Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
File:                     sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft (raw, json)
Hash identifier:          HgN590A0+wG2nABAvD0NceuDKxO1gk6uWqh/wKMlqHo=
Subject key identifier:   B9:5B:6C:AF:0A:DE:2B:41:EA:24:86:85:86:D1:FF:8C:BB:52:28:78
Authority key identifier: B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB
Certificate issuer:       /CN=F36F8F86AF/serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
Certificate serial:       016D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
Manifest number:          0167
Signing time:             Sun 27 Apr 2025 04:32:29 +0000
Manifest this update:     Sun 27 Apr 2025 04:32:28 +0000
Manifest next update:     Tue 29 Apr 2025 04:32:28 +0000
Files and hashes:         1: sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl (hash: w1V2qevUbF+ad4Vu53mG3YhcKmXd6CI7fxeU3wj7r08=)
                          2: 0EB2B67C8FAE11EFB0C6F19A762E951A.roa (hash: dRhtvM/2t47z2JwA9sfqbVs7olYpopo1AghyJCkiJnU=)
                          3: A3E369B88FAD11EF84E8C298762E951A.roa (hash: KHj93NQJWTZ8oMi0gw+QEnklPoZI/vRnCOYhgqAuDO0=)
                          4: 7017818A912B11EFA858BC80762E951A.roa (hash: 8BIH5JeOynzixiDGrMvrW3MY/Y2dPuOtFBanjsebARk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 365 (0x16d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8F86AF, serialNumber=B1BA3D7C7D8ECD511FDA4BF0EC29F6A99B2C31BB
        Validity
            Not Before: Apr 27 04:32:28 2025 GMT
            Not After : Apr 29 04:32:28 2025 GMT
        Subject: CN=680db35d-eabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:3d:59:d9:79:58:92:0c:5b:00:46:41:63:34:
                    3f:a9:ae:ff:51:ab:52:4b:65:e8:31:f7:dd:a4:ef:
                    6b:27:51:37:5d:de:ee:e7:f5:53:26:11:e8:38:82:
                    22:9a:cb:16:35:73:65:70:99:3b:b6:90:45:0b:3b:
                    dc:cb:c6:dc:b1:0b:7a:c7:d9:bf:41:68:49:36:22:
                    11:5b:40:f3:64:ec:65:02:c2:8d:92:dd:a5:82:b1:
                    eb:4d:b6:44:44:43:0a:ba:08:4b:7d:e9:ba:cb:f0:
                    73:7a:6d:04:63:1f:0e:ef:60:3a:93:93:85:df:fa:
                    c5:36:01:ab:3d:55:4f:50:de:73:bf:a4:d4:1a:4c:
                    ce:c1:0c:47:1a:b8:a2:bc:d0:d1:53:dd:57:ed:2a:
                    e6:ee:5f:e3:82:0e:fe:34:90:91:f4:2a:3e:ff:ae:
                    9f:98:08:81:57:6f:a1:19:54:b6:62:d7:4d:d0:fb:
                    f7:c3:ab:82:c7:d4:8b:b9:72:d0:e6:12:44:ef:c0:
                    60:cb:7d:a7:bd:7a:1d:0b:8a:c5:d4:d0:4e:2a:c4:
                    87:57:23:a0:2e:8c:3d:86:81:b8:b9:75:c3:ab:fe:
                    5d:a3:ef:d5:87:94:10:70:57:ec:a7:15:00:ef:79:
                    e4:07:1e:d1:c1:1b:2b:70:84:cb:7e:82:0f:12:97:
                    57:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:5B:6C:AF:0A:DE:2B:41:EA:24:86:85:86:D1:FF:8C:BB:52:28:78
            X509v3 Authority Key Identifier:
                keyid:B1:BA:3D:7C:7D:8E:CD:51:1F:DA:4B:F0:EC:29:F6:A9:9B:2C:31:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sbo9fH2OzVEf2kvw7Cn2qZssMbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8F86/43159886192911EFA70CC06E017001B1/sbo9fH2OzVEf2kvw7Cn2qZssMbs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:67:e6:04:ce:42:7c:44:07:4c:e6:85:57:54:02:32:00:f7:
         ab:26:5a:ae:82:4b:df:c5:4c:89:f5:d5:a3:fd:af:e7:8b:66:
         37:c9:73:fb:1a:af:66:61:19:83:4a:b1:b3:3f:dd:87:87:c1:
         4c:7b:33:4a:43:2d:ab:10:af:16:24:1a:c2:1d:08:05:12:5c:
         d5:ec:26:f2:08:92:fe:bc:24:47:93:b0:8d:8c:b1:67:f3:6d:
         96:8c:a6:b5:02:5e:99:67:05:48:f3:78:05:98:6c:19:6f:33:
         ed:e3:4c:e8:66:e2:06:73:86:8d:40:e9:1d:20:0c:ac:57:cb:
         79:ed:12:a1:bd:fa:7a:5b:ba:a0:31:4b:47:1a:06:74:b2:2d:
         ab:84:2f:6b:b8:03:5a:e2:c2:b7:f6:6c:a2:00:cb:60:bb:85:
         08:b5:aa:65:d9:80:b2:5f:90:b3:82:6d:e2:23:17:0a:ca:76:
         19:63:01:ad:c8:ef:25:fb:37:64:93:44:f3:90:99:54:49:04:
         66:3c:cf:01:fe:90:84:01:04:34:7d:f2:59:59:6e:9a:f9:2f:
         77:5c:d5:2d:2c:f6:a3:e0:59:5d:ad:f4:df:2c:4f:94:1a:2c:
         50:77:a6:98:69:ff:eb:4a:f2:7c:2e:73:1a:5f:e1:5a:ca:21:
         d0:32:8a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:40 2025 by rpki-client on console.sobornost.net