Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
File:                     CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft (raw, json)
Hash identifier:          i4IRdNTWCIciP6nnlXKrZ+Zr8uyZn80JS+3wmphNik8=
Subject key identifier:   4E:0A:E8:3E:00:DB:8E:E6:BF:F3:2B:DC:60:84:34:66:04:CB:F7:95
Authority key identifier: 08:90:12:F9:69:A6:20:0C:93:99:B0:93:44:7A:A4:EA:2C:FC:A8:1E
Certificate issuer:       /CN=F36DA693AF/serialNumber=089012F969A6200C9399B093447AA4EA2CFCA81E
Certificate serial:       08B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
Manifest number:          08B3
Signing time:             Fri 25 Apr 2025 01:25:32 +0000
Manifest this update:     Fri 25 Apr 2025 01:25:31 +0000
Manifest next update:     Sun 27 Apr 2025 01:25:31 +0000
Files and hashes:         1: CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl (hash: F12HPbjRIcj0zYKHPDkYLBpd1YbQQgHfta1WBiYZzw0=)
                          2: 7E88370E7D5F11E993BB1E7FF8AEA228.roa (hash: am92gfMFQqWByXCSl8p9EO6PUlEqWuTUeM+DI4nReL0=)
                          3: DF5A0F00C6EC11ED923603D0F1222468.roa (hash: Z88ICIcSUmQtvPQ2Yz90UPDdaYkgQDQfxkB1loI2X7w=)
                          4: 2A3ED73014EE11EA8694372AF8AEA228.roa (hash: FBxa8Lun9k2Hzq6Q2hfcEGXCZPwxZGKNJqxPvNPWs2c=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2231 (0x8b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA693AF, serialNumber=089012F969A6200C9399B093447AA4EA2CFCA81E
        Validity
            Not Before: Apr 25 01:25:31 2025 GMT
            Not After : Apr 27 01:25:31 2025 GMT
        Subject: CN=680ae48c-2994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:80:f5:36:81:a0:0f:66:db:7b:44:bf:91:b0:
                    b8:43:6c:5d:22:45:95:67:e5:e5:a9:02:a9:ab:11:
                    27:3a:b6:44:45:a3:fc:cb:34:84:13:74:b2:58:4a:
                    a6:63:f7:c4:21:5a:4e:f4:5a:d3:f2:27:28:5e:d0:
                    9e:21:a4:1f:ad:a5:25:40:65:39:a6:e1:8c:6f:91:
                    a9:cd:1b:e8:78:87:ea:4a:f5:bb:ba:d3:97:09:69:
                    d4:6b:d2:04:7f:76:96:5f:c7:bb:5a:bd:44:82:0f:
                    6c:6b:d2:96:19:3b:e6:d5:90:a0:90:0d:78:8e:5c:
                    26:1f:3e:81:be:78:f9:32:a3:46:0e:60:71:b5:5c:
                    dd:32:dc:fe:82:af:29:d6:8a:1e:81:f5:87:0c:c8:
                    f2:7d:91:a8:2f:91:c3:2c:0c:6e:85:f3:f6:0a:03:
                    0e:b1:e7:68:8b:79:9d:28:2f:77:8c:52:50:e6:ef:
                    39:4a:05:48:98:af:d5:f2:fc:75:44:df:ff:a9:4e:
                    45:1c:7d:5e:9a:9a:37:af:ea:a7:b6:88:05:4b:3e:
                    de:01:19:22:7d:a3:8c:b5:bd:d5:ab:68:98:dd:04:
                    55:2d:39:98:d1:d3:12:95:75:f7:04:50:9e:32:35:
                    49:3f:3d:f6:0b:77:53:31:89:bc:82:ec:bf:f6:48:
                    be:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0A:E8:3E:00:DB:8E:E6:BF:F3:2B:DC:60:84:34:66:04:CB:F7:95
            X509v3 Authority Key Identifier:
                keyid:08:90:12:F9:69:A6:20:0C:93:99:B0:93:44:7A:A4:EA:2C:FC:A8:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CJAS-WmmIAyTmbCTRHqk6iz8qB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA693/0D2968C67D5F11E99565B87EF8AEA228/CJAS-WmmIAyTmbCTRHqk6iz8qB4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:06:0b:1d:97:2c:a8:71:75:50:f7:af:8f:f1:6e:65:93:1c:
         f8:51:39:c0:62:e6:b6:df:91:4d:b6:27:5b:88:be:c4:93:5b:
         74:6e:43:5a:f7:3b:54:58:16:22:ba:97:52:27:b2:4b:9e:62:
         66:e7:f1:08:eb:29:a6:31:a6:b2:bc:a7:54:3e:d0:5f:6f:11:
         58:ae:08:b8:c2:f6:1f:c3:94:05:0a:72:4e:14:be:ee:aa:79:
         d1:1e:90:6b:e5:d7:59:25:fc:79:e3:76:82:c9:63:f0:0a:7b:
         e5:69:cd:d3:f2:75:4a:91:2c:56:62:49:57:38:11:91:b0:10:
         c5:09:08:a0:05:a5:4f:5a:81:1f:84:77:bc:c2:38:5c:b8:7f:
         ce:2c:41:84:1a:78:0b:01:4e:1c:d7:3b:bc:d4:ff:b2:10:dd:
         c8:08:eb:a9:e8:f5:e8:e8:52:cf:82:51:76:bc:e3:cb:be:e7:
         e3:ea:13:27:d8:45:5e:88:6f:56:a9:8f:b4:41:3c:af:99:5b:
         a7:34:99:53:db:8a:2e:b6:66:52:0d:e1:6d:39:5b:bc:06:ac:
         d3:aa:d4:51:f3:47:44:ac:4e:2e:6e:63:9f:89:3b:f5:10:f8:
         44:7c:7b:5a:e5:47:07:b2:35:f9:a1:8f:81:20:f4:01:a0:73:
         a5:d5:10:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:16 2025 by rpki-client on console.sobornost.net