Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
File:                     uHhAHkl1TlCh8pefEijlQVr3hcs.mft (raw, json)
Hash identifier:          N2mUgQqvOpcqU9PNXVVsySDkUubZzprgqUDbBfCp/o8=
Subject key identifier:   05:E3:41:5A:BF:15:64:80:9D:6C:06:04:2D:66:D2:F1:27:BF:A3:03
Authority key identifier: B8:78:40:1E:49:75:4E:50:A1:F2:97:9F:12:28:E5:41:5A:F7:85:CB
Certificate issuer:       /CN=F36D06FDAF/serialNumber=B878401E49754E50A1F2979F1228E5415AF785CB
Certificate serial:       66
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
Manifest number:          64
Signing time:             Mon 28 Apr 2025 05:14:34 +0000
Manifest this update:     Mon 28 Apr 2025 05:14:33 +0000
Manifest next update:     Wed 30 Apr 2025 05:14:33 +0000
Files and hashes:         1: uHhAHkl1TlCh8pefEijlQVr3hcs.crl (hash: KFsfdG4NitWSE9bm9Hg3aiqy/LvMot7OJqFwFur4Xg4=)
                          2: D378C19EDB2C11EF97120DAA762E951A.roa (hash: XvBxie++FSr21ud0Lfttnl+zogzSereMyWWkFD2zdWI=)
                          3: 7E8F4432DB2C11EFB85EEEA5762E951A.roa (hash: 0iUpszT2w0fm3mXYVrua9cWk6MIv4HV5O6NkTkk5EUY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 102 (0x66)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D06FDAF, serialNumber=B878401E49754E50A1F2979F1228E5415AF785CB
        Validity
            Not Before: Apr 28 05:14:33 2025 GMT
            Not After : Apr 30 05:14:33 2025 GMT
        Subject: CN=680f0eba-e37b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:ba:58:e8:5e:09:63:64:6e:10:5c:c1:ac:
                    cd:2d:ec:67:44:47:b3:ca:96:31:63:f4:f9:eb:4b:
                    a6:ba:f4:63:90:75:b1:1b:49:65:f5:25:c8:c0:b8:
                    2d:68:8b:6e:c8:99:d1:64:a8:d0:fa:8f:07:d0:93:
                    57:1e:33:3c:5c:51:4d:15:e3:99:79:bf:ca:4b:2a:
                    93:44:1b:65:ab:24:9d:9f:3c:b0:ce:06:f9:eb:75:
                    2b:3f:1d:ce:19:5a:a5:79:c4:58:a9:85:3f:57:5a:
                    45:16:a0:06:c3:6a:f2:ae:b9:a8:73:7b:9e:f6:71:
                    44:0b:45:77:08:85:61:60:f8:ff:b4:bb:83:28:84:
                    f6:1f:f6:cc:9c:bb:66:85:88:fc:53:7d:3d:c4:a4:
                    30:15:5b:bd:1b:34:f9:a3:e2:b1:78:b5:d3:f6:ba:
                    d8:4b:4c:38:47:e7:97:7a:39:3d:6a:6a:70:e1:99:
                    b9:d8:dc:1f:e7:b7:6b:42:d8:20:3c:2c:4d:bd:17:
                    84:8a:e3:26:4b:8e:1b:7c:64:49:43:1a:64:18:ab:
                    83:48:fc:32:b9:d8:e8:45:d6:d2:10:82:ce:df:a0:
                    ea:7f:e2:99:e9:53:d3:89:b5:47:cb:31:b4:93:e2:
                    bc:7c:7b:69:2b:84:8c:de:ed:f8:20:3e:bb:8d:42:
                    bf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E3:41:5A:BF:15:64:80:9D:6C:06:04:2D:66:D2:F1:27:BF:A3:03
            X509v3 Authority Key Identifier:
                keyid:B8:78:40:1E:49:75:4E:50:A1:F2:97:9F:12:28:E5:41:5A:F7:85:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/uHhAHkl1TlCh8pefEijlQVr3hcs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D06FD/05CC7AC4DB2C11EFA2D319A5762E951A/uHhAHkl1TlCh8pefEijlQVr3hcs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:4a:49:8a:d5:2c:01:9a:64:18:c5:63:88:c6:7b:c3:49:d7:
         67:78:8e:7b:38:cc:a2:ad:a8:07:9b:32:02:42:19:33:9b:43:
         63:c1:f5:66:85:0a:c3:97:98:2b:fa:ef:aa:60:7a:67:31:92:
         f8:0e:01:0e:5f:11:61:7e:f7:93:06:88:a5:40:a9:b1:0c:00:
         3b:7a:1d:67:37:d5:56:0f:f7:1e:a1:b1:3e:9a:4e:01:58:a1:
         c0:c5:5f:4f:2c:96:af:e2:c5:27:cc:ae:76:96:bd:9c:81:62:
         db:b9:b3:e8:a2:ce:53:eb:f6:17:79:88:4d:98:55:0c:0e:c2:
         2c:9b:e6:77:82:16:d0:fd:f0:4f:57:a8:77:b4:2b:a1:19:45:
         07:4e:e4:da:de:17:c0:34:d3:83:b9:98:52:71:f6:dc:ba:01:
         b0:89:95:c3:88:36:08:a6:44:61:5c:6c:f9:84:06:39:d7:47:
         a4:10:6e:4e:a6:02:b3:2d:3b:be:e7:f4:8b:12:07:21:fc:1b:
         fd:6e:b8:2b:9a:f3:64:c2:bf:2c:5c:86:b5:f8:d2:80:8f:04:
         4a:f7:ba:76:8c:42:29:0c:e3:29:28:0a:fc:27:5b:32:7c:d2:
         2a:4f:f2:dd:b8:97:47:4d:d0:db:02:22:a3:b6:20:80:a9:67:
         00:df:9a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:25:31 2025 by rpki-client on console.sobornost.net