Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/BuG8jS00FbJ5CfKppUQcUPdQCfc.mft
File:                     BuG8jS00FbJ5CfKppUQcUPdQCfc.mft (raw, json)
Hash identifier:          PNGH63OeyZeMTaWnd65FqyHpIHZ82vfjA3vqrmfE0R0=
Subject key identifier:   A1:42:71:C6:31:92:8C:22:E4:A8:5A:D4:B7:C6:9D:31:30:34:6F:53
Authority key identifier: 06:E1:BC:8D:2D:34:15:B2:79:09:F2:A9:A5:44:1C:50:F7:50:09:F7
Certificate issuer:       /CN=F36FDE36AF/serialNumber=06E1BC8D2D3415B27909F2A9A5441C50F75009F7
Certificate serial:       0709
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BuG8jS00FbJ5CfKppUQcUPdQCfc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/BuG8jS00FbJ5CfKppUQcUPdQCfc.mft
Manifest number:          0708
Signing time:             Mon 28 Apr 2025 02:00:13 +0000
Manifest this update:     Mon 28 Apr 2025 02:00:12 +0000
Manifest next update:     Wed 30 Apr 2025 02:00:12 +0000
Files and hashes:         1: BuG8jS00FbJ5CfKppUQcUPdQCfc.crl (hash: awS3U1PP2ErjAYxXqu8eGWpTj/rnJ7/D9HI0rMHovd4=)
                          2: EF3DCDA6C11F11EAAC3FD985F8AEA228.roa (hash: BzM1IEUZwfKoV+6np+K+8w9pchQT/TrD2qSvldsz9X0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/BuG8jS00FbJ5CfKppUQcUPdQCfc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/BuG8jS00FbJ5CfKppUQcUPdQCfc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BuG8jS00FbJ5CfKppUQcUPdQCfc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1801 (0x709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDE36AF, serialNumber=06E1BC8D2D3415B27909F2A9A5441C50F75009F7
        Validity
            Not Before: Apr 28 02:00:12 2025 GMT
            Not After : Apr 30 02:00:12 2025 GMT
        Subject: CN=680ee12d-5803
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:51:a8:f6:4b:91:78:f7:66:53:ed:7a:3f:78:
                    91:0c:61:4d:24:f7:b2:fb:f7:b6:d7:7b:24:f3:e5:
                    da:97:87:aa:76:7a:c1:f4:09:ad:1e:3b:bc:99:bb:
                    53:a9:15:af:03:be:2a:2f:ed:30:d3:b9:2c:6b:37:
                    c9:b4:a7:3f:c7:4c:fa:1c:2d:cd:75:8b:a0:a8:be:
                    2b:c2:1e:be:8d:02:f3:2b:a3:6f:d1:f3:29:c7:cc:
                    2d:e8:3d:f5:f7:78:5d:c3:87:52:3a:84:7c:a3:8e:
                    65:74:43:89:49:81:4a:2d:fa:1a:a7:d0:2f:a5:33:
                    63:67:17:d6:c9:e0:77:3d:a2:b4:c5:1f:86:77:19:
                    40:c7:5d:ea:e7:18:d6:0a:74:92:fd:e1:38:f1:c5:
                    1f:c0:ef:4b:4a:81:f8:85:5b:d6:81:71:0d:0a:8f:
                    50:2f:05:a9:31:b9:e7:2e:c7:b1:03:49:49:13:10:
                    5b:fc:a7:56:80:49:4d:af:5d:be:4d:9a:2e:8d:0a:
                    f3:be:ab:f6:c4:d7:2a:f8:03:a3:e9:b0:67:2f:0d:
                    c7:5c:a6:59:a8:f1:97:15:54:8f:0f:ae:06:b9:c7:
                    f7:b5:76:b2:12:a1:55:58:5b:a7:71:b0:6a:43:fd:
                    4a:0a:9c:31:cf:b9:53:61:6a:03:0f:d5:6b:c4:32:
                    15:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:42:71:C6:31:92:8C:22:E4:A8:5A:D4:B7:C6:9D:31:30:34:6F:53
            X509v3 Authority Key Identifier:
                keyid:06:E1:BC:8D:2D:34:15:B2:79:09:F2:A9:A5:44:1C:50:F7:50:09:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/BuG8jS00FbJ5CfKppUQcUPdQCfc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BuG8jS00FbJ5CfKppUQcUPdQCfc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDE36/76CDA4B8C11F11EA93036785F8AEA228/BuG8jS00FbJ5CfKppUQcUPdQCfc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:13:ec:ea:b3:fe:91:73:1b:bc:9d:2d:4e:4e:a7:78:f8:96:
         dc:fe:11:d1:57:5d:7a:00:fb:4a:b7:35:e5:07:b4:4e:33:d1:
         dd:20:8e:48:7f:d8:11:67:36:16:80:ef:d4:aa:a4:31:02:19:
         a3:95:09:dd:50:16:d6:e0:35:84:a1:dd:87:9a:b5:03:b2:f4:
         81:2c:ac:d0:85:62:59:a4:34:8b:60:51:52:90:84:0b:1c:ce:
         fb:d3:3c:ef:4f:8c:9c:68:bc:2b:88:75:38:86:a7:7b:31:d3:
         66:55:f2:13:4e:a6:94:a6:55:04:b4:74:64:4b:02:7a:46:8d:
         dc:13:ad:03:37:92:46:0e:6a:3d:a4:b8:b0:bd:aa:08:57:73:
         24:b9:77:48:76:86:e3:70:ae:22:8e:07:88:c5:11:23:44:84:
         93:fc:75:85:28:31:69:8c:6a:d5:02:73:29:f3:8b:04:f8:37:
         02:0f:81:da:9d:bb:0a:67:9c:c9:bd:d0:db:b0:fc:36:0a:6c:
         c0:fa:1e:b1:75:8d:06:66:6e:9b:7e:43:3f:42:1f:7f:6b:7c:
         3f:d0:f3:43:c7:22:7d:90:ce:76:e4:d5:41:1e:f1:81:34:65:
         83:22:cf:e7:f1:7a:dd:b1:21:de:43:6e:e4:32:a9:f4:18:e1:
         35:eb:0d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:06:42 2025 by rpki-client on console.sobornost.net