Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
File:                     XozUASYISPXWb0DSj9l3F6nw8mo.mft (raw, json)
Hash identifier:          +Dl0FVwDy4YdzV/CWs6uCa563bsQcgkLsx165TtcftM=
Subject key identifier:   89:CE:EB:EF:03:B5:3D:2B:10:35:3F:3F:8D:E6:5D:71:D1:76:7C:ED
Authority key identifier: 5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A
Certificate issuer:       /CN=F36D8D30AR/serialNumber=5E8CD401260848F5D66F40D28FD97717A9F0F26A
Certificate serial:       0348
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
Manifest number:          0347
Signing time:             Sun 27 Apr 2025 03:29:15 +0000
Manifest this update:     Sun 27 Apr 2025 03:29:14 +0000
Manifest next update:     Tue 29 Apr 2025 03:29:14 +0000
Files and hashes:         1: XozUASYISPXWb0DSj9l3F6nw8mo.crl (hash: uzaYG2Q++DStKef0s/CD5AS7bW7I/xunaqQFY3Xu2NI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
                          rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 840 (0x348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8D30AR, serialNumber=5E8CD401260848F5D66F40D28FD97717A9F0F26A
        Validity
            Not Before: Apr 27 03:29:14 2025 GMT
            Not After : Apr 29 03:29:14 2025 GMT
        Subject: CN=680da48b-c183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5a:f0:a3:b6:b2:ed:f9:8b:0c:40:6c:52:51:
                    c9:72:c4:df:57:d3:86:cf:ea:f2:6f:16:97:f2:9a:
                    59:6b:f2:65:27:b1:18:d0:7a:35:e0:19:17:6e:ad:
                    d8:67:59:36:3c:a1:b0:22:4c:0a:97:bc:c6:a3:02:
                    0b:10:37:24:a2:38:1c:d4:81:e4:6e:80:0a:e7:38:
                    0b:13:95:09:e7:2b:0b:6a:50:56:47:98:7c:b3:a8:
                    fe:34:6d:b7:22:84:fa:80:13:75:c8:be:00:e9:9d:
                    c2:e9:8d:d4:6f:b7:7d:43:75:48:61:76:49:13:a6:
                    d1:b8:06:98:88:5b:4a:5c:20:c6:1c:0d:ae:af:16:
                    e9:21:b6:c0:0a:f5:f5:34:0e:98:c2:af:4d:37:aa:
                    e8:bc:05:95:54:be:02:d3:38:e0:35:9a:a9:48:24:
                    dc:c8:d1:15:c2:2c:cd:12:1e:87:df:88:09:6b:ea:
                    00:70:b2:c3:5e:b0:67:30:5d:c1:17:db:7e:ae:16:
                    2a:f3:90:9e:eb:a2:d7:3d:e1:58:f7:50:2e:65:b5:
                    74:7b:68:30:b6:b5:20:c1:af:4e:92:11:ba:1d:18:
                    d3:61:56:b8:58:a1:62:3f:fb:44:f4:5e:b5:26:58:
                    dc:46:5d:13:bc:48:22:75:c9:7d:fd:1c:e5:ff:5e:
                    b6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CE:EB:EF:03:B5:3D:2B:10:35:3F:3F:8D:E6:5D:71:D1:76:7C:ED
            X509v3 Authority Key Identifier:
                keyid:5E:8C:D4:01:26:08:48:F5:D6:6F:40:D2:8F:D9:77:17:A9:F0:F2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XozUASYISPXWb0DSj9l3F6nw8mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/3EA696ACA6B011EDB901D49CF1222468/XozUASYISPXWb0DSj9l3F6nw8mo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c5:72:c5:f3:9b:6d:3d:ed:9f:72:48:ca:fe:ac:37:89:35:
         f4:5f:fd:8b:d3:18:7c:a4:3e:94:ca:5b:62:e5:25:53:7d:81:
         eb:b6:36:11:9c:70:51:ed:07:6d:e9:db:bc:78:1d:e9:ac:6b:
         3b:3e:bb:95:d7:c7:01:69:b2:7d:3c:dd:14:8a:69:2f:a4:64:
         51:bd:96:26:fa:e7:1e:a6:95:cb:8b:cb:82:a3:f0:03:75:1e:
         04:5b:0b:7d:8c:fc:cf:8e:2f:16:8a:e9:08:3c:30:ca:e2:45:
         ad:c5:29:de:1b:56:c3:1d:e8:18:e8:2b:a5:37:bd:6c:84:25:
         41:b5:8c:1f:70:19:42:f5:d0:bc:53:84:f4:51:71:b3:7c:91:
         e2:67:39:6e:07:da:ba:91:aa:44:54:04:67:03:64:0a:d9:ed:
         0b:8c:b6:ac:e2:e8:af:fc:3f:63:3d:ba:0d:14:62:0b:b7:24:
         7c:a3:b2:94:9a:ce:a5:14:4c:c9:73:57:77:db:27:f9:05:99:
         91:65:17:25:95:ba:6e:55:bd:ed:58:88:4f:81:37:5c:28:1a:
         ed:b9:8f:08:bd:ee:e0:f1:8e:90:76:a6:a9:74:50:7f:c1:0e:
         30:78:43:a7:22:2c:43:bc:f2:43:22:5e:a6:03:db:ba:12:9e:
         95:07:e7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:54 2025 by rpki-client on console.sobornost.net