Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
File:                     snY9UExa-ft12a62ByQi-Hoaa_Y.mft (raw, json)
Hash identifier:          +WTCwZb44+XIt0sVyXTbFNLd+lmZgeOiuhQz0qrX/ow=
Subject key identifier:   C2:4F:37:8A:51:04:ED:DF:C2:E8:21:F3:E7:05:61:49:F9:54:E5:3A
Authority key identifier: B2:76:3D:50:4C:5A:F9:FB:75:D9:AE:B6:07:24:22:F8:7A:1A:6B:F6
Certificate issuer:       /CN=F36FC75CAF/serialNumber=B2763D504C5AF9FB75D9AEB6072422F87A1A6BF6
Certificate serial:       BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
Manifest number:          BB
Signing time:             Mon 28 Apr 2025 05:05:23 +0000
Manifest this update:     Mon 28 Apr 2025 05:05:22 +0000
Manifest next update:     Wed 30 Apr 2025 05:05:22 +0000
Files and hashes:         1: snY9UExa-ft12a62ByQi-Hoaa_Y.crl (hash: MijZCbHkLmDO9LwXw6i1cFTKJnFTbbpZaDfHXGoof+Y=)
                          2: 2836E3E2983811EFB48AAD6F762E951A.roa (hash: ilc1+7HG6/OhpNZjczTeMOkT7vcZALpZGaGEFuomW1E=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC75CAF, serialNumber=B2763D504C5AF9FB75D9AEB6072422F87A1A6BF6
        Validity
            Not Before: Apr 28 05:05:22 2025 GMT
            Not After : Apr 30 05:05:22 2025 GMT
        Subject: CN=680f0c92-88f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:91:b0:34:9c:39:a5:a0:95:96:87:79:8d:b3:
                    3c:02:71:44:25:5f:a4:27:4a:24:39:33:8f:0b:e0:
                    92:7c:17:1e:d5:d5:c4:ce:60:ea:42:ec:24:51:db:
                    4d:c0:a8:56:a5:5a:ea:02:31:92:5c:43:fa:f9:4d:
                    66:fd:cc:fd:6b:9c:be:67:b8:16:40:bd:5b:9e:f5:
                    e1:ca:d7:a2:b6:51:ab:3b:69:bb:ee:32:19:e3:40:
                    7a:bf:37:18:c4:5f:1f:b3:37:b8:fa:e4:3c:45:71:
                    96:88:8f:0a:bd:3c:ac:29:de:56:c1:60:99:7a:6d:
                    9f:af:1b:f0:46:89:8b:2e:ce:c3:c8:ff:64:a7:d2:
                    cf:e0:cc:67:54:cd:0f:84:6a:d3:34:23:15:4f:2f:
                    b2:44:c7:71:fa:f6:62:42:8c:4a:da:46:ed:a5:ed:
                    ad:e0:15:86:8a:37:af:b9:32:ad:da:d6:13:c7:34:
                    93:b3:dd:2f:67:95:f1:0b:8d:d9:4d:81:05:d8:05:
                    8c:39:50:99:fc:0b:9b:1a:4f:36:9a:60:e8:50:ab:
                    01:21:be:51:df:8b:20:11:6c:7b:fb:0a:76:8b:39:
                    18:7d:53:69:65:4b:55:f6:f1:d5:84:4f:4d:40:51:
                    98:17:35:b1:2a:98:8f:ac:c0:a3:b4:c6:df:74:2a:
                    13:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4F:37:8A:51:04:ED:DF:C2:E8:21:F3:E7:05:61:49:F9:54:E5:3A
            X509v3 Authority Key Identifier:
                keyid:B2:76:3D:50:4C:5A:F9:FB:75:D9:AE:B6:07:24:22:F8:7A:1A:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:8b:64:49:31:b8:b0:69:12:c0:c5:a3:65:f4:08:e9:02:9d:
         f3:07:61:ce:72:8d:28:0b:73:48:cf:73:03:24:56:80:d3:85:
         a8:4f:bd:25:b9:90:aa:d6:52:5f:ab:9c:9c:bd:c5:7a:54:e2:
         4f:a6:43:35:aa:4c:04:b0:3d:af:66:39:8e:63:21:7e:50:b5:
         14:e9:89:1c:a7:0c:8d:b7:1d:d4:1c:2d:df:68:fb:bd:ef:80:
         61:cf:ab:cf:a6:7c:2b:55:37:fb:2b:4c:ee:f6:1d:0c:c7:71:
         b8:4e:d1:b9:57:f1:cf:f8:f0:e3:d3:d4:ec:70:cc:d1:3a:35:
         50:be:df:19:91:c5:1d:db:18:ad:98:df:d9:67:a5:af:f6:16:
         63:65:60:d1:a0:11:17:1d:09:ed:3b:bc:42:e9:d0:a0:19:e1:
         de:7c:cd:eb:98:c4:9f:52:97:aa:da:f0:02:4f:52:45:fd:f9:
         37:ef:0b:5f:c8:4c:20:5e:14:98:ab:90:d2:a6:63:73:e0:e6:
         58:50:b3:f0:6f:7d:c6:20:d0:1d:af:7b:f3:77:e3:81:fb:7e:
         44:fb:47:dc:14:53:0d:84:9f:70:c1:de:2a:f1:0d:e7:a4:28:
         61:01:3b:f8:48:9a:6a:4b:fb:8f:f2:f3:c0:ae:7d:e5:01:fc:
         fb:3f:a0:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:25:35 2025 by rpki-client on console.sobornost.net