Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
File:                     HduOkx9XqSgXZJgwxO2K3XTvSfk.mft (raw, json)
Hash identifier:          jEzpcP79Mr4zRWJw6+HgGTI12u0PcjTTLnU4iWrHHSE=
Subject key identifier:   25:C8:3C:1B:46:E6:95:E8:8B:30:9B:B0:D3:A6:C2:8F:33:2D:8F:F4
Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
Certificate issuer:       /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Certificate serial:       02F1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
Manifest number:          02ED
Signing time:             Mon 28 Apr 2025 03:46:09 +0000
Manifest this update:     Mon 28 Apr 2025 03:46:09 +0000
Manifest next update:     Wed 30 Apr 2025 03:46:09 +0000
Files and hashes:         1: HduOkx9XqSgXZJgwxO2K3XTvSfk.crl (hash: 1cewsCUEqyG7dqtN9BSzcTgji/mrF4TK3VmqqAh53lw=)
                          2: 67EE102447CF11EE9C03343D4AD9E6FC.roa (hash: O2NZ35ufqu4elRfMay9VZHxMEvo+nnYW2X0R4hlLTtM=)
                          3: 4880939CC4DE11EE95672478775412E6.roa (hash: F2e0hzbOK6HYaj0QzfpPWideNdPZ8IN39pRD4AiYXOM=)
                          4: D1362304419011EE9B834D534AD9E6FC.roa (hash: YNDCiZrahjcZAjNgcdtfFcQUc6+zKfN2PpG8gmYcUdM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 753 (0x2f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F505DAF, serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
        Validity
            Not Before: Apr 28 03:46:09 2025 GMT
            Not After : Apr 30 03:46:09 2025 GMT
        Subject: CN=680efa01-2d22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c2:c5:7b:d2:c6:c4:2f:c9:ad:56:34:2d:55:
                    88:63:5a:ad:18:8a:9d:68:e1:15:ca:c6:b5:4c:43:
                    2c:86:b7:3d:bf:61:bd:80:58:0f:68:40:86:18:40:
                    c5:bc:d7:44:56:88:1d:15:83:32:fa:4a:43:04:c8:
                    8c:38:47:8d:47:69:c1:3a:6a:de:04:5b:90:4a:e6:
                    1f:dd:be:ab:29:33:7c:ad:c7:4c:b3:5c:fa:3d:d1:
                    66:3d:ae:99:c0:a4:5c:69:c7:47:57:71:aa:59:43:
                    ce:07:4a:61:5d:76:a4:26:2e:8b:c2:8a:a3:53:7c:
                    9d:53:ae:4a:be:0b:24:df:aa:80:13:86:29:e8:69:
                    d6:47:da:4a:03:48:c4:e9:5d:38:fd:b5:e1:9a:19:
                    97:55:77:41:ba:ab:0f:e2:d0:e8:61:1e:59:31:bd:
                    fd:9f:2b:96:8a:b6:fa:0d:f8:5f:54:57:30:5a:d4:
                    e5:a3:dd:19:30:06:33:18:a4:32:96:09:f2:c2:0d:
                    63:b3:3e:99:8e:ae:15:85:31:6c:d1:f6:d9:5e:cb:
                    30:d4:8e:fd:8a:f4:67:9b:0f:c3:ad:56:41:47:f8:
                    74:9e:f0:ab:21:a1:8c:73:09:a8:46:4b:27:65:ab:
                    69:4e:70:89:9a:9d:a1:89:32:0c:29:7c:e3:45:57:
                    ae:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C8:3C:1B:46:E6:95:E8:8B:30:9B:B0:D3:A6:C2:8F:33:2D:8F:F4
            X509v3 Authority Key Identifier:
                keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:fd:e8:49:91:9c:e8:17:7c:b5:49:a6:5a:63:2a:c1:2b:fc:
         d9:1d:2a:74:39:43:b5:47:e5:4e:c4:a6:a0:03:37:9c:00:3e:
         27:36:69:10:c1:87:2a:87:a3:34:44:6e:7a:f3:f1:e5:47:73:
         07:4d:32:38:58:48:03:15:8e:54:df:a3:17:86:97:84:16:c7:
         88:1c:ec:f9:f2:56:10:18:0f:b5:ff:29:47:8a:cc:83:b0:75:
         f9:2b:a4:4c:7b:15:f3:5c:e8:49:af:76:d0:1c:d6:a3:db:31:
         f6:56:5f:82:ba:34:b1:ee:8e:a8:ae:02:35:d1:72:1c:f0:6f:
         d2:18:d7:cf:bb:03:73:01:c0:56:50:cb:88:91:2c:99:85:38:
         ee:18:f8:53:f3:e0:84:47:66:43:58:4e:7c:c2:8e:5d:60:d8:
         a2:89:05:87:f8:3d:05:48:bb:95:81:8f:20:ec:69:02:4f:87:
         fe:79:33:2b:e4:45:3b:64:f1:59:f9:66:cd:0f:eb:6e:af:45:
         6e:a8:f0:a4:4c:4a:67:8a:26:20:ad:26:fd:bd:3a:8b:01:d1:
         6b:74:d0:c6:bf:61:75:05:a4:b5:df:a0:df:e3:ed:b3:40:ed:
         56:99:68:f4:a0:9f:47:f2:52:6f:34:6c:2a:e3:1f:71:5f:1a:
         6d:a7:d0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:06:39 2025 by rpki-client on console.sobornost.net