Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
File:                     Ijb_q094oHoZuC6P3m3C2wZK278.mft (raw, json)
Hash identifier:          dXcKHPgRrh9zwnyJQtC9wJv3jVic88nbV4Vn4TG3X1A=
Subject key identifier:   DA:35:71:2D:19:C6:37:E7:43:80:AD:E0:21:66:A8:AF:4B:0A:9F:2F
Authority key identifier: 22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF
Certificate issuer:       /CN=F36C2BF2AR/serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
Certificate serial:       015C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
Manifest number:          015B
Signing time:             Fri 25 Apr 2025 04:32:19 +0000
Manifest this update:     Fri 25 Apr 2025 04:32:19 +0000
Manifest next update:     Sun 27 Apr 2025 04:32:19 +0000
Files and hashes:         1: Ijb_q094oHoZuC6P3m3C2wZK278.crl (hash: 84vUDmqMPeDPTVCC1aYMwKqI/7wewNBdvnzSHl0GD+0=)
                          2: 5E52EDD81C4911EFA98F9E317DDC24C2.roa (hash: Zixh/aFPuo2zs0C1hGvWJdvczTuAhUvvaA1FyHi6zv8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                          rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2BF2AR, serialNumber=2236FFAB4F78A07A19B82E8FDE6DC2DB064ADBBF
        Validity
            Not Before: Apr 25 04:32:19 2025 GMT
            Not After : Apr 27 04:32:19 2025 GMT
        Subject: CN=680b1053-9384
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bc:7d:21:ca:9f:24:04:2b:47:25:2b:00:29:
                    34:f3:63:fb:cd:cb:ac:0f:e1:d8:71:5b:c5:05:77:
                    82:dc:00:fb:43:5a:17:54:18:46:13:11:a6:cc:b8:
                    27:5a:cd:eb:de:31:df:fa:f6:f1:ee:0a:77:3e:fc:
                    39:be:37:7f:90:52:3a:03:bf:99:90:d6:e3:64:19:
                    d3:55:94:9d:82:c2:d9:46:77:40:b4:d2:f0:33:6a:
                    e6:17:8b:0d:a6:e4:e0:ca:4a:51:7c:18:2b:47:61:
                    ea:bd:48:cb:22:b1:39:cd:9f:13:61:df:28:fa:7a:
                    4b:a3:cf:bc:f0:67:f9:c8:79:b0:59:ba:80:b3:19:
                    5b:36:9b:da:61:04:dd:9a:7b:72:c5:ce:eb:58:9a:
                    a2:12:c9:5f:37:08:e3:47:63:65:71:cd:e6:d6:71:
                    db:7d:a8:b1:17:c0:5c:b9:b2:f4:a0:1c:37:cc:1a:
                    46:2b:17:8e:a6:af:80:61:78:3a:3b:05:ec:b3:c4:
                    d9:89:78:df:c7:83:fa:8d:60:ef:65:14:ae:9d:d2:
                    21:12:f7:36:98:98:60:c3:6a:40:1c:a8:d3:45:f7:
                    b6:22:2e:97:a1:46:df:44:b1:5c:6a:97:bd:f3:33:
                    d6:06:dc:2c:07:26:62:0f:c2:a5:e1:4f:9a:90:c1:
                    79:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:35:71:2D:19:C6:37:E7:43:80:AD:E0:21:66:A8:AF:4B:0A:9F:2F
            X509v3 Authority Key Identifier:
