Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
File:                     QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json)
Hash identifier:          //JbyTjdF7+a3fkJ1SlPbVasMJYiePVK4gyEdaBWYBc=
Subject key identifier:   7E:08:5F:5B:10:25:B8:5B:2D:D4:DD:3D:E9:AE:B7:C8:05:F6:7E:F4
Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Certificate issuer:       /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Certificate serial:       0E33
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
Manifest number:          0E32
Signing time:             Fri 25 Apr 2025 00:53:03 +0000
Manifest this update:     Fri 25 Apr 2025 00:53:03 +0000
Manifest next update:     Sun 27 Apr 2025 00:53:03 +0000
Files and hashes:         1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: Gl9T82S6OBbWSbsSINJPl3dwbdmP5G6qiUWj6KVDHmU=)
                          2: 36DF01DC39AA11E59B5A3D32F8AEA228.roa (hash: KB4karfPnV5f0+SNVM+1NuYPsr7TtEZ+5kiyQgRzqTE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3635 (0xe33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FFD1EAF, serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
        Validity
            Not Before: Apr 25 00:53:03 2025 GMT
            Not After : Apr 27 00:53:03 2025 GMT
        Subject: CN=680adcef-45e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:36:61:89:e7:d4:41:ae:53:9a:82:37:a3:
                    a5:d8:93:73:55:42:91:f8:c9:b1:20:e4:0d:ef:95:
                    cf:e8:98:9c:20:b4:41:ca:b3:34:7c:8e:79:85:7f:
                    22:20:65:fc:a9:1b:14:a0:7d:bd:d8:8d:71:6f:98:
                    90:a9:9a:0d:e3:c9:e8:7c:db:ef:96:e5:bb:52:ea:
                    94:84:68:21:f3:54:34:02:06:7e:72:0b:f5:4a:9d:
                    06:96:6c:7b:13:9f:f6:00:d0:f7:3f:a2:56:a3:1f:
                    7c:c7:54:21:ae:19:fc:95:83:6d:40:e3:5a:1b:12:
                    07:70:31:ba:a0:17:9a:a8:1e:74:30:5e:e5:b1:da:
                    82:f3:70:91:ca:b9:c8:b2:c1:15:3e:72:0b:a2:43:
                    1f:d9:0d:f8:bb:4a:a4:9c:27:2f:08:75:36:24:68:
                    a7:9b:7d:5a:a2:01:17:a0:b4:4b:90:ec:9e:8c:02:
                    e2:f2:3d:d7:96:58:b7:83:fc:bb:e8:1e:84:55:96:
                    af:1e:7b:d0:47:98:69:df:e8:8d:63:c1:a9:c6:97:
                    15:a1:f3:80:a3:8d:4d:28:07:13:82:4f:f9:c3:a3:
                    09:f3:c6:7c:ab:42:67:97:17:cf:0f:d3:22:61:ba:
                    2b:f1:e5:63:08:35:99:07:78:99:c2:23:b0:a7:6b:
                    47:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:08:5F:5B:10:25:B8:5B:2D:D4:DD:3D:E9:AE:B7:C8:05:F6:7E:F4
            X509v3 Authority Key Identifier:
                keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:99:a5:06:a6:2f:b3:b3:f6:23:82:b0:60:e6:44:b3:f6:4b:
         32:f8:9a:92:22:ec:14:9d:61:9b:5e:b5:c8:db:fb:56:21:ed:
         64:c8:10:ae:b2:5e:fc:d2:cc:f7:00:2e:5e:d3:00:55:9a:7d:
         e6:0f:6c:85:93:85:69:51:f8:a1:da:db:72:aa:96:62:e7:f1:
         fe:a0:25:9e:44:6a:05:75:d7:75:17:45:0a:a0:45:3d:95:45:
         d5:dc:b3:d1:6f:5b:dd:d7:4a:46:50:83:7d:e4:2d:74:b7:a0:
         27:85:de:b0:47:f6:3d:03:7d:9d:23:e2:bd:6e:0e:5d:b6:41:
         b5:1d:9b:94:16:2a:c0:82:26:43:1a:7f:f3:6e:7b:d4:ae:d4:
         dc:f5:11:66:25:e1:2e:58:f9:8c:84:06:0f:11:78:c3:21:0e:
         3a:9d:66:cf:f4:c9:46:3a:f7:16:77:28:b6:c0:b3:00:77:b0:
         b8:c5:10:cc:82:d7:b3:81:c8:2b:31:9c:44:4f:67:11:64:d3:
         59:18:b2:0e:51:0d:aa:3d:47:17:3a:72:ef:47:f2:0a:14:1b:
         19:ca:81:75:61:e5:6e:fe:47:79:02:96:af:8e:58:90:f6:0a:
         37:93:24:d5:6e:83:15:ed:4a:ee:36:1e:41:c0:8f:59:05:b1:
         05:a6:4e:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:23 2025 by rpki-client on console.sobornost.net