Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
File:                     xcFCD1BxamsUb136joK_0eTdmRA.mft (raw, json)
Hash identifier:          zb/BPPH1mEO0+yVpn1kEUmoMw4WhAvhCZwjqDWF9d7M=
Subject key identifier:   18:D7:00:1F:F2:2C:27:D8:35:E1:0B:8E:E4:15:C5:D5:52:13:1B:A1
Authority key identifier: C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10
Certificate issuer:       /CN=F36CFBB0AR/serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
Certificate serial:       81
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
Manifest number:          78
Signing time:             Fri 25 Apr 2025 05:07:38 +0000
Manifest this update:     Fri 25 Apr 2025 05:07:37 +0000
Manifest next update:     Sun 27 Apr 2025 05:07:37 +0000
Files and hashes:         1: xcFCD1BxamsUb136joK_0eTdmRA.crl (hash: n0LYx7rgdHqfzRx6lTNs+DONxSZZs09xEEVCQSc9wCA=)
                          2: 1FC67724DB2F11EFA180C6B7762E951A.roa (hash: JHgdUdEE2ORETD1hobD1l7BrD95rRqOs+/yUcWHinV4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                          rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 129 (0x81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CFBB0AR, serialNumber=C5C1420F50716A6B146F5DFA8E82BFD1E4DD9910
        Validity
            Not Before: Apr 25 05:07:37 2025 GMT
            Not After : Apr 27 05:07:37 2025 GMT
        Subject: CN=680b189a-4373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:4b:83:07:3a:be:1b:6e:1f:ba:f7:4c:d6:
                    1e:a6:5c:e8:e6:92:07:ea:06:c2:14:29:e3:9e:52:
                    0d:9e:20:9a:43:ab:4b:86:7e:e5:69:4a:d4:53:d5:
                    5c:33:9a:9b:d0:63:e5:18:dd:47:62:97:3e:b8:79:
                    bf:c9:16:6f:4e:e4:ea:24:d7:a3:22:7e:b2:19:cb:
                    e2:27:53:9c:2b:6e:02:1e:50:64:53:66:0d:32:42:
                    6f:03:f7:a2:6c:9a:4d:14:82:71:94:10:a4:ce:fc:
                    70:f7:d9:32:4a:54:5d:c1:1c:73:0e:e9:c2:43:d6:
                    ba:be:c8:8f:9f:d1:b8:7c:8e:a3:21:48:e3:28:79:
                    ce:b5:f9:d2:1a:cf:fc:16:fa:44:77:36:1c:13:01:
                    c6:0e:3f:77:ca:d0:13:cb:cb:69:5c:4f:b3:f8:38:
                    af:32:1f:22:7b:7b:da:e5:7f:64:ef:50:ed:c0:c8:
                    77:58:b9:5c:e3:20:98:8c:72:37:90:81:93:99:06:
                    a2:10:e3:3d:45:62:7d:19:08:4f:4e:d9:a4:fd:bd:
                    3a:62:3a:0e:2a:84:e9:cf:ed:c1:b6:2f:47:b6:d2:
                    a2:80:69:c5:44:a5:54:9f:cc:9b:fd:06:39:db:4b:
                    62:a5:02:55:09:01:71:c1:1f:97:23:50:4c:77:39:
                    1f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D7:00:1F:F2:2C:27:D8:35:E1:0B:8E:E4:15:C5:D5:52:13:1B:A1
            X509v3 Authority Key Identifier:
                keyid:C5:C1:42:0F:50:71:6A:6B:14:6F:5D:FA:8E:82:BF:D1:E4:DD:99:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xcFCD1BxamsUb136joK_0eTdmRA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CFBB0/3503D9F8D45211EFB23848B1762E951A/xcFCD1BxamsUb136joK_0eTdmRA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:bf:63:58:af:86:ba:77:6c:ae:6c:9c:d4:ac:03:8b:e5:3e:
         8b:9d:4d:87:bf:40:12:ea:93:1f:6e:94:09:68:9c:59:fb:84:
         9c:db:ed:e3:ee:fb:37:ad:3f:91:4f:eb:2c:86:1d:13:a4:b6:
         19:26:25:ed:74:fe:09:08:d1:bc:cf:7b:31:4b:37:c0:35:69:
         f4:f0:6b:fd:8a:aa:81:48:aa:e6:f9:58:2c:87:9a:16:50:b7:
         e4:dc:fa:9c:4b:3c:d8:cd:9a:d0:c4:ed:4e:ba:e8:85:3b:18:
         0d:ce:b8:fd:5c:3e:17:bc:d1:18:e6:98:0c:7f:bd:2f:bc:c5:
         8a:db:7f:2a:d0:28:e7:6a:d1:2a:d9:40:58:74:76:11:d9:7c:
         35:9d:5d:7a:a7:5c:1a:0d:03:e9:0d:47:17:a3:e1:86:f0:79:
         f1:fd:35:e3:5d:77:0d:ab:5b:44:2d:8d:48:95:dd:c9:ef:b0:
         20:66:60:9b:37:95:6d:17:44:48:ca:7f:34:07:14:8b:8b:c3:
         15:7d:a9:cf:b2:28:cf:92:6d:cb:ed:70:36:f9:e1:35:12:ce:
         43:88:4d:b9:1a:32:5b:b1:29:90:f0:1c:c3:47:9d:08:c2:81:
         6a:c3:7f:be:0a:48:80:90:3a:e0:51:91:3a:26:06:cb:09:dd:
         26:14:c0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:29 2025 by rpki-client on console.sobornost.net