Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
File:                     KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft (raw, json)
Hash identifier:          jT/mYydQI1yacUn314Ss77VEU7EG1Ii52L/qb/o8p+I=
Subject key identifier:   04:5C:58:89:5A:9C:6B:9E:4A:AD:7B:09:BC:CA:0F:2F:94:DA:CF:CD
Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Certificate issuer:       /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Certificate serial:       0463
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
Manifest number:          045B
Signing time:             Sat 26 Apr 2025 02:57:20 +0000
Manifest this update:     Sat 26 Apr 2025 02:57:19 +0000
Manifest next update:     Mon 28 Apr 2025 02:57:19 +0000
Files and hashes:         1: KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl (hash: QpbpG3YD2fLvnealvJbrqH+tBluovSMmC3rbf0iUcCY=)
                          2: 073BD64605C911EE95E74F304AD9E6FC.roa (hash: In9Q3d/Y0USLa0Qt9FonWtXn6zDCpfpzJ3Ey6VoUa4c=)
                          3: 16A921E4DC0B11EC947D03A2F1222468.roa (hash: vGBFcYwGWSd28shsl6wLto7Mn3qQgY7dKVAEPsi5kBs=)
                          4: A9F0CED005CB11EEAE1D25384AD9E6FC.roa (hash: zxEwyc9gplQBJFrp7SAoD+b4/1ve107UCm4IoIpj8I0=)
                          5: BF8426E405CA11EE92157D354AD9E6FC.roa (hash: A+WykTSmvAsx1MAKq+Pb3eSJ+oLcJkndPTp4NaD0n4Y=)
                          6: 3DA37FA805CA11EE97650D344AD9E6FC.roa (hash: qnjPAnaVGfXdRft23JxV+6Cp0V+QdoJKnDCoKaZOhOc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1123 (0x463)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E29EDAF, serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
        Validity
            Not Before: Apr 26 02:57:19 2025 GMT
            Not After : Apr 28 02:57:19 2025 GMT
        Subject: CN=680c4b8f-2bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3a:b0:6b:3c:8e:2a:de:d9:79:2b:dd:b2:f0:
                    b7:2f:13:f6:ca:84:4b:7d:a9:fe:63:f0:eb:3e:ac:
                    f3:63:c4:bd:93:4e:57:7c:b3:05:b3:81:2f:b8:64:
                    3f:9d:f0:7b:da:a7:38:25:a7:8c:4f:ae:ed:5a:5b:
                    0c:6e:ac:6a:4d:ea:d4:06:ce:a4:df:c4:29:58:f4:
                    2d:0f:9b:a0:d0:f2:43:0f:d6:79:87:2f:f1:21:78:
                    55:27:f0:63:5a:b8:d0:c1:27:6d:b9:c8:1f:f2:a8:
                    87:b9:f6:a5:1b:ee:0f:e4:5f:67:e8:6a:64:91:0f:
                    49:8f:74:d2:37:37:ae:6a:63:23:ee:ce:60:52:6e:
                    06:44:51:a9:23:5c:90:f5:ce:34:df:a9:ab:08:14:
                    75:db:c5:2b:42:1c:e4:01:12:fc:cf:33:37:71:9f:
                    62:72:7f:e4:a7:c4:23:44:eb:05:79:e1:b7:39:1e:
                    83:e6:15:43:fe:c0:14:fb:03:60:dd:ab:1b:df:a8:
                    23:cd:34:3b:1e:8f:ab:65:ae:99:86:5a:a7:4f:6b:
                    bc:28:8a:a8:02:39:a7:b8:d4:19:63:d1:e4:23:04:
                    bd:da:95:82:c8:7c:b6:c7:bd:cb:e6:ef:85:f9:dc:
