 2025 GMT
            Not After : Apr 30 03:14:49 2025 GMT
        Subject: CN=680ef2aa-4f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ce:7c:77:d8:b0:0a:a8:8e:5c:64:95:9d:4c:
                    4a:58:29:37:cb:2c:06:5b:2b:99:cb:04:1d:02:5e:
                    2e:0f:33:ac:aa:23:3e:22:61:8e:ac:fb:80:11:b2:
                    95:9f:d4:13:ec:77:e1:00:65:2e:6a:58:c3:6a:e0:
                    2c:b6:f0:46:0b:01:0b:7e:84:69:eb:9a:2a:4a:69:
                    1b:c8:38:f9:a3:09:fe:c7:ed:7b:47:6e:21:00:07:
                    26:f1:15:94:0b:94:59:53:9b:25:84:5e:e7:6f:b7:
                    ff:2b:80:cf:54:a6:b4:b0:2e:2d:b3:56:ea:3c:38:
                    08:20:c0:63:d4:6e:98:41:4f:71:1a:c5:b2:bc:93:
                    1e:d3:e7:cb:73:f0:23:73:53:6a:11:d3:e8:e4:e2:
                    86:d8:79:7c:9a:ec:0a:ee:ea:83:94:a9:47:f4:2b:
                    b2:9f:14:48:18:d6:71:53:35:c6:92:b0:61:69:a3:
                    93:de:0e:7e:50:2c:0e:9c:7a:5e:1d:7f:dd:ba:98:
                    db:f8:95:5a:9f:71:57:19:1e:ab:b3:a4:c1:c8:7c:
                    63:52:9b:c0:f0:d1:0b:21:d4:9a:c2:a2:74:cd:af:
                    d3:89:b4:ee:04:94:cc:56:40:6a:12:12:6c:28:f8:
                    1b:73:f6:da:cd:74:25:72:5c:65:7e:17:2d:71:82:
                    42:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:35:68:DC:22:08:FE:49:28:7E:FD:4B:EA:29:A4:67:4E:04:1A:13
            X509v3 Authority Key Identifier:
                keyid:84:BC:22:A1:4B:B5:F8:89:BC:10:A2:2C:F1:7C:9C:19:B5:19:B2:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hLwioUu1-Im8EKIs8XycGbUZsog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A4459/CDD74D762D1B11EDBE00888BF1222468/hLwioUu1-Im8EKIs8XycGbUZsog.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:5e:85:1a:9c:12:dc:9c:3a:41:0e:de:cb:63:ca:c4:15:e4:
         e3:5c:02:98:20:bb:18:f2:bb:9b:cd:81:52:e5:be:5c:4c:d3:
         71:5c:f3:85:c2:66:46:77:41:a0:18:c5:ca:cb:9f:44:b9:1a:
         2b:b9:cc:a6:65:55:97:a1:98:66:c9:b0:83:74:80:0c:f2:50:
         8f:8e:c8:05:e3:75:63:73:59:09:f9:54:5e:d6:cd:b7:5c:9c:
         ae:81:a7:09:4c:79:c6:a6:9b:b3:17:53:ad:95:ff:53:f8:31:
         20:0d:05:49:8b:d0:73:56:89:ba:3d:d1:57:cf:8f:cd:8d:d8:
         3f:67:0f:b6:06:8d:be:64:48:10:59:50:5d:6a:30:65:8a:fa:
         4d:54:6d:a0:c6:2e:d3:e7:0e:5e:53:c6:98:0c:1a:d5:39:8f:
         6b:e6:cc:19:5d:8f:2c:7c:a6:76:53:31:20:45:bb:05:ee:fd:
         c1:00:38:b4:ab:77:46:cd:0b:76:63:eb:9f:76:15:a8:e5:42:
         e5:da:d2:4e:20:36:2a:b7:43:9d:2d:a3:1b:a3:ab:2d:12:65:
         28:62:c3:f3:cb:03:1a:23:ba:cd:bf:b3:c7:7d:fc:4f:fc:3f:
         25:45:da:a3:f3:3a:bd:e1:4a:39:2e:5a:0e:b1:ae:35:06:6a:
         ee:29:b9:72
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0NTlBRjExMC8GA1UEBRMoODRCQzIyQTE0QkI1Rjg4OUJDMTBBMjJDRjE3QzlD
MTlCNTE5QjI4ODAeFw0yNTA0MjgwMzE0NDlaFw0yNTA0MzAwMzE0NDlaMBgxFjAU
BgNVBAMTDTY4MGVmMmFhLTRmN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDznx32LAKqI5cZJWdTEpYKTfLLAZbK5nLBB0CXi4PM6yqIz4iYY6s+4AR
spWf1BPsd+EAZS5qWMNq4Cy28EYLAQt+hGnrmipKaRvIOPmjCf7H7XtHbiEABybx
FZQLlFlTmyWEXudvt/8rgM9UprSwLi2zVuo8OAggwGPUbphBT3EaxbK8kx7T58tz
8CNzU2oR0+jk4obYeXya7Aru6oOUqUf0K7KfFEgY1nFTNcaSsGFpo5PeDn5QLA6c
el4df926mNv4lVqfcVcZHquzpMHIfGNSm8Dw0Qsh1JrConTNr9OJtO4ElMxWQGoS
Emwo+Btz9trNdCVyXGV+Fy1xgkJZAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUATVo
3CII/kkofv1L6imkZ04EGhMwHwYDVR0jBBgwFoAUhLwioUu1+Im8EKIs8XycGbUZ
sogwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NDU5L0NERDc0RDc2MkQxQjExRURCRTAwODg4QkYxMjIyNDY4L2hMd2lv
VXUxLUltOEVLSXM4WHljR2JVWnNvZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hMd2lvVXUxLUltOEVLSXM4WHljR2JVWnNvZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTQ0NTkvQ0RENzRENzYyRDFCMTFFREJFMDA4ODhCRjEy
MjI0NjgvaEx3aW9VdTEtSW04RUtJczhYeWNHYlVac29nLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDVXoUanBLcnDpBDt7LY8rEFeTjXAKY
ILsY8rubzYFS5b5cTNNxXPOFwmZGd0GgGMXKy59EuRorucymZVWXoZhmybCDdIAM
8lCPjsgF43Vjc1kJ+VRe1s23XJyugacJTHnGppuzF1Otlf9T+DEgDQVJi9BzVom6
PdFXz4/Njdg/Zw+2Bo2+ZEgQWVBdajBlivpNVG2gxi7T5w5eU8aYDBrVOY9r5swZ
XY8sfKZ2UzEgRbsF7v3BADi0q3dGzQt2Y+ufdhWo5ULl2tJOIDYqt0OdLaMbo6st
EmUoYsPzywMaI7rNv7PHffxP/D8lRdqj8zq94Uo5LloOsa41BmruKbly
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:06:18 2025 by rpki-client on console.sobornost.net