Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
File:                     8fHKBYLoJWPuJfCZF2si382cw2Q.mft (raw, json)
Hash identifier:          gcK1Uvz89fR0UE0j+g3sUmn06n28hryOr1h67a3nbW4=
Subject key identifier:   16:7E:69:36:A1:EF:83:92:93:09:B8:74:3F:67:60:4C:44:61:5C:1F
Authority key identifier: F1:F1:CA:05:82:E8:25:63:EE:25:F0:99:17:6B:22:DF:CD:9C:C3:64
Certificate issuer:       /CN=F36C08D4AF/serialNumber=F1F1CA0582E82563EE25F099176B22DFCD9CC364
Certificate serial:       0247
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
Manifest number:          0246
Signing time:             Fri 25 Apr 2025 04:03:10 +0000
Manifest this update:     Fri 25 Apr 2025 04:03:10 +0000
Manifest next update:     Sun 27 Apr 2025 04:03:10 +0000
Files and hashes:         1: 8fHKBYLoJWPuJfCZF2si382cw2Q.crl (hash: qQY+JZcFFvKS1jcO+PDV363JHZtowLBfgtFLsXSiSwE=)
                          2: 715EC0EE69A911EE84A41F174AD9E6FC.roa (hash: GA/yRfN+j7YpzqeDRBlxUIhR1rbQNxt7HY+jSgnz5l0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 583 (0x247)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C08D4AF, serialNumber=F1F1CA0582E82563EE25F099176B22DFCD9CC364
        Validity
            Not Before: Apr 25 04:03:10 2025 GMT
            Not After : Apr 27 04:03:10 2025 GMT
        Subject: CN=680b097e-baca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3c:d0:e2:6a:e3:e7:d5:75:ce:15:3e:50:d0:
                    44:1b:52:39:12:5b:06:d2:e9:6d:5c:14:ef:5b:ff:
                    86:d5:f3:c7:f8:7e:79:be:32:92:07:2c:b3:6d:19:
                    9c:07:ac:86:0c:9b:c4:9f:38:1b:09:90:af:de:e7:
                    b7:24:de:42:a7:56:20:37:7f:e6:65:81:18:c6:64:
                    e6:14:86:f6:a8:1f:c3:2f:6e:33:f1:8e:dd:fe:af:
                    54:e7:23:63:01:59:91:94:fc:1b:e4:a4:5e:95:05:
                    aa:db:c7:6b:5f:d6:56:2f:ed:a9:2f:71:10:e0:62:
                    49:99:fb:c3:b9:dd:6a:75:b8:62:a5:33:ae:7c:59:
                    80:0e:20:e0:de:11:24:45:d0:f8:94:6f:63:f3:95:
                    1e:d1:21:4f:1c:c7:ec:1c:87:db:80:62:6d:1d:f2:
                    f7:8e:c9:a2:35:a2:51:06:aa:44:2a:63:ee:58:41:
                    d9:39:36:e6:32:b4:ef:a2:0e:8d:18:09:9b:87:bf:
                    cc:00:35:8e:08:5f:1f:89:f1:76:74:ab:d1:89:32:
                    f9:a3:66:4e:19:28:32:1a:28:cd:e4:d5:85:cf:05:
                    d6:ce:55:1b:6c:16:49:8d:48:6f:10:d1:28:4e:91:
                    b9:2f:b4:4c:22:3b:17:6d:08:e0:36:a4:de:1b:38:
                    4a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7E:69:36:A1:EF:83:92:93:09:B8:74:3F:67:60:4C:44:61:5C:1F
            X509v3 Authority Key Identifier:
                keyid:F1:F1:CA:05:82:E8:25:63:EE:25:F0:99:17:6B:22:DF:CD:9C:C3:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8fHKBYLoJWPuJfCZF2si382cw2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C08D4/A98A9E5869A811EE98A484144AD9E6FC/8fHKBYLoJWPuJfCZF2si382cw2Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:d6:3e:52:59:37:47:bb:5b:6a:94:1c:75:40:a9:59:cc:62:
         4e:4e:41:d3:e2:71:9c:c2:03:e5:41:31:14:3d:17:21:4b:39:
         59:c2:6f:d8:3c:44:67:91:71:cf:8a:80:47:5d:df:1e:4e:88:
         1e:4e:1f:91:42:ab:d3:c5:c3:46:11:fe:4a:98:46:60:57:76:
         7d:5c:3e:64:c2:c5:f4:76:53:82:07:bb:6e:59:fc:8f:11:2b:
         b0:2c:05:73:1c:c8:70:00:29:f1:8b:ff:b0:9d:a6:be:a0:3b:
         70:24:42:10:2f:2e:fc:12:fe:1c:6f:c4:58:1c:3a:6c:94:b7:
         f3:15:7f:0b:05:27:3a:b5:dd:f0:14:c4:cf:83:ee:ac:ba:1c:
         9b:7e:93:89:a2:c1:52:11:09:77:14:a1:49:ba:08:95:1b:8f:
         63:d3:1d:05:d6:0d:ae:fd:d0:c8:55:eb:b8:90:d4:44:95:e1:
         21:06:28:38:d4:75:67:a7:af:14:b9:67:64:1d:d3:68:3b:fe:
         47:63:ff:1b:1d:c9:d4:c4:06:20:c5:96:8c:68:ac:d4:72:55:
         2d:8a:32:36:6f:e2:71:82:5c:54:4b:ce:34:3c:d0:71:b9:76:
         07:37:15:80:90:e9:60:e5:c1:2d:3c:e2:ea:09:32:a1:d5:47:
         00:7c:69:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:09 2025 by rpki-client on console.sobornost.net