Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
File:                     1dvrzXwb7_KENX_wZHrIt0liD9Q.mft (raw, json)
Hash identifier:          8ekr20nFgNw6JhUzIIMbqyofzCK39TL8lARNydIhxpw=
Subject key identifier:   BA:DF:2E:3C:5B:A5:80:C6:89:A7:E1:0C:F6:72:FC:4E:EF:DB:1C:CD
Authority key identifier: D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4
Certificate issuer:       /CN=F36D7B70AF/serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
Certificate serial:       0342
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
Manifest number:          0340
Signing time:             Fri 25 Apr 2025 03:30:02 +0000
Manifest this update:     Fri 25 Apr 2025 03:30:01 +0000
Manifest next update:     Sun 27 Apr 2025 03:30:01 +0000
Files and hashes:         1: 1dvrzXwb7_KENX_wZHrIt0liD9Q.crl (hash: rQ6GU6mFqzkXXGfOigwEdqYrklr/I6C6Ee/zZIT5gAo=)
                          2: BE9F0310ADB511ED9BFAA497F1222468.roa (hash: QYIDCJXoNqvHg1YdgKjgPsS1L4uv/2EzjaMHwhM8yjk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 834 (0x342)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D7B70AF, serialNumber=D5DBEBCD7C1BEFF284357FF0647AC8B749620FD4
        Validity
            Not Before: Apr 25 03:30:01 2025 GMT
            Not After : Apr 27 03:30:01 2025 GMT
        Subject: CN=680b01ba-494c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:43:6d:dc:b5:4f:3a:af:5f:e8:8c:0c:0c:
                    ca:1f:c7:f6:d5:e1:10:2b:f9:f1:ea:1b:0a:99:47:
                    1d:90:08:6b:ab:c3:21:2f:de:13:a6:a4:c9:6f:5b:
                    4b:a3:44:9d:fa:df:7a:6e:3d:25:50:03:50:63:3b:
                    a4:30:c4:0c:5e:60:5e:e8:60:a4:27:3f:e9:79:0b:
                    7e:1c:d9:af:a6:31:7d:4d:b0:d5:fd:de:95:19:7c:
                    eb:19:ef:35:0a:f3:a3:ab:cc:d4:da:93:8e:2c:e3:
                    cf:2b:88:b2:02:96:2f:c1:2e:50:00:04:ea:98:e7:
                    ba:86:03:17:94:24:b0:81:99:65:80:1a:00:96:dd:
                    5c:7e:83:99:68:be:47:55:57:2e:e1:3b:86:f4:d3:
                    8d:24:ef:ea:82:06:e7:6e:ac:ca:88:2e:62:45:3b:
                    38:d5:80:f7:b4:40:da:8d:9c:8e:24:96:ef:eb:15:
                    73:29:0e:32:ef:25:5e:d0:13:8b:dc:30:5c:27:04:
                    9d:af:4d:88:db:f5:12:f8:8e:2f:ce:c6:d7:19:6f:
                    de:6d:42:82:63:53:e3:48:56:3b:5f:05:0f:93:08:
                    22:6c:28:71:84:4c:15:b5:7d:02:49:21:3d:c2:d0:
                    66:e0:8c:3e:16:52:b7:0f:33:63:46:90:b6:8c:34:
                    01:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DF:2E:3C:5B:A5:80:C6:89:A7:E1:0C:F6:72:FC:4E:EF:DB:1C:CD
            X509v3 Authority Key Identifier:
                keyid:D5:DB:EB:CD:7C:1B:EF:F2:84:35:7F:F0:64:7A:C8:B7:49:62:0F:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1dvrzXwb7_KENX_wZHrIt0liD9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D7B70/311539A0AD6111ED8C82DB9DF1222468/1dvrzXwb7_KENX_wZHrIt0liD9Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:1a:8b:0e:5b:dc:4c:35:2e:58:48:87:1a:5f:b8:0b:6e:32:
         ef:e9:d9:61:16:5a:05:cd:60:ae:39:37:b1:d2:81:79:5d:b1:
         f8:1e:59:67:25:18:62:27:a5:5e:3d:08:78:d0:a7:0f:27:52:
         3a:7b:66:9d:91:25:1e:1f:77:b5:59:7f:5c:58:e1:89:0c:04:
         ef:08:7b:2c:91:28:a3:9c:f1:f3:5a:cc:33:9c:c5:9c:7a:96:
         9e:a6:c2:b3:98:c8:d6:ce:01:a9:e9:50:ea:5f:e9:3d:e9:c6:
         66:41:7d:16:a0:c4:22:96:d5:e1:0a:57:99:bc:42:dc:0e:c2:
         2e:36:1d:8c:66:fa:b9:98:6c:86:a5:24:74:65:4a:e2:e3:32:
         63:19:4f:ce:b8:fa:12:0e:0c:97:0d:b6:8c:3a:6f:b2:1c:de:
         cd:73:79:3a:e3:91:1d:43:d3:bb:3f:02:34:2c:0f:a0:82:2e:
         64:b0:31:9d:92:9a:ae:0d:a5:bd:f4:07:5d:b0:1f:54:7a:dc:
         1a:94:1b:e9:0e:30:6c:6d:e8:01:37:4f:57:cb:76:a0:cc:c2:
         75:ae:9f:09:5a:ba:34:e2:01:fc:58:3b:a7:73:31:13:41:cd:
         f2:e7:8e:17:a0:2c:e7:01:34:50:4d:c3:ca:84:98:53:cc:e4:
         9d:84:df:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:16 2025 by rpki-client on console.sobornost.net