Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
File:                     Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft (raw, json)
Hash identifier:          Y3yCxKCp+zQe59xXqA1H5521zv3eY48UAaiKhivbM8Q=
Subject key identifier:   06:16:66:D3:79:BE:EB:52:3F:98:00:C2:26:AE:99:4F:45:A7:1D:43
Authority key identifier: 3A:8F:30:8C:11:DF:2D:BB:74:FE:B6:CC:59:C6:64:09:86:C9:CB:65
Certificate issuer:       /CN=F36FC328AF/serialNumber=3A8F308C11DF2DBB74FEB6CC59C6640986C9CB65
Certificate serial:       0500
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
Manifest number:          04FF
Signing time:             Sat 26 Apr 2025 02:42:37 +0000
Manifest this update:     Sat 26 Apr 2025 02:42:37 +0000
Manifest next update:     Mon 28 Apr 2025 02:42:37 +0000
Files and hashes:         1: Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl (hash: 2EpevPslCsVwiQ+dw//6x7B/yf/u7k5tHHHhMZPv1Cs=)
                          2: 5966A982513411EC87153C3CD8A014CE.roa (hash: XiML3N/Ks2DTKm6yJyQZ8MauTZzboO/Tl8GClySWfiw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1280 (0x500)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC328AF, serialNumber=3A8F308C11DF2DBB74FEB6CC59C6640986C9CB65
        Validity
            Not Before: Apr 26 02:42:37 2025 GMT
            Not After : Apr 28 02:42:37 2025 GMT
        Subject: CN=680c481d-0003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:81:c9:62:3e:5d:a8:b1:91:74:c8:9e:5d:e0:
                    cb:73:ba:eb:1e:bd:a8:a3:d7:72:41:3b:18:8a:8f:
                    06:53:a1:8f:2a:3b:db:fa:2a:59:2d:4b:4c:97:4d:
                    87:48:87:f6:16:97:61:9f:63:71:95:04:df:c0:97:
                    0c:45:c1:3b:92:fd:68:f0:0e:50:17:e3:b8:00:dc:
                    c0:7b:1f:da:98:e1:89:5c:50:da:70:a3:0f:5c:b0:
                    cc:0e:96:8a:6e:d2:e0:2d:ef:56:52:58:a8:79:d3:
                    af:46:16:c9:24:e2:a6:0d:a8:3d:d8:f0:17:87:bb:
                    43:bf:45:ea:ea:c2:2b:9b:f0:6e:bb:44:34:ca:f7:
                    73:e9:92:0b:af:6f:81:d1:ce:fe:67:97:d4:9e:be:
                    bd:56:c9:ca:c8:eb:cd:54:3c:45:f1:e5:52:b0:e2:
                    66:2a:43:9f:0f:5c:e5:34:4f:10:14:d9:0f:1f:a6:
                    bd:72:41:6d:25:44:95:1c:30:a1:0b:d3:31:35:b4:
                    d6:5e:fd:d5:ae:4b:0f:51:2f:72:03:b9:ef:da:f8:
                    0a:24:27:bc:c3:8a:00:60:b1:3b:79:86:8d:60:f0:
                    a9:bf:f6:5e:88:64:38:c0:eb:89:25:50:d0:63:80:
                    bb:1a:ce:1e:94:a4:8d:e9:ce:f8:13:0a:35:82:bf:
                    d2:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:16:66:D3:79:BE:EB:52:3F:98:00:C2:26:AE:99:4F:45:A7:1D:43
            X509v3 Authority Key Identifier:
                keyid:3A:8F:30:8C:11:DF:2D:BB:74:FE:B6:CC:59:C6:64:09:86:C9:CB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b3:2c:4c:33:d9:b8:05:28:68:d9:49:bf:4f:5b:cc:b5:14:
         4b:e8:fa:a4:12:36:f1:e4:f7:50:4b:85:97:25:72:f6:56:ec:
         87:60:25:fe:10:b2:76:de:11:2b:95:95:4e:b0:23:65:66:9f:
         04:68:c6:fb:21:62:1c:73:8d:2e:41:94:29:59:d9:57:ca:17:
         be:90:3f:4b:63:6e:93:0e:54:fd:cd:25:56:02:5a:b4:d0:33:
         e4:c1:f8:48:a8:79:f6:ba:d7:bd:33:61:a7:19:bd:3a:18:3d:
         15:ec:4d:8f:48:c8:6c:83:07:5f:eb:59:c3:d9:00:e3:bd:dd:
         1d:72:03:43:1a:11:02:c3:e9:fd:55:62:cb:67:5e:10:15:8f:
         2a:23:67:3d:d0:c7:d0:ce:00:d8:3e:23:a4:40:c8:ab:ea:43:
         5c:9f:f2:d0:7c:a0:15:34:90:a7:7c:52:7f:46:2b:8f:79:71:
         de:d4:12:02:a5:87:7c:71:aa:64:05:b1:8c:bb:d8:d0:14:77:
         92:42:19:8c:c7:89:1b:2c:15:f9:8d:7f:d0:11:10:9f:da:f0:
         6a:90:83:8f:52:75:08:ed:f2:8b:9f:e0:77:c4:ac:c3:3a:10:
         da:db:01:7a:48:18:c3:76:c7:40:7a:08:98:fe:cc:e0:fa:c9:
         a6:42:9b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:21:43 2025 by rpki-client on console.sobornost.net