Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft
File:                     ePCj07rEmhSIR2PZN9PKGSCVOxU.mft (raw, json)
Hash identifier:          ItKgk3dXu9t4JQLgHpi4GqjVAY0/ye+36lPjo+XtoKw=
Subject key identifier:   09:D3:1D:AB:7A:74:80:B7:9E:21:75:5E:1C:10:89:78:47:7F:DB:F5
Authority key identifier: 78:F0:A3:D3:BA:C4:9A:14:88:47:63:D9:37:D3:CA:19:20:95:3B:15
Certificate issuer:       /CN=F36FF74CAF/serialNumber=78F0A3D3BAC49A14884763D937D3CA1920953B15
Certificate serial:       0157
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ePCj07rEmhSIR2PZN9PKGSCVOxU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft
Manifest number:          0154
Signing time:             Sat 26 Apr 2025 04:36:41 +0000
Manifest this update:     Sat 26 Apr 2025 04:36:41 +0000
Manifest next update:     Mon 28 Apr 2025 04:36:41 +0000
Files and hashes:         1: ePCj07rEmhSIR2PZN9PKGSCVOxU.crl (hash: 3RM10Iyg/kFX779yMQmKeldxYsL6OrKgTUglPoZ9fqU=)
                          2: 6883EC322C8211EF82CEC0ED7CDC24C2.roa (hash: Al+25UVZ/TGZulMqlsc3cCdFsOzq/5m8B34hb4F8eiM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ePCj07rEmhSIR2PZN9PKGSCVOxU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FF74CAF, serialNumber=78F0A3D3BAC49A14884763D937D3CA1920953B15
        Validity
            Not Before: Apr 26 04:36:41 2025 GMT
            Not After : Apr 28 04:36:41 2025 GMT
        Subject: CN=680c62d9-23ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:c2:f8:97:d0:a5:d2:1c:48:2e:f1:e4:ff:b3:
                    05:0f:22:b7:28:79:9d:39:97:3e:28:db:b5:56:6a:
                    b8:ad:b4:51:e3:a9:9b:03:f9:32:6c:3d:a4:4f:24:
                    1e:a5:3e:aa:b2:5c:26:16:a7:35:86:7b:16:c0:ec:
                    47:d8:c5:18:d8:06:78:7f:c6:43:2f:f8:ee:d4:66:
                    12:38:00:0a:60:62:02:5f:1c:ac:ef:89:97:88:b1:
                    f0:f0:46:ee:0e:85:ae:aa:bf:8b:45:47:49:25:b5:
                    e9:89:0d:6c:8e:a3:b9:af:8b:f2:8e:de:10:2d:86:
                    27:3a:1f:05:bf:d5:16:2e:9e:ec:eb:f6:f3:a2:fe:
                    c3:21:8c:bb:3c:25:c4:9c:4f:a2:35:5f:9a:a0:51:
                    f6:85:5e:46:c6:15:d7:05:0f:7e:c6:37:1a:f8:fb:
                    90:14:f2:5b:86:7c:bc:c1:96:53:18:cd:13:cf:17:
                    38:7d:20:56:0f:a6:ea:62:23:7d:22:2e:8f:49:8a:
                    f6:ea:03:bc:b4:5d:c7:85:af:ab:95:d0:24:83:65:
                    bd:e6:71:87:c9:27:7c:6f:5a:0b:38:83:23:10:3c:
                    c3:cf:36:63:53:c7:f7:6d:dc:21:5a:fa:4a:f5:69:
                    ac:9f:71:36:7c:6a:02:2c:29:b7:6b:88:c4:28:ad:
                    f8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:D3:1D:AB:7A:74:80:B7:9E:21:75:5E:1C:10:89:78:47:7F:DB:F5
            X509v3 Authority Key Identifier:
                keyid:78:F0:A3:D3:BA:C4:9A:14:88:47:63:D9:37:D3:CA:19:20:95:3B:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ePCj07rEmhSIR2PZN9PKGSCVOxU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF74C/709E8022289E11EF88799A067DDC24C2/ePCj07rEmhSIR2PZN9PKGSCVOxU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:82:82:d2:6e:cb:5e:65:f8:ff:ec:ce:60:22:8c:67:2d:6c:
         c3:f9:df:7f:71:53:f6:42:da:a7:70:b9:8d:d0:33:d1:68:fa:
         2d:da:1c:40:87:02:2c:aa:38:b2:ad:43:da:5e:f2:20:3b:a2:
         0a:63:8f:5f:1a:ec:18:a0:e3:37:23:b5:bf:06:dc:bb:be:85:
         40:2a:f0:d0:e6:79:61:a7:e2:d1:36:ff:69:1e:97:17:ff:2b:
         47:a4:26:fe:a7:74:5e:06:58:7c:e8:bd:46:33:0c:91:c4:a9:
         b4:d7:48:65:fe:c0:fb:ec:73:3a:ad:5d:14:f1:13:82:ce:0f:
         9f:a2:51:29:d0:81:19:5d:2a:5a:3f:d0:e4:0c:f6:9d:35:a7:
         e5:c8:91:c6:4c:84:d4:cf:5c:65:85:49:ce:01:b6:f7:64:2b:
         42:a3:78:ff:19:77:66:87:4a:2c:80:b0:5d:8a:c6:d2:af:b0:
         0a:1f:58:dd:35:66:3e:9e:1d:5b:8a:58:a5:1e:9a:f3:e5:b7:
         85:a6:72:71:8b:bf:4f:77:c1:49:21:30:46:3a:6a:c2:c1:03:
         90:65:31:18:f8:86:a6:71:1f:f2:6e:67:fc:4b:a8:a9:e1:f8:
         6b:76:c5:e8:ea:e2:06:f2:8c:b7:1d:24:e5:c3:b0:aa:37:3c:
         d1:d8:43:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:51:44 2025 by rpki-client on console.sobornost.net