Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.mft
File:                     Ty5dBoUPqUuSIs9__nb4svMBISU.mft (raw, json)
Hash identifier:          cNxLKBm4K1ExEru/nFly03tFtVveNOAxxSTm/Qf9jBs=
Subject key identifier:   BC:AA:A5:5A:F4:D1:84:60:55:22:58:54:57:04:F7:97:89:BF:17:FA
Authority key identifier: 4F:2E:5D:06:85:0F:A9:4B:92:22:CF:7F:FE:76:F8:B2:F3:01:21:25
Certificate issuer:       /CN=F36E570FAF/serialNumber=4F2E5D06850FA94B9222CF7FFE76F8B2F3012125
Certificate serial:       9B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ty5dBoUPqUuSIs9__nb4svMBISU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.mft
Manifest number:          9A
Signing time:             Fri 25 Apr 2025 05:03:13 +0000
Manifest this update:     Fri 25 Apr 2025 05:03:12 +0000
Manifest next update:     Sun 27 Apr 2025 05:03:12 +0000
Files and hashes:         1: Ty5dBoUPqUuSIs9__nb4svMBISU.crl (hash: CtkLSvSDB5m2+hQHd/x0L8rkVOBL/bg1ZG2n6g1Suik=)
                          2: FAB09A2AAF2B11EFBDDD2D9D762E951A.roa (hash: pXJWIZdalTimXX6hDNwirsv+KOa5aQ9rGKxIX49vIsI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ty5dBoUPqUuSIs9__nb4svMBISU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E570FAF, serialNumber=4F2E5D06850FA94B9222CF7FFE76F8B2F3012125
        Validity
            Not Before: Apr 25 05:03:12 2025 GMT
            Not After : Apr 27 05:03:12 2025 GMT
        Subject: CN=680b1791-aed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5d:38:64:8b:5d:a9:6a:ed:b7:11:a4:a6:f8:
                    66:c0:4f:b1:92:a9:30:ae:18:6b:23:53:e0:46:99:
                    a2:9c:dd:3d:43:7a:46:b4:5a:bb:fc:3f:85:3d:4c:
                    6e:99:1a:42:c8:69:8a:b8:41:4a:00:d5:15:3f:3d:
                    76:9b:8e:02:52:c1:f4:15:43:63:04:ec:fb:e3:ea:
                    e2:80:98:96:c2:26:dc:0d:e1:95:2a:9e:64:03:85:
                    90:01:f2:d3:11:6c:26:57:6e:69:9c:d4:43:08:1d:
                    af:e7:3e:3c:f7:c4:87:5c:1b:1d:16:90:97:b5:09:
                    77:12:5b:9e:c3:f0:95:bb:d8:73:c2:d1:2b:07:52:
                    61:9a:23:ec:44:1e:62:2c:76:3e:6a:f3:99:21:1e:
                    da:d8:91:41:9a:b3:8e:96:20:7d:7e:cd:64:5b:f7:
                    68:a9:39:dd:ce:72:c7:76:6f:61:48:a4:2c:26:db:
                    56:12:87:5c:e2:63:47:e4:60:89:d6:10:c9:a1:65:
                    03:6a:d4:a8:e0:34:fb:0f:dd:83:bc:a2:e1:7b:9c:
                    a5:e7:08:a8:71:27:6f:e6:34:5f:2d:9b:c2:cc:f7:
                    66:80:b6:c0:13:ea:2e:e1:00:2d:95:be:3c:1b:78:
                    66:0d:12:57:24:61:fb:73:a3:c5:6d:d8:5f:c7:ec:
                    3c:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:AA:A5:5A:F4:D1:84:60:55:22:58:54:57:04:F7:97:89:BF:17:FA
            X509v3 Authority Key Identifier:
                keyid:4F:2E:5D:06:85:0F:A9:4B:92:22:CF:7F:FE:76:F8:B2:F3:01:21:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ty5dBoUPqUuSIs9__nb4svMBISU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E570F/A29FCCC0AF2B11EF88A7C19A762E951A/Ty5dBoUPqUuSIs9__nb4svMBISU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:94:68:0e:0e:2d:f6:5d:67:44:21:34:10:42:9f:21:72:a6:
         38:c5:5a:74:1f:82:17:d2:af:56:22:b8:eb:0a:de:eb:c2:f5:
         ca:9a:8e:e8:96:c9:ab:4e:68:95:54:7e:86:43:7d:14:2f:de:
         de:01:04:26:8c:19:55:44:34:18:f8:ba:42:61:83:fa:be:67:
         84:b4:4a:c1:53:5a:21:ea:59:cd:2e:3f:f8:bc:4a:43:e2:b8:
         ef:13:31:a8:86:56:a9:e7:c7:38:5e:23:03:03:92:f0:3a:1c:
         7a:6e:48:49:97:84:6d:80:b0:6a:55:c8:b7:96:71:38:fe:68:
         7a:60:4d:58:57:0d:06:1b:4e:ba:16:4a:20:eb:51:30:09:d6:
         18:d6:c1:7a:54:ee:1b:94:21:ba:9a:2b:ac:b4:d4:8b:b4:8a:
         54:c0:7f:bf:7a:48:fa:0a:35:90:76:94:10:31:79:ec:4e:87:
         e5:74:4a:63:9f:f3:91:4d:ca:19:ea:3a:f3:5c:0e:ab:88:dc:
         8c:c3:8e:72:1e:3c:f2:a6:42:24:d4:c3:7a:3e:3b:1f:e0:fe:
         eb:fa:4a:b8:6c:1e:08:7d:bb:d5:0e:a8:fc:54:76:d8:a2:aa:
         61:a3:83:67:4c:c7:89:3e:9a:d7:b4:22:78:68:a8:52:2a:7e:
         69:fa:9d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:29 2025 by rpki-client on console.sobornost.net