Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CBA0F/00E1DAE08BBD11EFA1253244762E951A/f4UxHUPeqV9MFIwIQ_ssKdOHfMw.mft
File:                     f4UxHUPeqV9MFIwIQ_ssKdOHfMw.mft (raw, json)
Hash identifier:          bF9dHtgzW61U+yvQ6jxYR0zuQxGZX8ZIBWQobOkVk1E=
Subject key identifier:   5E:61:4E:24:91:29:C6:5F:F9:20:1E:AA:C6:21:FC:19:E1:36:7A:84
Authority key identifier: 7F:85:31:1D:43:DE:A9:5F:4C:14:8C:08:43:FB:2C:29:D3:87:7C:CC
Certificate issuer:       /CN=F36CBA0FAF/serialNumber=7F85311D43DEA95F4C148C0843FB2C29D3877CCC
Certificate serial:       CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/f4UxHUPeqV9MFIwIQ_ssKdOHfMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CBA0F/00E1DAE08BBD11EFA1253244762E951A/f4UxHUPeqV9MFIwIQ_ssKdOHfMw.mft
Manifest number:          CC
Signing time:             Mon 28 Apr 2025 05:04:16 +0000
Manifest this update:     Mon 28 Apr 2025 05:04:15 +0000
Manifest next update:     Wed 30 Apr 2025 05:04:15 +0000
Files and hashes:         1: f4UxHUPeqV9MFIwIQ_ssKdOHfMw.crl (hash: LO1kX9adl2Sarh6aVuPbq6Jm37lvkRxCL6RQNhUTcYU=)
                          2: B45129B48BBD11EF94428948762E951A.roa (hash: 43zaQg7rsnXHb+T9WO52mZLCQHsBhqCHCPb5tuPvMGw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CBA0F/00E1DAE08BBD11EFA1253244762E951A/f4UxHUPeqV9MFIwIQ_ssKdOHfMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CBA0F/00E1DAE08BBD11EFA1253244762E951A/f4UxHUPeqV9MFIwIQ_ssKdOHfMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/f4UxHUPeqV9MFIwIQ_ssKdOHfMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CBA0FAF, serialNumber=7F85311D43DEA95F4C148C0843FB2C29D3877CCC
        Validity
            Not Before: Apr 28 05:04:15 2025 GMT
            Not After : Apr 30 05:04:15 2025 GMT
        Subject: CN=680f0c50-f171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:73:3d:72:be:85:ca:53:ed:05:a1:8f:49:9f:
                    3d:1f:93:4b:01:10:ca:b9:4e:cc:ef:17:c3:96:48:
                    cf:f0:7d:6d:9b:5f:77:f6:f9:b3:9d:0b:31:85:c1:
                    e3:b8:28:d6:34:9f:bf:49:04:dd:a2:a3:50:71:8e:
                    4c:d4:ed:c5:4d:88:14:bd:c9:6d:31:25:69:37:ba:
                    98:37:5d:0c:b8:10:2c:ad:d4:6d:c3:10:6a:2b:f9:
                    49:a5:f2:dc:ee:dc:46:8d:f9:56:e4:b3:aa:d0:9b:
                    db:a7:2a:c9:cd:fc:88:be:fd:d8:5f:de:ec:ae:5b:
                    db:7d:57:56:49:7a:51:0a:17:c8:af:30:5b:df:03:
                    1a:fb:8c:6e:c1:21:99:28:0c:be:0c:43:31:bb:90:
                    1c:3f:d7:17:80:d6:47:07:24:b5:42:2f:4f:3a:56:
                    86:84:6d:0a:cf:5a:2c:11:e0:d5:a9:a7:06:e7:02:
                    65:05:85:53:de:e9:3b:92:b9:3f:5c:e1:99:c5:db:
                    53:01:85:8d:df:35:27:e0:77:57:42:95:c7:c3:b2:
                    a1:ed:f6:48:88:18:54:57:24:d7:9f:5e:8f:b1:79:
                    dc:c3:1d:99:a5:c3:54:e2:ba:9a:6a:7d:4f:68:a9:
                    5b:c2:42:c6:cb:79:2c:c9:21:2f:4a:9c:80:9a:1d:
                    2a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:61:4E:24:91:29:C6:5F:F9:20:1E:AA:C6:21:FC:19:E1:36:7A:84
            X509v3 Authority Key Identifier:
                keyid:7F:85:31:1D:43:DE:A9:5F:4C:14:8C:08:43:FB:2C:29:D3:87:7C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CBA0F/00E1DAE08BBD11EFA1253244762E951A/f4UxHUPeqV9MFIwIQ_ssKdOHfMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/f4UxHUPeqV9MFIwIQ_ssKdOHfMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CBA0F/00E1DAE08BBD11EFA1253244762E951A/f4UxHUPeqV9MFIwIQ_ssKdOHfMw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:e3:14:a8:3c:b9:45:b0:c7:df:b0:e3:28:67:b3:b4:0a:30:
         51:a0:11:9c:43:3b:05:96:6b:7f:fb:d6:2e:ea:e3:08:f8:25:
         e3:98:37:b1:8c:88:8c:31:44:99:be:10:47:e8:10:05:5c:31:
         12:3b:55:5e:22:ad:d1:f8:8e:2b:7d:56:93:e3:eb:d1:d2:4a:
         01:46:c4:cc:65:be:a4:f2:65:d9:8e:3b:10:f3:46:17:26:ec:
         d9:ed:72:9f:63:d3:20:58:6e:c7:63:58:32:16:0b:b1:ea:b7:
         34:a9:89:86:45:2f:20:36:b8:e2:06:ef:6e:fb:7a:2a:24:87:
         56:4a:9d:61:e5:43:5c:8d:e0:fb:8f:ae:3f:59:42:97:f1:c3:
         61:50:34:c9:72:c1:de:fb:7b:08:3d:0f:02:83:46:67:cf:5d:
         fa:44:07:a9:b4:88:a7:a1:07:c8:21:f2:e5:e3:25:ba:2a:0c:
         32:d0:9f:f9:17:e9:1a:ec:20:aa:3d:60:d0:82:87:9a:31:b6:
         31:8c:f9:16:b9:a3:ad:56:61:e6:b5:68:32:e9:15:91:f7:cb:
         c4:38:ff:39:87:9e:16:92:a5:3a:3e:c1:07:a1:3f:dd:21:86:
         e8:0e:55:b8:db:c5:86:f7:3d:0e:00:5f:e3:6c:15:d5:ca:43:
         f0:60:81:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:25:30 2025 by rpki-client on console.sobornost.net