Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
File:                     zr6Z7rC-POjbGbpEdmyj48gHqYk.mft (raw, json)
Hash identifier:          Lf4wrI57A0Grd4oIJwaZQsX2+gmfch81VtFpDUshokk=
Subject key identifier:   59:9F:8C:34:24:B8:46:AB:D7:E0:B0:9A:47:74:36:83:8F:EA:42:E5
Authority key identifier: CE:BE:99:EE:B0:BE:3C:E8:DB:19:BA:44:76:6C:A3:E3:C8:07:A9:89
Certificate issuer:       /CN=F36C4A3BAF/serialNumber=CEBE99EEB0BE3CE8DB19BA44766CA3E3C807A989
Certificate serial:       01F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
Manifest number:          01F8
Signing time:             Fri 25 Apr 2025 04:13:05 +0000
Manifest this update:     Fri 25 Apr 2025 04:13:04 +0000
Manifest next update:     Sun 27 Apr 2025 04:13:04 +0000
Files and hashes:         1: zr6Z7rC-POjbGbpEdmyj48gHqYk.crl (hash: jWA9rPUdctPm2LibjdjGzLaO5t+8DbUWfM0HPlNSjrI=)
                          2: B4ABD18CA48E11EEB808FE65D25BE465.roa (hash: S5XSL+t01DymTgJeqFWNkxH4TrI/NWZhOLYNwLD+7Qs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4A3BAF, serialNumber=CEBE99EEB0BE3CE8DB19BA44766CA3E3C807A989
        Validity
            Not Before: Apr 25 04:13:04 2025 GMT
            Not After : Apr 27 04:13:04 2025 GMT
        Subject: CN=680b0bd1-9950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:1c:fb:37:0f:2a:ef:7b:f0:6f:05:bb:50:
                    68:ef:8f:1d:5e:39:c9:f7:5a:c4:16:5b:29:c4:16:
                    fd:6f:6a:21:e5:cb:ee:4e:48:81:1e:94:4e:5b:cb:
                    bd:7a:aa:1d:5b:f3:ff:aa:8b:07:22:f2:2d:a4:77:
                    f9:14:58:40:cd:3f:92:5e:64:63:a4:51:03:82:63:
                    97:2e:1a:7f:89:88:eb:a6:d5:af:69:45:a5:7a:fc:
                    19:ef:51:e4:21:fb:fd:dd:dd:a5:f0:61:b0:9d:1e:
                    d6:f7:34:14:43:07:e9:1b:55:50:70:4a:a4:2b:25:
                    66:02:5e:10:5e:a0:50:dd:dc:d1:eb:fc:74:ea:1b:
                    16:2e:56:22:3f:3f:ea:e5:f8:05:45:b2:84:5e:ac:
                    44:4a:99:4e:bc:31:87:49:5e:f2:78:d4:70:f7:00:
                    6c:e7:e7:29:16:23:53:d5:13:9e:67:89:74:48:77:
                    a9:42:2a:4a:7b:2a:3e:cc:c8:22:0a:d3:d7:f0:5e:
                    23:7d:0f:c6:50:99:95:2f:24:70:ee:b8:53:21:32:
                    cf:ce:c4:96:7d:f6:92:28:6e:ff:57:d3:22:38:b6:
                    cd:91:d3:48:12:42:cb:7c:6e:e1:16:61:63:7b:63:
                    78:59:b9:d8:3b:83:ec:36:35:6a:8d:1f:b5:be:65:
                    e7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9F:8C:34:24:B8:46:AB:D7:E0:B0:9A:47:74:36:83:8F:EA:42:E5
            X509v3 Authority Key Identifier:
                keyid:CE:BE:99:EE:B0:BE:3C:E8:DB:19:BA:44:76:6C:A3:E3:C8:07:A9:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:f1:1a:44:6d:30:ec:a4:0e:51:1d:02:d0:f7:85:4a:08:76:
         ea:41:86:c0:a3:b2:6b:a8:8b:22:6b:e3:cf:a9:e4:3d:e6:6c:
         1f:21:ce:c1:c9:fe:ff:b2:b3:ff:7f:73:e9:e7:34:e4:e6:f5:
         61:73:3c:67:59:18:66:53:e8:c4:22:96:e0:5f:73:aa:58:b3:
         3f:a1:2f:68:1d:17:a1:10:7d:f9:4a:8f:62:d9:08:ed:7c:ac:
         28:87:30:78:d4:9c:c8:b3:65:a8:51:d2:a8:a5:2e:35:64:42:
         21:a6:82:20:3d:a0:0a:67:b7:68:0b:ba:bf:96:37:13:7f:d3:
         44:ef:61:7c:8f:77:db:a3:0e:dd:fc:75:38:69:03:e8:a9:9d:
         14:3c:5c:6f:40:9c:b8:74:ed:03:6f:30:9a:89:4c:eb:e9:df:
         66:5f:cb:9e:d1:7e:48:70:10:ed:7a:7b:e1:0e:cd:b5:c2:c8:
         63:c6:42:37:2b:a8:a0:35:fd:96:db:aa:23:75:6c:90:9a:b8:
         98:a0:d1:76:4e:11:ad:95:bd:fb:62:b9:6f:d7:17:7c:7d:f9:
         cd:23:ef:35:7d:be:38:1b:2f:db:3b:a0:d4:02:2a:88:e2:52:
         06:be:88:c9:98:d7:fb:b5:f3:e5:ac:bc:59:61:d8:f6:7d:52:
         f0:50:e6:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:10 2025 by rpki-client on console.sobornost.net