Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
File:                     3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft (raw, json)
Hash identifier:          DiQMAs31tmWU0ueKAYD6dIXXoazVY9WddInocFXGdoA=
Subject key identifier:   08:33:47:41:F2:C4:2A:7F:14:E3:7B:01:CE:E6:C1:3F:5E:A3:A8:E1
Authority key identifier: DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B
Certificate issuer:       /CN=F36F8F4FAF/serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
Certificate serial:       0571
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
Manifest number:          0558
Signing time:             Sun 27 Apr 2025 02:37:53 +0000
Manifest this update:     Sun 27 Apr 2025 02:37:52 +0000
Manifest next update:     Tue 29 Apr 2025 02:37:52 +0000
Files and hashes:         1: 3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl (hash: eyQXILkN0AH38rv+5Qj38V9FNRFysO+rg7XEjaapAdM=)
                          2: C0B67590BC5311EEA497C07F775412E6.roa (hash: 91oXBpg4I1tftytyNzYw21bZjbkIw+S8V4YAG0kXWMc=)
                          3: 6F7B2D9CE6EB11EFAF676182762E951A.roa (hash: ywXo19J7zzDJozIEEmOFi9+A4iofR1mYhpmq35OcaZk=)
                          4: 0EB8532CE6E611EFA1284861762E951A.roa (hash: +Ok9dLqiCTNEexkoRFgNd4UM629LDyyikx+fFXEssiA=)
                          5: 394CCA22661911EE8EE6BB324AD9E6FC.roa (hash: +0IcxhM38lh4IkoNfS1FKvLpsiV4VGtwwZB62TnSd38=)
                          6: 7AA909E6661811EE9D9D6A304AD9E6FC.roa (hash: ivpWYIkkTuF4QNjZtvInWtxGInyuZaU25bwDPzQEVc8=)
                          7: F3B29612C8E711EFAC3B3EA9762E951A.roa (hash: OETANewi1spwDI+wuFRp4Ft8bl6bEviyIyR18XaKaRE=)
                          8: D9217A3C661611EEA86D522B4AD9E6FC.roa (hash: z2SZmCJ1kKmTX6Ii7RXMb+iItL2uLeEn8Lji78flCjA=)
                          9: 15BEF06C669611EEBB547A464AD9E6FC.roa (hash: Q096MBnYS9Mr2ffdsAW+/0ffgPNktzY7/iaZWIxcl1U=)
                          10: 5F5BD7A8C90511EF919C5060762E951A.roa (hash: CP9UE+jBOHX8oQ6s2JYHUVcCyElYEvB82K2Sr0b1faI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1393 (0x571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F4FAF, serialNumber=DC17A0EC58652D31896123A65610C3A32046556B
        Validity
            Not Before: Apr 27 02:37:52 2025 GMT
            Not After : Apr 29 02:37:52 2025 GMT
        Subject: CN=680d9881-60c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:72:5f:a8:cf:1b:eb:51:29:82:de:33:b1:0d:
                    a5:8a:3c:ee:e3:b1:71:ff:df:de:f4:5c:e9:8f:b7:
                    b4:10:76:03:e8:c3:59:75:bb:c1:7e:b1:88:71:25:
                    19:22:05:2e:b7:d4:34:c1:da:3b:46:88:37:04:5a:
                    3e:10:50:21:74:8c:96:f5:03:2b:8c:e2:af:ae:d7:
                    0d:f8:77:1b:f2:01:be:26:d6:e3:6f:06:15:b7:29:
                    d2:59:ce:fa:89:bc:a3:b8:75:2b:ea:42:a1:25:62:
                    20:cc:68:67:10:13:ce:92:f3:89:92:57:27:17:e5:
                    49:79:7b:cf:4b:c1:5d:d1:e2:17:d5:f2:3f:18:c8:
                    c1:76:84:e0:f7:d6:4a:42:4a:fa:9b:5a:3e:3d:09:
                    f4:f1:42:c1:8a:cc:ad:ca:ef:39:1b:1d:06:9b:4d:
                    78:77:c5:f8:54:1d:fa:eb:c3:79:93:a8:2e:d3:80:
                    5b:29:19:45:f8:32:35:e7:b4:3e:08:9e:68:3d:e2:
                    fd:4e:29:8a:16:c4:3f:f4:0d:e8:1c:19:7b:22:76:
                    d0:d9:77:e9:08:3c:a0:81:61:3c:53:f7:74:59:97:
                    bc:0e:14:28:ae:b0:fc:d8:fd:51:0a:a7:8b:08:19:
                    ff:21:c6:20:5b:ce:26:88:90:ab:24:09:b3:b1:ca:
                    56:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:33:47:41:F2:C4:2A:7F:14:E3:7B:01:CE:E6:C1:3F:5E:A3:A8:E1
            X509v3 Authority Key Identifier:
                keyid:DC:17:A0:EC:58:65:2D:31:89:61:23:A6:56:10:C3:A3:20:46:55:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3Beg7FhlLTGJYSOmVhDDoyBGVWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F4F/8A377BBC2A7511EC90817559D8A014CE/3Beg7FhlLTGJYSOmVhDDoyBGVWs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:4c:ff:5a:d2:14:0a:73:c1:ba:fb:ee:7d:c5:31:36:d4:a7:
         d1:5f:d4:76:1e:4a:81:e6:ca:9e:ff:f8:20:95:f6:e4:8b:f9:
         a9:21:05:e3:f4:5b:0a:60:48:5b:ec:06:9f:a3:a9:64:82:1d:
         b3:54:0a:f3:97:c8:c6:05:e6:be:8e:f3:a3:5b:a4:d3:d7:ac:
         27:ad:dd:3d:8b:78:fe:68:ee:9a:c9:87:1b:1a:90:f0:76:70:
         68:51:67:7d:1c:3f:4e:ce:f8:b7:5e:e6:7c:91:06:f7:8c:c4:
         dc:0f:3a:e5:b5:e3:bd:84:4f:d7:86:ca:d8:dc:69:e3:72:47:
         c1:79:87:67:89:c8:19:e2:63:6d:10:ec:28:17:6b:71:7b:39:
         ee:af:22:da:ed:16:09:af:16:a0:9f:a7:51:ec:82:01:61:3c:
         dc:8b:5c:79:1c:17:54:6f:61:b7:2d:b9:e0:77:96:04:ec:71:
         d3:73:29:09:ec:34:7a:95:69:fd:9e:b1:18:73:35:49:74:e2:
         3e:8d:af:59:02:1a:5a:f7:e0:97:10:d9:ea:60:7b:d3:04:9a:
         56:5f:90:48:fb:71:c6:62:7c:59:35:f6:7f:22:7e:0d:82:37:
         01:0a:5a:53:5f:1c:14:dc:9e:d7:60:50:01:24:98:d0:6f:bf:
         4b:6e:cc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:59 2025 by rpki-client on console.sobornost.net