                    75:56:be:52:43:dd:a4:ee:18:18:bb:63:8a:73:10:
                    3a:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:5C:58:89:5A:9C:6B:9E:4A:AD:7B:09:BC:CA:0F:2F:94:DA:CF:CD
            X509v3 Authority Key Identifier:
                keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:f4:bf:a6:5b:dc:f2:59:01:80:99:15:43:5d:18:5c:70:22:
         08:f2:44:cc:b0:0d:8a:2d:2c:4f:92:55:87:88:56:95:84:be:
         0f:9a:ed:77:ca:45:af:87:6b:7f:b5:cc:57:67:1f:55:ec:05:
         f6:d6:91:31:4c:19:95:55:c7:9a:b8:7a:de:4d:06:d4:73:ff:
         a9:00:e6:7e:2b:8b:81:42:04:d9:da:09:b4:40:28:af:a3:0f:
         2e:9b:33:5b:cd:ce:bd:57:be:34:3a:04:a4:a0:10:d0:7b:17:
         e4:9f:85:f2:de:ce:72:99:b7:a8:34:3b:9e:09:6c:bb:94:cc:
         55:7b:ef:4d:22:4c:9b:d6:04:42:ca:68:d9:51:96:14:f2:14:
         df:7e:ea:e4:51:d1:de:ec:46:bc:cb:f3:d4:aa:e9:1b:e8:de:
         a5:50:3e:5a:7b:f2:80:c9:87:53:45:cb:f2:c9:0b:11:83:10:
         ca:ea:9b:5d:12:1c:51:ac:83:e5:b4:04:b4:50:d2:3d:a7:7a:
         5c:58:3a:8e:9c:e5:a8:af:5f:fa:39:d2:33:66:9f:a4:f2:e1:
         d7:5b:1a:b2:6b:aa:a4:4d:16:d3:9f:7b:4e:e7:61:be:12:30:
         a1:53:dd:8d:cb:c1:b8:c1:f5:50:23:de:62:91:bf:53:fc:1a:
         d4:ab:ae:04
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBGMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTI5RURBRjExMC8GA1UEBRMoMkEzQ0M5RTU1MTlBNUE1QkIxM0QwODMxMENBOTM0
ODI0ODk2RkE1QTAeFw0yNTA0MjYwMjU3MTlaFw0yNTA0MjgwMjU3MTlaMBgxFjAU
BgNVBAMTDTY4MGM0YjhmLTJiZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4OrBrPI4q3tl5K92y8LcvE/bKhEt9qf5j8Os+rPNjxL2TTld8swWzgS+4
ZD+d8Hvapzglp4xPru1aWwxurGpN6tQGzqTfxClY9C0Pm6DQ8kMP1nmHL/EheFUn
8GNauNDBJ225yB/yqIe59qUb7g/kX2foamSRD0mPdNI3N65qYyPuzmBSbgZEUakj
XJD1zjTfqasIFHXbxStCHOQBEvzPMzdxn2Jyf+SnxCNE6wV54bc5HoPmFUP+wBT7
A2DdqxvfqCPNNDsej6tlrpmGWqdPa7woiqgCOae41Blj0eQjBL3alYLIfLbHvcvm
74X53HVWvlJD3aTuGBi7Y4pzEDrHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBFxY
iVqca55KrXsJvMoPL5Taz80wHwYDVR0jBBgwFoAUKjzJ5VGaWluxPQgxDKk0gkiW
+lowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUyOUVELzFDNUI1RDAyREMwOTExRUM5Q0VCREU5QkYxMjIyNDY4L0tqeko1
VkdhV2x1eFBRZ3hES2swZ2tpVy1sby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0tqeko1VkdhV2x1eFBRZ3hES2swZ2tpVy1sby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTI5RUQvMUM1QjVEMDJEQzA5MTFFQzlDRUJERTlCRjEy
MjI0NjgvS2p6SjVWR2FXbHV4UFFneERLazBna2lXLWxvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC49L+mW9zyWQGAmRVDXRhccCII8kTM
sA2KLSxPklWHiFaVhL4Pmu13ykWvh2t/tcxXZx9V7AX21pExTBmVVceauHreTQbU
c/+pAOZ+K4uBQgTZ2gm0QCivow8umzNbzc69V740OgSkoBDQexfkn4Xy3s5ymbeo
NDueCWy7lMxVe+9NIkyb1gRCymjZUZYU8hTffurkUdHe7Ea8y/PUqukb6N6lUD5a
e/KAyYdTRcvyyQsRgxDK6ptdEhxRrIPltAS0UNI9p3pcWDqOnOWor1/6OdIzZp+k
8uHXWxqya6qkTRbTn3tO52G+EjChU92Ny8G4wfVQI95ikb9T/BrUq64E
-----END CERTIFICATE-----
Generated at Sat Apr 26 06:21:37 2025 by rpki-client on console.sobornost.net