Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
File:                     9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft (raw, json)
Hash identifier:          5RsocQ8za0PAxdIohtqjetb5HvNKqMgUPuHDo8gMvAs=
Subject key identifier:   DA:43:BC:CF:48:94:24:5C:8F:0D:51:22:DD:E9:5D:E0:9A:6E:C6:ED
Authority key identifier: F6:87:1E:38:9A:EA:43:DF:B5:31:D1:4D:4B:F6:C0:11:D3:A6:D4:80
Certificate issuer:       /CN=F361D299AR/serialNumber=F6871E389AEA43DFB531D14D4BF6C011D3A6D480
Certificate serial:       0C35
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
Manifest number:          0C46
Signing time:             Mon 28 Apr 2025 01:09:08 +0000
Manifest this update:     Mon 28 Apr 2025 01:09:07 +0000
Manifest next update:     Wed 30 Apr 2025 01:09:07 +0000
Files and hashes:         1: 9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl (hash: evq80I299IdIFHPc+cqIdonwBxEIsSjC2OEvlGLVka8=)
                          2: 9602703EF4F511EFB099CDB5762E951A.roa (hash: qISfxBRfXwveVBfmScYlezjIVFsZHVW0rkfxNlst1oA=)
                          3: 0809CD56F2A511EF9A1CF353762E951A.roa (hash: 4iGumIvcUo97EFB8blys/rxgOUPw+Tx3jCeD20ZEIcg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
                          rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3125 (0xc35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AR, serialNumber=F6871E389AEA43DFB531D14D4BF6C011D3A6D480
        Validity
            Not Before: Apr 28 01:09:07 2025 GMT
            Not After : Apr 30 01:09:07 2025 GMT
        Subject: CN=680ed533-94f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:25:4d:3f:dc:08:45:cb:27:d5:6b:c9:c5:7d:
                    2c:d7:9a:16:34:91:09:89:cc:f5:84:50:b0:33:96:
                    8e:15:d3:69:56:e7:f6:32:f2:4a:91:68:12:c7:6a:
                    db:05:2c:b0:a5:d4:c9:0f:94:03:90:b7:d0:7c:6c:
                    a3:09:f1:0c:dc:cd:a7:82:ed:ac:a0:31:ce:14:6c:
                    d1:c8:b6:c0:ef:62:31:68:f3:be:ad:23:75:66:4c:
                    4f:e4:2f:43:82:79:bb:6a:d6:7b:da:70:80:ed:c1:
                    c8:43:82:c2:ae:c2:fc:08:4c:31:29:94:1f:e7:dc:
                    bf:82:64:4c:dd:b4:cc:92:9e:8a:6d:a4:a0:0c:9f:
                    a7:16:59:39:e8:e5:17:01:72:5f:30:43:78:57:f4:
                    5d:b3:3c:53:b4:2b:9e:0b:cd:b6:ce:0e:bb:79:01:
                    a3:9a:6c:28:71:04:a7:a7:d7:99:5d:07:70:cd:b2:
                    bb:0c:d4:35:37:5a:5a:fe:b1:6f:d4:9a:2b:8c:f9:
                    3f:82:ef:62:f3:c3:42:dc:ee:41:80:ec:12:ef:a0:
                    9d:bd:2b:d7:c1:18:80:f1:55:8e:d4:d4:22:ca:21:
                    e4:32:7d:e5:33:13:d3:63:90:6a:ba:ef:6f:10:0b:
                    00:a0:ee:0e:7c:c1:62:63:eb:21:92:ec:09:55:f6:
                    ca:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:43:BC:CF:48:94:24:5C:8F:0D:51:22:DD:E9:5D:E0:9A:6E:C6:ED
            X509v3 Authority Key Identifier:
                keyid:F6:87:1E:38:9A:EA:43:DF:B5:31:D1:4D:4B:F6:C0:11:D3:A6:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9oceOJrqQ9-1MdFNS_bAEdOm1IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/9D80DF78C85B11E6B829DA67F8AEA228/9oceOJrqQ9-1MdFNS_bAEdOm1IA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:72:3d:24:3c:8f:74:1e:01:f9:00:6b:c9:d5:1f:ea:d9:d0:
         7d:c4:ee:90:94:15:c1:ca:b4:25:b3:96:cc:a1:82:39:50:35:
         ba:bb:d5:33:71:19:93:fc:34:fe:df:12:f4:87:de:05:cb:4a:
         08:14:50:0e:38:af:b7:a9:85:9a:1c:95:5f:02:c5:bf:aa:c3:
         e1:87:e7:e2:0d:0e:f2:7c:30:ea:e6:2c:4a:a6:dd:4f:0b:ce:
         d1:ae:0f:32:6c:08:1b:cf:4f:1d:34:b3:fc:4e:44:4b:20:c4:
         e4:a6:70:a0:78:f0:d1:b7:3c:78:1f:06:85:c4:fc:31:cc:97:
         52:c8:61:a7:d4:12:75:4e:bf:24:89:6f:52:7d:39:18:6a:08:
         49:08:18:c8:da:77:19:3d:56:a3:26:b7:0f:3d:3f:b0:d0:dc:
         8d:d1:24:ea:88:7c:6a:95:8e:db:03:e0:ae:88:ef:58:7b:24:
         35:80:43:36:20:42:64:bd:75:c1:c3:53:3a:92:11:c9:62:e9:
         a0:0a:49:b8:cc:90:a5:ae:81:d5:4f:8b:e3:22:7e:5f:bb:1d:
         97:93:6d:6f:5f:e5:18:00:c8:9d:6a:27:5d:09:d1:30:57:0a:
         78:7a:0c:ca:93:cb:c0:b4:2a:98:8d:00:82:86:80:8f:04:1a:
         34:6e:b5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:32:46 2025 by rpki-client