Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
File:                     DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft (raw, json)
Hash identifier:          yKNRxHu068QEZnv38bO3P+NO63cfQXgMGKrSpBQ1LT4=
Subject key identifier:   47:B7:D7:46:60:7A:5F:9D:87:DA:8B:E4:6A:0D:1D:BC:09:00:71:6E
Authority key identifier: 0D:27:39:4E:9C:DE:92:15:5E:45:99:D6:84:10:99:2D:70:8B:F2:44
Certificate issuer:       /CN=F364C81DAR/serialNumber=0D27394E9CDE92155E4599D68410992D708BF244
Certificate serial:       08BA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
Manifest number:          08B3
Signing time:             Thu 01 May 2025 01:32:29 +0000
Manifest this update:     Thu 01 May 2025 01:32:28 +0000
Manifest next update:     Sat 03 May 2025 01:32:28 +0000
Files and hashes:         1: DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl (hash: QM2v8CEURYCJHhykUvXMCz2TVFqvYCXxQFfkgiqPnfU=)
                          2: 74AA29FC3E9A11EFB1E37554762E951A.roa (hash: WV585CADX8C6BW4JHivJOJddO/5hxxRDI5ze3ORaNIk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
                          rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 03 May 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2234 (0x8ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364C81DAR, serialNumber=0D27394E9CDE92155E4599D68410992D708BF244
        Validity
            Not Before: May  1 01:32:28 2025 GMT
            Not After : May  3 01:32:28 2025 GMT
        Subject: CN=6812cf2d-df90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1a:93:11:6a:7e:69:41:c1:77:91:c1:7a:fe:
                    44:d9:91:ec:e4:dc:48:e6:d8:67:ca:e0:18:c6:4a:
                    1a:a0:4d:0f:f1:25:f5:2a:d8:ef:7d:46:7f:bf:43:
                    54:4b:03:4f:79:fb:92:a9:b9:56:60:28:43:5d:4d:
                    30:bf:53:ed:4d:01:db:2b:70:b2:25:d5:f0:78:10:
                    b4:83:37:c4:44:80:23:fa:26:8c:78:6f:e4:74:b7:
                    a6:70:2b:3e:b1:38:e3:90:82:25:f3:2f:39:37:ed:
                    e1:29:f0:8d:84:7c:59:73:7f:f6:e2:9a:5f:98:d0:
                    13:6d:19:c2:31:18:b3:9c:fa:fb:02:c2:0b:a6:c1:
                    80:36:d4:50:a5:1d:1d:17:1b:07:45:d8:c9:21:75:
                    b8:ab:b8:32:1d:ae:b6:a2:3c:d9:27:e2:f7:d4:b7:
                    d4:0d:d0:17:51:83:3e:3b:0d:11:86:f9:d8:23:0f:
                    89:6d:f2:bd:7f:77:57:28:c3:b8:da:3e:6a:2d:bb:
                    55:51:af:71:35:26:78:2c:eb:0a:29:a5:cf:57:90:
                    ec:1f:ce:cd:64:7e:a4:db:41:d4:45:c1:17:fd:4c:
                    b8:d1:e6:89:55:65:94:11:d7:58:82:3b:8f:d5:11:
                    c8:35:ca:ef:a8:21:fe:a7:23:20:f6:e8:a5:ab:8b:
                    99:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B7:D7:46:60:7A:5F:9D:87:DA:8B:E4:6A:0D:1D:BC:09:00:71:6E
            X509v3 Authority Key Identifier:
                keyid:0D:27:39:4E:9C:DE:92:15:5E:45:99:D6:84:10:99:2D:70:8B:F2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DSc5TpzekhVeRZnWhBCZLXCL8kQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C81D/57069ECC890E11E98E15F062F8AEA228/DSc5TpzekhVeRZnWhBCZLXCL8kQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:28:8f:60:ba:e5:dc:43:39:69:e2:94:65:38:26:e4:50:8c:
         c8:9c:90:cd:98:55:b8:74:87:f5:41:fe:f6:64:c8:14:20:08:
         38:95:3e:28:a4:46:95:65:76:4c:f4:e5:3a:28:47:37:4b:91:
         19:c6:ae:e2:7c:26:a5:2a:1d:93:88:c3:d8:7d:b3:9d:c4:70:
         41:f8:ad:3c:e8:3d:69:8f:d5:dd:3b:23:a9:b1:25:9b:c0:56:
         ee:ef:1e:43:27:c9:a2:59:f7:80:dd:b3:25:51:54:96:3c:d2:
         95:8d:83:0e:32:5e:71:1c:f0:4d:31:15:b4:6b:7b:b9:3e:f6:
         3d:70:2c:90:e9:f5:ba:09:b6:38:83:7f:1c:5f:f0:99:81:bc:
         21:81:da:3a:5d:97:90:40:59:81:f6:95:f3:5c:ec:37:d2:18:
         b7:64:07:be:af:0c:fa:5c:a7:f2:04:12:19:ad:da:fc:de:9c:
         f1:03:33:44:50:73:4b:68:63:2f:3e:04:c2:12:7c:07:1e:82:
         d2:47:3e:e6:df:11:68:6e:4d:be:62:60:4d:dc:4d:10:d0:ad:
         43:bd:c5:e7:4b:9c:7a:cd:97:f0:d3:58:84:05:51:87:89:e7:
         bb:ef:32:6b:99:e7:80:a5:6d:e2:6c:19:2d:2b:93:b6:d9:04:
         35:d7:41:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 19:00:29 2025 by rpki-client