Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
File:                     hursQpTfunBFqIZC6d_EVRs0wlU.mft (raw, json)
Hash identifier:          gh2bg5tAq7L6fdFvIwlOtmOHDBXeZ/xBSJ7vRAPUozo=
Subject key identifier:   38:05:21:5D:17:18:B4:ED:BB:DB:DC:48:A6:62:28:08:62:C2:44:B1
Authority key identifier: 86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55
Certificate issuer:       /CN=F368588EAR/serialNumber=86EAEC4294DFBA7045A88642E9DFC4551B34C255
Certificate serial:       0852
Authority info access:    rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
Manifest number:          0845
Signing time:             Sun 06 Apr 2025 01:19:14 +0000
Manifest this update:     Sun 06 Apr 2025 01:19:14 +0000
Manifest next update:     Tue 08 Apr 2025 01:19:14 +0000
Files and hashes:         1: hursQpTfunBFqIZC6d_EVRs0wlU.crl (hash: rs06YK627MP/GQs9TRSuXxUoY28/GHSeHMS9d+uD3jA=)
                          2: 79F59A648E6611EBBC39876CF8AEA228.roa (hash: 23hasVT7STzhojJmCnzWqlWjP/WJmmjWHiydYYblzCA=)
                          3: E3CC92B2AB1811EF86C7F479762E951A.roa (hash: TFsOPlhZpWRBJYJKBHhEjMZSgDMfyDlwRle6Xdkgtls=)
                          4: D2F1A5928E6411EBBC748B6AF8AEA228.roa (hash: 6qK0G9UDQpIN5VB9HAdPfGyjLR6yeZQoNvVlRbOIFCk=)
                          5: 3F03153416A911EFA217550F017001B1.roa (hash: 9/pgGRkm3NQotfShqK62IqS8JeOjMdrxiB5oVZ+s0Go=)
                          6: D1CB5D328E6611EB8E50DC6CF8AEA228.roa (hash: Uj+iO4kxeUkmUkuThovmvQFW6hvGQ4iYoLoY2th9wkk=)
                          7: 2A782EBC8E6511EBBA24DF6AF8AEA228.roa (hash: yGZ6SnXS1RSRZj/wE1QJtTRTtRj6tcY4vFXhT5iHrl4=)
                          8: 97E367AE8E6611EB8103A46CF8AEA228.roa (hash: e2XQQBe/+KWcM7cIO5S9ibGFcKgcrbxG4dVNAASJpqI=)
                          9: A15549308E6411EBA8883A6AF8AEA228.roa (hash: rMD9Bdkw1CGzfMpgpTrn426f5jHiNnuNNjjZcqe2kgo=)
                          10: 028AE0848E6511EB9F7DB66AF8AEA228.roa (hash: 0qPx7Dwu8RjdR4H81YDiJJ6f5FFJ4STm+gTVCcpfY+w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
                          rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 08 Apr 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2130 (0x852)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368588EAR
        Validity
            Not Before: Apr  6 01:19:14 2025 GMT
            Not After : Apr  8 01:19:14 2025 GMT
        Subject: CN=67f1d692-2ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:98:cf:23:5f:54:2e:47:7d:7b:d1:08:c6:
                    b6:e3:22:c7:d0:9b:a1:55:4f:04:b0:e4:25:1c:ef:
                    af:f5:8f:8c:36:40:e3:51:45:ad:f3:a6:41:62:91:
                    52:ae:e8:bb:55:bf:f9:92:e8:7b:99:48:1f:5d:79:
                    ae:ac:15:78:b4:3a:ef:64:b2:af:a9:81:cb:8d:f9:
                    4a:11:8f:b8:33:52:43:d0:d2:c3:df:bf:31:79:2c:
                    62:a1:9d:f1:0d:e1:69:9c:24:a6:a9:13:8a:2e:b9:
                    3e:48:70:90:86:ae:16:68:3f:fa:fb:57:90:dc:8b:
                    ef:6c:a0:36:cc:b6:78:77:f0:92:0e:2c:5a:f7:ba:
                    a6:77:6d:fc:92:6a:62:70:44:69:f2:ed:bb:8e:e5:
                    23:c1:54:67:3b:a5:c6:b6:de:f4:b9:db:c3:f7:57:
                    42:38:8c:6a:78:c2:e7:1c:0f:7d:45:75:0a:c5:0a:
                    b2:bd:95:30:86:2b:7b:ae:2a:7b:6c:7a:b3:f5:62:
                    fe:a4:20:c9:0a:23:91:fe:cb:14:34:60:16:59:68:
                    6c:02:04:b8:e0:73:46:83:5e:c4:2d:ee:27:de:c3:
                    19:ff:b2:b9:c4:c9:50:ef:08:9d:f5:dc:8f:bd:25:
                    19:ce:8e:b6:41:4f:95:8b:38:74:a4:ce:1f:04:51:
                    5a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:05:21:5D:17:18:B4:ED:BB:DB:DC:48:A6:62:28:08:62:C2:44:B1
            X509v3 Authority Key Identifier:
                keyid:86:EA:EC:42:94:DF:BA:70:45:A8:86:42:E9:DF:C4:55:1B:34:C2:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/hursQpTfunBFqIZC6d_EVRs0wlU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/B5F42540CB2F11E9A6292927F8AEA228/hursQpTfunBFqIZC6d_EVRs0wlU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:98:0e:20:d1:d9:bc:21:fb:4a:1a:ae:01:75:99:97:1f:72:
         e2:61:b0:19:c2:a2:dc:a5:df:f4:25:37:0d:7f:9b:c1:f2:9f:
         68:47:bc:11:8c:89:e1:da:d7:5d:01:ac:0e:a5:4b:4b:39:d9:
         79:50:62:a1:79:23:9a:4d:0b:7e:c9:cc:ec:88:17:89:d3:d1:
         96:d8:10:a9:75:c3:01:b9:3d:04:00:4f:1d:3d:ad:3e:87:75:
         5b:9b:83:f2:e2:d8:fd:cf:1f:72:5b:84:f7:17:67:04:2f:91:
         b8:b1:52:b2:37:22:2e:57:8d:ae:14:5d:f7:8d:bc:7d:73:8f:
         74:60:80:ec:75:f1:5c:e6:69:2b:a8:73:14:9e:cf:ff:10:f3:
         7b:a0:ed:1e:13:91:30:54:fe:e5:4e:44:43:a2:96:75:63:ec:
         dc:c3:7a:e3:b0:86:fa:14:9d:01:43:11:1f:46:c5:85:b9:27:
         97:d1:d3:92:4f:8b:dd:67:5e:c1:b4:05:ec:2a:d3:10:1b:cf:
         81:56:d3:fe:72:cf:9c:82:7a:a2:c5:6e:6d:58:27:21:0e:7f:
         2d:5c:32:35:fe:79:b4:70:cd:e0:87:be:5b:91:80:55:84:94:
         ad:72:53:d1:04:de:07:3c:e5:fb:f4:86:d4:4f:8c:ac:af:9b:
         74:1c:9d:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:18:32 2025 by rpki-client