                keyid:22:36:FF:AB:4F:78:A0:7A:19:B8:2E:8F:DE:6D:C2:DB:06:4A:DB:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Ijb_q094oHoZuC6P3m3C2wZK278.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2BF2/F17A498A19EC11EF9C02892C017001B1/Ijb_q094oHoZuC6P3m3C2wZK278.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:da:24:1e:da:3f:33:97:5a:ca:30:44:72:35:aa:cd:32:8f:
         ee:84:ab:fb:5b:6b:f8:b5:96:43:0a:08:2a:ed:67:c1:16:e7:
         c7:d1:09:10:17:ce:c4:0b:dc:f3:da:62:1f:e7:00:d5:da:a1:
         02:da:3d:73:e3:9d:7f:ec:31:06:be:3b:56:ba:79:b6:2e:66:
         db:36:a1:cb:ea:ff:90:46:0f:80:4a:88:01:0f:13:1b:ac:16:
         a6:36:67:44:b8:85:3e:8c:94:34:31:f9:6b:89:e2:f6:76:a3:
         04:1a:2f:b9:c9:29:a4:f5:b2:9d:ed:fa:11:3d:da:f3:46:fa:
         3a:dc:b6:20:96:b4:9e:eb:3a:a0:8c:04:30:7f:aa:33:e9:29:
         66:63:f8:9d:50:d6:9c:c4:82:6e:e3:3a:46:bf:fc:7a:1a:84:
         4b:8c:e1:9f:68:44:16:a1:83:8b:30:57:99:1a:45:f2:09:5c:
         da:98:9c:d3:44:6e:62:57:dd:3a:3d:4c:d4:56:18:6f:18:3a:
         09:34:fa:14:e3:2c:cb:fc:83:5b:41:f4:87:c5:5f:6c:6b:ad:
         92:ef:c1:aa:8b:14:30:c5:9b:e6:55:47:57:c0:4f:2a:91:f9:
         7b:75:59:41:aa:e1:46:8d:36:d9:8e:86:d3:c9:be:ae:8f:1b:
         e0:46:6b:c2
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAVwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzJCRjJBUjExMC8GA1UEBRMoMjIzNkZGQUI0Rjc4QTA3QTE5QjgyRThGREU2REMy
REIwNjRBREJCRjAeFw0yNTA0MjUwNDMyMTlaFw0yNTA0MjcwNDMyMTlaMBgxFjAU
BgNVBAMTDTY4MGIxMDUzLTkzODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRvH0hyp8kBCtHJSsAKTTzY/vNy6wP4dhxW8UFd4LcAPtDWhdUGEYTEabM
uCdazeveMd/69vHuCnc+/Dm+N3+QUjoDv5mQ1uNkGdNVlJ2CwtlGd0C00vAzauYX
iw2m5ODKSlF8GCtHYeq9SMsisTnNnxNh3yj6ekujz7zwZ/nIebBZuoCzGVs2m9ph
BN2ae3LFzutYmqISyV83CONHY2VxzebWcdt9qLEXwFy5svSgHDfMGkYrF46mr4Bh
eDo7BeyzxNmJeN/Hg/qNYO9lFK6d0iES9zaYmGDDakAcqNNF97YiLpehRt9EsVxq
l73zM9YG3CwHJmIPwqXhT5qQwXmhAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQU2jVx
LRnGN+dDgK3gIWaor0sKny8wHwYDVR0jBBgwFoAUIjb/q094oHoZuC6P3m3C2wZK
278wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMyQkYyL0YxN0E0OThBMTlFQzExRUY5QzAyODkyQzAxNzAwMUIxL0lqYl9x
MDk0b0hvWnVDNlAzbTNDMndaSzI3OC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0lqYl9xMDk0b0hvWnVDNlAzbTNDMndaSzI3OC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QzJCRjIvRjE3QTQ5OEExOUVDMTFFRjlDMDI4OTJDMDE3MDAx
QjEvSWpiX3EwOTRvSG9adUM2UDNtM0Myd1pLMjc4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZ2iQe2j8zl1rKMERyNarNMo/uhKv7W2v4
tZZDCggq7WfBFufH0QkQF87EC9zz2mIf5wDV2qEC2j1z451/7DEGvjtWunm2Lmbb
NqHL6v+QRg+ASogBDxMbrBamNmdEuIU+jJQ0MflrieL2dqMEGi+5ySmk9bKd7foR
PdrzRvo63LYglrSe6zqgjAQwf6oz6SlmY/idUNacxIJu4zpGv/x6GoRLjOGfaEQW
oYOLMFeZGkXyCVzamJzTRG5iV906PUzUVhhvGDoJNPoU4yzL/INbQfSHxV9sa62S
78GqixQwxZvmVUdXwE8qkfl7dVlBquFGjTbZjobTyb6ujxvgRmvC
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:29 2025 by rpki-client on console.sobornost.net