Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
File:                     -Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft (raw, json)
Hash identifier:          RQxHnasRhRY0IH15FogusQlT2NAeFtaHnazZ4rKtM84=
Subject key identifier:   40:E3:F3:34:C9:45:14:CB:C4:8E:E2:B4:78:59:1A:70:B2:3A:CA:EF
Authority key identifier: F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB
Certificate issuer:       /CN=F36A44EAAR/serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
Certificate serial:       08A3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
Manifest number:          08A2
Signing time:             Sun 27 Apr 2025 01:31:12 +0000
Manifest this update:     Sun 27 Apr 2025 01:31:11 +0000
Manifest next update:     Tue 29 Apr 2025 01:31:11 +0000
Files and hashes:         1: -Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl (hash: 3l7iVkF0Xfyq3tSAtoVa66OkQq9SAfyppwZpzIR0qi4=)
                          2: CC310B4E890C11E9A4E3BF61F8AEA228.roa (hash: ihADbR6U+GfVQt9LE7QygTkif7rJadS5w63IsgC6psc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                          rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2211 (0x8a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAR, serialNumber=F85BB49854392228FB8B30DB05D96AC664CE83AB
        Validity
            Not Before: Apr 27 01:31:11 2025 GMT
            Not After : Apr 29 01:31:11 2025 GMT
        Subject: CN=680d88e0-7d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ee:6a:10:35:4a:cc:31:40:bb:b3:9a:49:2d:
                    10:3f:66:d3:f4:55:48:02:4b:91:68:79:17:a3:16:
                    ff:94:7d:74:c5:1d:db:f2:66:7d:d0:ab:ac:42:82:
                    67:5c:e8:22:58:b3:04:e2:0b:26:3e:7f:fd:fa:da:
                    00:ba:33:e8:a7:de:e3:01:69:7a:4b:de:99:1c:f0:
                    47:f0:4b:a5:77:6d:0a:34:47:ac:fe:df:19:25:8e:
                    27:f1:c9:04:87:3a:e3:93:32:8c:c2:3f:66:9e:2c:
                    19:6b:67:cd:4f:a3:54:87:6e:dc:78:ef:f3:20:1d:
                    93:9c:3f:e3:e2:50:14:c8:ef:7b:93:2f:23:0f:91:
                    a0:39:3c:5a:49:6a:63:19:86:b3:48:9b:6c:91:36:
                    fb:68:88:ca:82:42:15:cb:74:8e:51:e6:08:af:c3:
                    a9:d2:7b:b6:2c:08:84:50:2e:e3:ed:fe:bd:4f:94:
                    30:43:69:d6:39:07:c2:57:2b:bf:a5:b3:74:7b:d9:
                    d4:5c:87:f5:40:d1:4d:21:8b:07:b2:0d:48:31:0a:
                    46:5e:f7:b3:48:df:0c:d8:fa:eb:57:8f:37:a0:b8:
                    0b:6e:a2:c7:6c:d3:f0:3a:3e:7f:17:c9:f6:9b:4d:
                    35:9e:db:57:a7:38:66:14:9e:ff:83:7d:3c:01:e0:
                    ba:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E3:F3:34:C9:45:14:CB:C4:8E:E2:B4:78:59:1A:70:B2:3A:CA:EF
            X509v3 Authority Key Identifier:
                keyid:F8:5B:B4:98:54:39:22:28:FB:8B:30:DB:05:D9:6A:C6:64:CE:83:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/A8B7EC1C890911E9B57E685FF8AEA228/-Fu0mFQ5Iij7izDbBdlqxmTOg6s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:9c:85:49:51:6f:d8:4e:a2:60:05:53:7d:eb:67:f5:32:39:
         24:ad:ec:1c:b8:d6:01:03:eb:f5:32:d0:81:d2:7d:55:8f:47:
         02:5e:ac:2f:57:e4:39:ef:82:cb:64:ef:09:e5:e9:8e:d7:e6:
         cc:85:45:91:ba:92:05:4e:98:31:55:f1:71:6b:d8:31:dd:8a:
         87:d0:b5:48:d9:c4:8b:b7:bf:1d:f5:74:20:1e:88:1e:7c:c8:
         9d:2e:9e:dd:17:cc:af:4f:a3:94:70:20:c0:86:cf:2b:36:91:
         19:32:38:cf:76:68:b6:61:7c:b3:2f:23:d9:ce:3b:4b:f3:6c:
         4a:3c:f3:f0:15:86:01:9b:4c:45:79:69:6e:18:20:99:61:95:
         a7:7a:9c:79:6b:88:bc:cd:09:22:62:26:c7:6b:a5:69:4d:60:
         ec:05:89:6e:c3:ce:0b:6c:d7:2a:1d:24:13:74:69:02:20:6e:
         d8:15:58:b8:dd:53:6a:d1:08:22:67:dc:cb:6e:f0:16:d4:87:
         b6:e6:e7:cd:1b:92:b1:ec:80:98:b6:37:96:c8:78:fb:c9:04:
         1e:5d:91:32:cc:3d:3c:5e:b9:15:a1:f5:18:dd:d1:87:79:f3:
         3f:95:45:71:fe:77:e5:46:30:9b:21:53:db:da:8a:ed:ba:6d:
         2c:0d:ae:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:46 2025 by rpki-client on console.sobornost.net