Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
File:                     ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft (raw, json)
Hash identifier:          2oL0Cy7b+raSmme2ZRV/ZqhwHVdmxD5Fsi00e8razKc=
Subject key identifier:   2B:98:A2:58:FD:38:93:DC:3B:32:97:CA:F5:9B:8A:23:04:D7:45:A1
Authority key identifier: 38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B
Certificate issuer:       /CN=F36BCCC8AF/serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
Certificate serial:       BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
Manifest number:          BD
Signing time:             Mon 28 Apr 2025 05:05:09 +0000
Manifest this update:     Mon 28 Apr 2025 05:05:08 +0000
Manifest next update:     Wed 30 Apr 2025 05:05:08 +0000
Files and hashes:         1: ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl (hash: qvj7sdwLbQ8pFZA+z07UyH8XXUn5JuMtSdXbDYWQnYw=)
                          2: 5822D58E969911EFBB03BAB6762E951A.roa (hash: OlnjZbEYMFxAprqREi0XurB39VJQTTPlIESsXPJn9fE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BCCC8AF, serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
        Validity
            Not Before: Apr 28 05:05:08 2025 GMT
            Not After : Apr 30 05:05:08 2025 GMT
        Subject: CN=680f0c85-97a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:92:c1:ff:31:a9:8f:fb:4f:08:0d:c9:f9:15:
                    f9:09:0a:f5:a3:7e:80:06:67:8e:8a:d0:7f:f2:dd:
                    83:03:2c:51:91:a8:d5:91:b2:b2:3d:85:cd:ff:d2:
                    7a:ee:a0:ed:38:9d:c1:62:75:9d:85:48:76:47:a9:
                    9c:cd:77:10:e5:32:cf:93:33:c0:a3:96:a4:2a:52:
                    d5:2c:91:45:32:75:f8:b5:e3:d3:f8:ae:b7:3f:89:
                    6f:17:3d:87:08:91:5f:b7:f9:fb:f1:f3:6d:63:62:
                    f3:38:af:aa:83:ad:29:65:4e:20:e4:6b:e4:08:52:
                    11:64:75:6c:3e:18:12:ed:9c:72:16:e1:0d:95:6f:
                    29:86:f2:4d:f2:84:bd:b4:cc:7a:23:45:3e:5a:13:
                    7e:f4:00:67:76:df:46:98:50:87:72:51:e9:5c:57:
                    af:bc:93:7f:39:b1:63:88:30:9a:fe:c6:c5:9a:89:
                    a5:7b:13:09:ef:b8:e7:1f:5e:af:ca:e1:21:4c:5f:
                    ca:3f:0e:d9:01:39:b6:d0:94:11:e5:33:54:ec:6a:
                    59:7d:3b:51:d5:4a:71:7a:76:53:97:16:b2:2e:cd:
                    e5:95:ba:81:04:36:ed:49:7a:cd:9f:9d:88:06:8c:
                    7d:1c:13:1f:0f:bf:1a:7c:cf:d0:8f:a4:2e:e0:9e:
                    d7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:98:A2:58:FD:38:93:DC:3B:32:97:CA:F5:9B:8A:23:04:D7:45:A1
            X509v3 Authority Key Identifier:
                keyid:38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:4e:22:3c:d7:b6:62:a1:61:60:b3:ca:ad:74:52:14:04:58:
         1a:3b:bd:c4:4e:2c:ed:89:a7:3d:12:5b:2e:7d:85:56:4f:f2:
         a2:16:6b:83:b7:c1:47:b9:2c:d8:2e:e8:67:8e:ad:82:11:be:
         d5:e7:ee:24:aa:5d:dc:97:55:ac:b6:97:e7:23:7a:6a:c1:05:
         ae:5b:60:9c:f6:8c:c0:dc:28:82:46:64:e0:f5:5e:81:65:86:
         6f:b8:3f:a1:96:c1:3e:94:1c:f9:64:69:5c:04:20:22:ef:2b:
         8b:1b:ce:76:bb:8f:64:0f:5f:e0:04:36:bf:ef:4a:57:d2:a1:
         bc:20:10:cb:a0:15:37:47:de:ee:fa:1a:fe:ee:62:00:0a:45:
         35:97:b4:3d:c1:d1:19:49:80:de:c5:2b:e0:92:d9:dc:17:a7:
         af:23:fa:e1:cc:a9:da:9e:a8:72:c0:2b:91:45:cd:e0:05:5e:
         4e:4b:e7:d9:fd:7c:4f:14:17:98:0b:18:6b:fe:1b:c4:24:75:
         e8:38:b9:21:7a:52:19:2c:a2:fe:3f:f5:b0:bf:9e:8a:1e:77:
         05:42:ad:12:0e:f1:41:d6:2d:d3:89:19:a1:97:45:0e:6d:84:
         dc:43:70:f6:f9:25:64:64:76:5c:b5:34:e7:36:ca:c2:cb:b9:
         fe:00:81:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:25:21 2025 by rpki-client on console.sobornost.net