Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
File:                     9d_2SjnYAHBE12ccvKqh4WFXRaA.mft (raw, json)
Hash identifier:          gqtE/rYdcegRy49HZq2NGytxeIBVZiKE4mxj/HtnStw=
Subject key identifier:   40:DB:B1:83:87:7B:96:D4:12:61:7D:74:E5:E3:DD:A7:C5:B1:A2:5F
Authority key identifier: F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0
Certificate issuer:       /CN=F36E6B77AF/serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
Certificate serial:       012B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
Manifest number:          012A
Signing time:             Sun 27 Apr 2025 04:40:57 +0000
Manifest this update:     Sun 27 Apr 2025 04:40:56 +0000
Manifest next update:     Tue 29 Apr 2025 04:40:56 +0000
Files and hashes:         1: 9d_2SjnYAHBE12ccvKqh4WFXRaA.crl (hash: 6gpFwl1uo97r14FhOnbU1EdMpQG8qfHm9PMtoTnXPuI=)
                          2: 5B4C788042CC11EFA79C21B7762E951A.roa (hash: 8MsvdpCURh5U1VeikZh21FkxiH+o3yXC4kGGOZX4kQo=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 299 (0x12b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6B77AF, serialNumber=F5DFF64A39D8007044D7671CBCAAA1E1615745A0
        Validity
            Not Before: Apr 27 04:40:56 2025 GMT
            Not After : Apr 29 04:40:56 2025 GMT
        Subject: CN=680db559-d655
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:26:f4:5e:46:7d:68:49:ad:b9:ff:08:0a:b7:
                    86:94:1e:ad:ca:0a:d6:59:de:5c:71:78:6d:f9:4e:
                    5b:17:56:e9:cd:cb:c8:eb:ae:bf:8f:5d:a3:29:77:
                    52:33:e1:6a:99:65:93:37:d7:8f:7b:65:0d:a4:20:
                    5b:66:90:5e:7f:11:30:fc:01:b7:40:37:9f:07:e2:
                    e0:3a:4f:60:40:25:5b:e4:8d:47:e9:5e:f3:6c:88:
                    88:8d:8e:de:33:60:fb:a7:6b:f4:c2:b1:3a:91:b2:
                    dd:01:57:19:1d:9b:f2:ba:06:5a:ab:86:f0:d8:48:
                    76:ac:d6:99:bb:33:f5:b5:f9:11:50:c5:8e:07:27:
                    f1:53:1a:c2:a9:29:4b:68:fb:18:d3:01:a0:74:03:
                    04:a7:44:c6:46:72:b2:c3:52:fb:c9:5b:0f:43:f2:
                    c1:02:1d:91:29:7f:80:ec:35:84:b2:80:f9:7a:27:
                    fe:14:a2:f9:9e:82:04:a8:9e:be:1b:51:de:f8:e4:
                    f2:8f:99:81:aa:00:69:45:91:a5:a8:9c:94:b8:cb:
                    52:93:e4:1a:c4:45:37:44:89:44:df:77:53:1e:ec:
                    0b:a1:11:d2:4c:79:33:7f:c5:a0:70:40:86:5f:77:
                    fb:9f:65:c5:d0:5c:24:80:03:70:f7:bb:3b:b3:99:
                    07:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:DB:B1:83:87:7B:96:D4:12:61:7D:74:E5:E3:DD:A7:C5:B1:A2:5F
            X509v3 Authority Key Identifier:
                keyid:F5:DF:F6:4A:39:D8:00:70:44:D7:67:1C:BC:AA:A1:E1:61:57:45:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9d_2SjnYAHBE12ccvKqh4WFXRaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6B77/3CFFA38042CB11EF8B9A37AE762E951A/9d_2SjnYAHBE12ccvKqh4WFXRaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:fb:bb:b1:3a:ca:3b:70:15:d7:5f:5d:0e:9a:c7:d8:f7:df:
         15:b6:2f:db:e3:79:53:20:0f:0a:a3:8e:56:61:fb:7c:06:96:
         36:71:42:63:8b:e0:d8:63:6f:cf:d8:6a:e4:c0:ac:16:6f:f0:
         b5:68:b5:df:00:1c:9c:b9:63:72:3d:b8:9c:69:64:b0:4f:02:
         99:67:34:be:9e:85:a4:85:be:da:3c:96:ad:6d:b3:fe:cf:c1:
         d5:73:3a:c6:21:a1:56:c9:37:1e:5d:a2:48:70:4b:13:a0:5a:
         84:c5:98:f3:82:02:7b:a5:a1:89:00:d2:a4:8b:2f:e0:40:59:
         7b:f3:e4:f6:af:b3:b9:d5:8d:fb:c1:10:02:46:de:f2:50:6d:
         87:14:0b:84:77:1e:25:ca:b1:f9:c0:a3:24:a9:c8:93:e1:c3:
         1e:79:70:c3:47:a5:ce:d6:c2:5c:7c:be:8a:ac:a4:68:36:a3:
         0e:30:6c:5a:a2:7a:a3:96:c2:9c:f3:85:a9:57:92:a4:d1:37:
         d6:f1:70:1a:7d:2e:25:1a:8f:38:7b:0d:5d:01:7b:1f:30:aa:
         66:77:0a:1d:63:44:47:3f:ec:64:7a:9c:c1:ae:55:d8:a2:33:
         2b:95:e6:44:92:18:fc:3d:3a:a5:8c:cb:5e:8a:55:4d:8b:9f:
         85:51:3b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:39 2025 by rpki-client on console.sobornost.net