Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.mft
File:                     Qthcb-Q83dnDQqmRI5Oe9tELlmE.mft (raw, json)
Hash identifier:          Mg0cD8tEcIsRVfaaaUw0IB+SaJo4d2BUYXef5NUlqPc=
Subject key identifier:   C2:8F:99:BA:BD:07:F0:3B:B3:D7:8B:75:A4:A9:5F:DD:CB:A7:B5:0F
Authority key identifier: 42:D8:5C:6F:E4:3C:DD:D9:C3:42:A9:91:23:93:9E:F6:D1:0B:96:61
Certificate issuer:       /CN=F36B95DEAF/serialNumber=42D85C6FE43CDDD9C342A99123939EF6D10B9661
Certificate serial:       0700
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qthcb-Q83dnDQqmRI5Oe9tELlmE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.mft
Manifest number:          06FD
Signing time:             Fri 25 Apr 2025 01:58:34 +0000
Manifest this update:     Fri 25 Apr 2025 01:58:33 +0000
Manifest next update:     Sun 27 Apr 2025 01:58:33 +0000
Files and hashes:         1: Qthcb-Q83dnDQqmRI5Oe9tELlmE.crl (hash: Hw96PmgQQ0+TcP2TqOA3vDJOavlDt678b6QtinuZ6NI=)
                          2: 5FD871EACA5F11EA8E777586F8AEA228.roa (hash: EtblfigLNGF6wfw5nHmJIbAVHju/Amjjjou8s+nuYu4=)
                          3: 9A1972CECA5E11EAA7968D85F8AEA228.roa (hash: o/3b7bz/I2GIF7K8ptLx/xwnuWsVO1fKO4zNdB3TrJA=)
                          4: 3B0F41F6119A11EE83C1C7674AD9E6FC.roa (hash: Akb8hG2TQ9VVrsrKElxgh/Wgpez3UXugTuk8ANcj3VE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qthcb-Q83dnDQqmRI5Oe9tELlmE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792 (0x700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B95DEAF, serialNumber=42D85C6FE43CDDD9C342A99123939EF6D10B9661
        Validity
            Not Before: Apr 25 01:58:33 2025 GMT
            Not After : Apr 27 01:58:33 2025 GMT
        Subject: CN=680aec4a-f87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:aa:ae:68:23:2b:48:9d:32:97:f0:20:c9:db:
                    d5:39:c5:aa:8e:f1:2a:35:ee:1d:d8:bf:fd:92:c0:
                    09:0f:7b:27:e1:f7:10:e4:7a:72:45:84:e0:27:fd:
                    59:1a:86:68:90:11:83:2d:86:8b:67:7f:ae:a0:50:
                    a1:53:0b:e1:b3:d5:00:5c:6b:ea:c6:b2:82:45:8f:
                    c7:39:44:6b:12:9d:78:90:be:28:b8:46:9f:a8:95:
                    85:f3:76:c2:c0:0b:73:18:4e:a4:9a:4c:32:82:94:
                    e0:ed:45:c4:ba:09:40:8c:4e:4f:8c:97:8b:e2:e4:
                    49:80:2a:0e:56:21:1d:53:5a:17:a8:f2:b3:38:92:
                    28:b4:21:c9:96:8e:14:20:8c:a7:e9:9b:b6:2b:c1:
                    5c:2e:93:0b:a9:6b:5a:e3:a4:b5:b1:97:14:f2:f0:
                    f2:5f:bd:01:de:27:33:98:66:0a:6b:8f:ba:d5:be:
                    58:91:9e:10:05:51:13:86:94:4b:be:9f:43:9a:a4:
                    52:c2:46:1e:f6:bc:b3:ca:f3:82:f8:be:dd:ea:d9:
                    ea:8b:3e:e0:f3:eb:3c:aa:57:5b:63:a1:dc:5a:f6:
                    11:d9:12:9a:c9:7b:6f:f3:48:9d:3a:51:19:59:d1:
                    e2:0e:7e:c4:f2:49:57:ff:4b:f9:29:d3:3b:8e:ec:
