Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
File:                     7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft (raw, json)
Hash identifier:          r7BlbY75sLVUfAUd+10ijWDtAOhfG2ZuBoIwTPTPtmo=
Subject key identifier:   2C:79:CF:04:09:0C:D7:71:39:83:6C:78:77:70:01:F9:1B:55:17:0D
Authority key identifier: EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A
Certificate issuer:       /CN=F36BD97CAR/serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
Certificate serial:       053E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
Manifest number:          0538
Signing time:             Fri 25 Apr 2025 02:38:48 +0000
Manifest this update:     Fri 25 Apr 2025 02:38:47 +0000
Manifest next update:     Sun 27 Apr 2025 02:38:47 +0000
Files and hashes:         1: 7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl (hash: c6+jSanN0AtgQt3nyL8zXyrtVlupLpIbYc+JB3C3/Zw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
                          rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1342 (0x53e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD97CAR, serialNumber=EFF4061F35572E6BFA1C24BB2368FCFE2EAE605A
        Validity
            Not Before: Apr 25 02:38:47 2025 GMT
            Not After : Apr 27 02:38:47 2025 GMT
        Subject: CN=680af5b8-3b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:42:50:78:ed:82:e4:95:23:44:8f:4a:b0:7e:
                    7d:a1:c4:5b:83:80:5f:df:51:30:60:66:c9:5a:4d:
                    31:7a:be:df:1d:0c:35:72:65:34:c2:c9:d8:11:94:
                    ac:7b:2d:61:4c:70:64:77:7d:cd:e6:a5:dc:25:39:
                    4a:4b:6d:e6:af:e3:a2:af:1e:f5:2f:1d:44:bb:33:
                    09:07:13:b2:2b:7a:a3:3f:28:13:a3:8d:2c:b4:f5:
                    64:01:84:31:49:56:a9:39:d9:86:2c:59:a3:8f:2d:
                    e2:fc:ba:f3:15:a6:18:c2:ad:2e:42:fa:b6:ef:80:
                    de:8b:c7:4f:7d:37:9e:33:1c:7a:d6:c5:df:b9:74:
                    cc:5b:52:65:22:a8:88:73:57:1c:75:71:f6:96:01:
                    38:58:cd:21:18:9e:af:36:ae:a7:88:45:24:04:30:
                    b7:fe:c5:c4:b7:f0:f4:e6:da:2a:f2:13:16:fb:8f:
                    5e:66:cb:54:43:27:6c:3f:5c:da:0e:7c:53:5d:e1:
                    c5:c7:02:68:c9:2d:a2:2c:9c:af:c1:7e:dc:b8:31:
                    9b:9a:a3:b9:be:1f:7e:a1:1a:82:0c:de:c4:1d:27:
                    73:50:9a:e8:e4:43:48:cc:cf:7d:7a:b5:07:14:47:
                    77:af:96:4f:f6:3c:81:52:20:a9:53:82:c2:83:ed:
                    34:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:79:CF:04:09:0C:D7:71:39:83:6C:78:77:70:01:F9:1B:55:17:0D
            X509v3 Authority Key Identifier:
                keyid:EF:F4:06:1F:35:57:2E:6B:FA:1C:24:BB:23:68:FC:FE:2E:AE:60:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/7_QGHzVXLmv6HCS7I2j8_i6uYFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD97C/E424AE2A2D9411EC972CA145D8A014CE/7_QGHzVXLmv6HCS7I2j8_i6uYFo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:1c:da:c7:59:52:5b:20:a5:af:cb:9b:0f:f9:87:20:f4:39:
         71:af:e4:99:05:3e:20:61:a1:50:14:2d:2b:4e:92:23:5b:1c:
         a7:1a:57:8c:09:e2:2f:ea:4c:e1:40:22:36:97:53:84:8e:de:
         e6:99:d1:c9:7a:41:fc:0a:a6:8f:a0:6e:a4:b7:cc:a5:e5:f8:
         22:d1:e1:29:ba:8c:8a:73:e8:1c:81:08:99:bc:69:64:c5:94:
         a9:87:1a:0c:a8:94:22:86:d7:88:72:e7:46:af:de:1f:b0:fe:
         ba:2a:f3:e6:94:24:89:5b:5a:4d:24:e4:d4:c0:6a:45:cc:9c:
         6d:fe:3b:39:5d:1a:53:ce:a5:db:c9:37:74:c5:7a:a8:82:d1:
         fd:48:bb:01:0f:ee:31:33:8c:1c:53:61:ef:ac:7f:e4:06:f6:
         fa:2e:cc:49:af:59:63:7d:26:d0:a2:95:3a:4f:78:d3:9f:ac:
         08:ab:13:92:40:47:f8:74:d0:22:7f:34:bc:ba:be:d1:4c:32:
         0a:34:2d:8a:2e:4a:ad:c5:8b:f3:0b:f9:0d:d5:6e:c5:ad:95:
         78:92:05:22:5c:90:a8:ca:b6:d6:e3:17:46:e3:0a:02:f6:72:
         47:65:73:0b:f4:12:57:55:58:f9:43:e0:f0:15:71:ef:62:b5:
         04:c6:5a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:09 2025 by rpki-client on console.sobornost.net