Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
File:                     ai026HfXJSbET24AT680-ZBPIxE.mft (raw, json)
Hash identifier:          2flPFKE4npdDkpL6XKqgLq2zGOLfBPMJgipcui3BRdQ=
Subject key identifier:   91:29:84:1C:DB:B3:19:10:B7:30:AD:7F:AB:33:03:6B:4B:47:F4:EB
Authority key identifier: 6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11
Certificate issuer:       /CN=F36A991DAF/serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
Certificate serial:       0697
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
Manifest number:          0697
Signing time:             Sun 27 Apr 2025 02:02:41 +0000
Manifest this update:     Sun 27 Apr 2025 02:02:41 +0000
Manifest next update:     Tue 29 Apr 2025 02:02:41 +0000
Files and hashes:         1: ai026HfXJSbET24AT680-ZBPIxE.crl (hash: hx3wxaIeIetukC3bYBxVd7n8ogDifawaL7kiVg5yPAQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1687 (0x697)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A991DAF, serialNumber=6A2D36E877D72526C44F6E004FAF34F9904F2311
        Validity
            Not Before: Apr 27 02:02:41 2025 GMT
            Not After : Apr 29 02:02:41 2025 GMT
        Subject: CN=680d9041-3d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:0b:d6:51:84:97:56:ab:f8:e6:e4:15:79:
                    2d:34:61:73:21:fe:94:22:53:af:87:ac:b5:1d:ba:
                    63:9e:41:4e:b4:01:bb:0d:e7:a5:ca:4e:4b:bb:d5:
                    8a:a2:01:17:ab:4f:79:ad:45:f7:49:01:15:da:be:
                    15:37:99:5f:df:5f:eb:fa:c8:62:bf:0a:4e:28:d0:
                    11:8d:9e:2d:a9:a8:52:54:c2:22:25:c8:2a:9d:2c:
                    3d:5c:73:1c:24:62:38:4b:b3:30:5b:5b:f6:96:cc:
                    a8:f6:30:f7:15:ab:e4:e8:de:45:e0:fa:bf:8a:84:
                    88:ff:b7:74:91:01:ab:c0:5c:a9:37:d0:85:6c:5b:
                    83:8f:e2:55:15:69:d3:c2:02:f7:57:22:c4:0b:c7:
                    e9:fd:e6:be:24:5a:d8:3e:3a:fb:8d:03:4b:88:d1:
                    22:85:88:7f:a0:6f:3e:ee:39:21:22:6b:6b:d1:1d:
                    98:2a:c2:7d:73:92:92:ad:ec:6d:6a:55:e0:1a:5d:
                    6f:89:a7:f5:c3:aa:55:1a:fe:76:de:66:bd:b3:8f:
                    a1:8d:2f:e8:0d:53:cd:57:bc:b6:2a:1d:a5:2c:52:
                    ec:88:62:ab:59:59:68:56:00:e7:df:d5:1b:88:36:
                    e2:fa:e7:4a:c7:1c:7f:02:10:c4:f8:16:59:bc:6f:
                    7e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:29:84:1C:DB:B3:19:10:B7:30:AD:7F:AB:33:03:6B:4B:47:F4:EB
            X509v3 Authority Key Identifier:
                keyid:6A:2D:36:E8:77:D7:25:26:C4:4F:6E:00:4F:AF:34:F9:90:4F:23:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ai026HfXJSbET24AT680-ZBPIxE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A991D/819A7F2419F311EBB2A28308F8AEA228/ai026HfXJSbET24AT680-ZBPIxE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:71:da:3f:7f:49:2d:57:cb:02:52:a7:c0:49:7f:8f:79:ca:
         de:c0:05:51:d4:f1:ff:95:53:94:8f:e2:d1:48:81:a1:8f:37:
         c5:2b:35:1f:9f:c9:fb:84:6b:68:37:00:aa:59:c7:1f:d9:d1:
         80:90:73:cb:7d:50:0f:da:6e:61:ac:be:15:c0:66:88:2b:dd:
         27:f1:b4:3b:cf:14:a0:20:39:e2:27:86:3b:89:5f:a9:92:bb:
         06:ae:84:d8:20:23:3e:4a:29:79:f4:30:ca:33:f3:40:b0:ed:
         98:bb:a8:db:71:2e:c8:db:75:6a:25:de:42:84:21:a6:18:ab:
         32:94:5b:88:26:61:50:ce:a9:e9:c9:61:ac:e4:de:71:e9:0b:
         b5:93:01:be:88:72:d8:dd:a9:46:d0:df:9f:74:e1:87:d4:90:
         57:8e:b7:d2:72:16:60:ee:c6:37:88:39:6a:f5:0c:7f:21:5a:
         5d:6d:cf:36:41:36:c8:47:4f:76:92:d7:53:8b:f3:fb:bd:6d:
         4c:be:5e:fb:bb:4c:e3:49:a9:ac:06:32:77:50:23:85:ed:d1:
         a6:91:0a:bf:a9:01:db:14:2b:2b:9e:00:90:25:51:d0:4c:34:
         42:f4:4e:26:a4:b5:82:a8:3c:d5:a7:b0:51:b6:82:45:e5:bb:
         8a:a3:20:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:47 2025 by rpki-client on console.sobornost.net