                    5e:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8F:99:BA:BD:07:F0:3B:B3:D7:8B:75:A4:A9:5F:DD:CB:A7:B5:0F
            X509v3 Authority Key Identifier:
                keyid:42:D8:5C:6F:E4:3C:DD:D9:C3:42:A9:91:23:93:9E:F6:D1:0B:96:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qthcb-Q83dnDQqmRI5Oe9tELlmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:89:ce:57:86:ff:a5:f2:5c:92:36:d9:62:b3:dc:d1:d6:59:
         cd:0a:ba:89:37:79:6a:ba:7f:9e:e7:81:f0:d0:79:50:52:39:
         c2:d8:e5:d9:32:a1:88:9c:d8:93:76:c6:48:34:22:54:f7:ce:
         1b:72:73:c6:db:5d:61:7d:6d:94:20:0d:b8:9c:14:d5:db:2f:
         23:65:cf:c5:6d:03:5d:f2:37:9c:43:e8:43:6f:4f:a2:02:e3:
         01:ba:20:d7:3a:ec:80:66:4e:7f:17:b9:50:f3:31:0d:80:d9:
         f7:df:cf:02:ac:13:bb:f3:7d:83:f6:e0:44:25:34:c0:e7:1d:
         9a:14:0d:d5:ab:57:b0:0f:0a:d4:b9:ea:e0:16:c0:94:e9:0e:
         2c:81:d4:9e:0c:58:29:de:09:ba:4f:4e:4e:93:d6:16:72:84:
         14:8d:6b:c1:f1:31:4f:92:2e:f6:fe:94:75:9b:de:1a:77:dc:
         bd:eb:87:d9:19:c3:e8:e0:42:be:5b:35:86:ef:cc:2e:48:06:
         26:b2:b0:8c:32:97:41:2c:15:6d:aa:ce:a3:be:0d:51:00:8c:
         34:c9:e1:46:47:33:4d:cb:9d:79:dd:b4:c6:08:9f:70:9e:45:
         b2:a1:f9:05:7f:9e:49:23:94:3f:57:3a:c8:36:9e:03:b5:ef:
         9f:84:be:ff
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Qjk1REVBRjExMC8GA1UEBRMoNDJEODVDNkZFNDNDREREOUMzNDJBOTkxMjM5MzlF
RjZEMTBCOTY2MTAeFw0yNTA0MjUwMTU4MzNaFw0yNTA0MjcwMTU4MzNaMBgxFjAU
BgNVBAMTDTY4MGFlYzRhLWY4N2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQqq5oIytInTKX8CDJ29U5xaqO8So17h3Yv/2SwAkPeyfh9xDkenJFhOAn
/VkahmiQEYMthotnf66gUKFTC+Gz1QBca+rGsoJFj8c5RGsSnXiQvii4Rp+olYXz
dsLAC3MYTqSaTDKClODtRcS6CUCMTk+Ml4vi5EmAKg5WIR1TWheo8rM4kii0IcmW
jhQgjKfpm7YrwVwukwupa1rjpLWxlxTy8PJfvQHeJzOYZgprj7rVvliRnhAFUROG
lEu+n0OapFLCRh72vLPK84L4vt3q2eqLPuDz6zyqV1tjodxa9hHZEprJe2/zSJ06
URlZ0eIOfsTySVf/S/kp0zuO7F6BAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUwo+Z
ur0H8Duz14t1pKlf3cuntQ8wHwYDVR0jBBgwFoAUQthcb+Q83dnDQqmRI5Oe9tEL
lmEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI5NURFLzAxNDI5MzNDQ0E1RTExRUFBQTgyQzg4NEY4QUVBMjI4L1F0aGNi
LVE4M2RuRFFxbVJJNU9lOXRFTGxtRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1F0aGNiLVE4M2RuRFFxbVJJNU9lOXRFTGxtRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Qjk1REUvMDE0MjkzM0NDQTVFMTFFQUFBODJDODg0RjhB
RUEyMjgvUXRoY2ItUTgzZG5EUXFtUkk1T2U5dEVMbG1FLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBNic5Xhv+l8lySNtlis9zR1lnNCrqJ
N3lqun+e54Hw0HlQUjnC2OXZMqGInNiTdsZINCJU984bcnPG211hfW2UIA24nBTV
2y8jZc/FbQNd8jecQ+hDb0+iAuMBuiDXOuyAZk5/F7lQ8zENgNn3388CrBO7832D
9uBEJTTA5x2aFA3Vq1ewDwrUuergFsCU6Q4sgdSeDFgp3gm6T05Ok9YWcoQUjWvB
8TFPki72/pR1m94ad9y964fZGcPo4EK+WzWG78wuSAYmsrCMMpdBLBVtqs6jvg1R
AIw0yeFGRzNNy5153bTGCJ9wnkWyofkFf55JI5Q/VzrINp4Dte+fhL7/
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:08 2025 by rpki-client on console.sobornost.net