Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
File:                     41870XBX5RmmOBSWl-AwgOrYdys.mft (raw, json)
Hash identifier:          QmXNLaG3GO5jg6YQCxQ//MifNfFv/Lh/a/Op0ilpnDQ=
Subject key identifier:   AE:70:CF:49:3D:2D:50:8F:31:54:B2:82:E4:C7:C9:86:06:FB:AF:DB
Authority key identifier: E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B
Certificate issuer:       /CN=F36ABB63AF/serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
Certificate serial:       0E61
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
Manifest number:          0E5F
Signing time:             Mon 28 Apr 2025 00:51:43 +0000
Manifest this update:     Mon 28 Apr 2025 00:51:42 +0000
Manifest next update:     Wed 30 Apr 2025 00:51:42 +0000
Files and hashes:         1: 41870XBX5RmmOBSWl-AwgOrYdys.crl (hash: e/A0C7xmuMtJdTbzn+oCXvoKyBmPUyskZWoKK1ZZ87w=)
                          2: 752DB50C461511E99A25B144F8AEA228.roa (hash: k0Rhsuh/b99q9kDn1FoP+OO8bsw50UMZoPySxuOGhI8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                          rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3681 (0xe61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ABB63AF, serialNumber=E35F3BD17057E519A638149697E03080EAD8772B
        Validity
            Not Before: Apr 28 00:51:42 2025 GMT
            Not After : Apr 30 00:51:42 2025 GMT
        Subject: CN=680ed11e-caef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:69:e6:01:89:b1:61:d5:c0:d9:a9:bf:e2:70:
                    fe:e9:77:fb:4f:31:9a:18:35:4f:0e:f6:5b:ce:1c:
                    a1:51:22:72:0f:6c:e9:8c:17:92:b5:06:53:c5:9f:
                    3d:5d:1d:8d:20:c7:45:04:fb:cc:94:11:9e:86:52:
                    be:b3:ed:59:e3:aa:49:f4:b6:de:fc:61:ce:86:5d:
                    15:50:1f:1d:b4:f2:45:aa:50:de:d5:e6:b6:31:ed:
                    98:87:30:29:57:3c:c6:dc:a1:14:90:b0:d1:0e:d7:
                    98:eb:4e:48:a6:a8:28:fc:9d:34:ef:4c:ad:1d:67:
                    00:21:f1:2d:fd:5e:43:a9:26:ec:8d:58:51:f7:99:
                    98:22:ff:81:ac:ab:cd:30:b0:4c:f1:5e:cc:61:48:
                    05:a0:91:d1:59:4d:fd:90:f2:bd:94:91:44:d5:17:
                    c8:57:77:e3:4c:c6:e9:e4:2f:72:37:cc:dd:82:f2:
                    ce:34:0d:cf:3c:cd:6d:23:c3:9a:8d:58:2b:3f:67:
                    71:20:a4:0d:e5:db:c7:80:c1:dc:bb:a5:cf:d9:b9:
                    70:5f:2f:5f:42:b9:8e:1b:5c:1c:b0:08:72:07:3c:
                    2a:4e:26:7c:d8:24:67:b0:c0:e1:d7:8b:1a:f0:5b:
                    28:87:8e:b3:26:79:0d:f1:c6:01:d6:0e:c6:48:a4:
                    ab:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:70:CF:49:3D:2D:50:8F:31:54:B2:82:E4:C7:C9:86:06:FB:AF:DB
            X509v3 Authority Key Identifier:
                keyid:E3:5F:3B:D1:70:57:E5:19:A6:38:14:96:97:E0:30:80:EA:D8:77:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/41870XBX5RmmOBSWl-AwgOrYdys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ABB63/E08FB58213F311E5A8E5AE44F8AEA228/41870XBX5RmmOBSWl-AwgOrYdys.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:06:24:61:d6:e4:34:fd:bf:20:1d:6e:db:c9:11:dc:07:1b:
         96:99:6e:9b:0e:6f:52:d7:fd:a0:1d:28:af:d6:f6:d5:06:00:
         1a:c3:d2:26:aa:bf:54:67:bb:54:8e:5d:53:ec:bc:36:78:19:
         d6:9d:5e:2a:18:1b:0b:68:16:a8:ad:47:1e:fd:dc:91:7c:0f:
         d5:b2:42:de:46:5e:85:15:3a:f3:2d:b0:4b:58:96:dd:ea:6d:
         f1:0b:d2:64:e9:9b:5a:21:bd:4f:26:7c:44:9f:1e:35:fd:6b:
         55:20:fd:d2:dd:db:ac:bf:e3:b0:c3:12:7d:e3:7d:0a:2b:f4:
         c6:f8:e5:65:72:be:76:17:52:32:1c:cd:ae:18:f3:f0:2f:f6:
         5c:9e:02:d7:9b:46:fc:5f:d7:83:58:93:5c:62:de:6a:9a:1e:
         c0:cc:69:b1:5e:16:f3:1e:35:1d:69:5d:a0:6b:9f:65:13:66:
         99:04:27:c9:11:bd:34:b2:54:34:e5:73:ad:f4:4d:1a:02:f0:
         aa:41:d5:aa:c5:9f:2e:60:ea:9d:0c:cd:4c:83:cb:0b:de:6e:
         e6:20:e3:96:16:ea:68:49:65:14:68:11:cd:19:49:7e:d7:6d:
         19:39:06:41:a4:83:fa:90:8b:04:bd:21:93:1b:6b:80:fd:70:
         68:65:8c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:06:19 2025 by rpki-client on console.sobornost.net