Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
File:                     MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft (raw, json)
Hash identifier:          IL6wpObk1+949tHesiQvvc6kTcHoR/pF6bq8BqjfDPo=
Subject key identifier:   F9:25:43:97:C7:46:23:CD:B6:E1:51:6A:2B:6C:1F:1D:35:51:2F:80
Authority key identifier: 33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74
Certificate issuer:       /CN=F3691854AR/serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
Certificate serial:       0236
Authority info access:    rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
Manifest number:          0235
Signing time:             Sun 20 Apr 2025 04:04:05 +0000
Manifest this update:     Sun 20 Apr 2025 04:04:04 +0000
Manifest next update:     Tue 22 Apr 2025 04:04:04 +0000
Files and hashes:         1: MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl (hash: wFBOwF9laaptN8c/lc1zCMuHBv8aS3Q/Uh2HTcuKU18=)
                          2: 2BBC033C71AE11EEA2D2E5354AD9E6FC.roa (hash: 2uI0q3ii9m0usdGfquktABEqM6p1z0wsDQZ+3pXcYh4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
                          rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Apr 2025 04:04:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3691854AR, serialNumber=33084FAF933C724D32E6DFA79F15CD16F3D82E74
        Validity
            Not Before: Apr 20 04:04:04 2025 GMT
            Not After : Apr 22 04:04:04 2025 GMT
        Subject: CN=68047234-faa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:89:54:d3:0c:e5:90:a0:cc:94:73:7d:76:10:
                    e4:fe:9f:a6:c2:a3:ed:18:fe:25:c6:80:28:ac:d9:
                    29:c6:0f:37:78:10:b3:f8:de:bb:fe:ba:13:b5:bb:
                    77:52:a2:f8:33:24:e9:3d:1b:b7:9f:b6:1a:77:cf:
                    92:46:72:ca:7b:54:65:8b:88:03:ad:75:4a:f8:08:
                    fe:9e:04:12:c0:c9:8c:91:24:5b:6d:f8:1d:bc:e8:
                    30:91:ad:88:2f:db:74:ee:b6:94:2c:a8:11:cb:78:
                    e2:dd:d3:43:ca:cb:11:09:6c:04:78:24:dc:30:48:
                    b9:ad:e3:2e:b0:69:fd:62:f2:79:3e:42:57:9e:41:
                    e1:c2:b0:55:56:81:70:6c:78:8e:6b:3a:61:52:bf:
                    88:1f:d9:45:b1:3d:a1:2c:95:a5:b9:ab:8c:13:b2:
                    a9:91:b6:43:53:87:86:f8:a2:9a:ff:e8:75:79:11:
                    95:3b:99:39:ad:05:46:1f:64:00:59:a8:ae:71:d3:
                    85:0b:85:7f:02:ee:59:fa:3c:60:aa:30:c1:d0:9f:
                    96:4a:4c:73:67:65:fc:30:39:1f:77:84:0b:1f:db:
                    58:0d:3e:d8:42:d0:ad:5d:c6:26:45:0d:34:bd:22:
                    d2:9c:a8:27:1f:36:52:82:f0:af:c0:e5:74:5a:d8:
                    10:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:25:43:97:C7:46:23:CD:B6:E1:51:6A:2B:6C:1F:1D:35:51:2F:80
            X509v3 Authority Key Identifier:
                keyid:33:08:4F:AF:93:3C:72:4D:32:E6:DF:A7:9F:15:CD:16:F3:D8:2E:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3691854/70C7E0FA71AD11EE8C719E334AD9E6FC/MwhPr5M8ck0y5t-nnxXNFvPYLnQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:1d:42:58:bc:a6:76:39:94:fd:87:d7:b2:e7:31:b0:53:88:
         6a:77:31:1f:41:16:bc:30:11:6b:18:93:56:98:01:0a:fd:8c:
         2d:8b:a1:5b:71:57:a6:37:e2:56:e1:10:f8:14:96:31:ec:a0:
         34:53:fa:90:64:2e:74:fb:f0:14:6e:96:76:fb:94:df:7b:ea:
         3b:6d:2c:93:90:4d:6c:fa:f8:fb:87:d8:73:d3:e5:91:d4:e0:
         b8:f4:5c:64:6c:b1:c4:2f:07:1f:01:de:12:7c:de:48:80:da:
         e7:05:32:5f:4e:76:4a:81:2d:2b:a9:23:d4:fb:1f:35:89:be:
         9d:5d:e7:a4:01:e9:f8:d7:af:69:a4:7d:eb:ed:40:e0:fa:42:
         35:aa:70:86:ad:a6:fc:6b:f4:31:ef:53:ae:42:f3:6b:9d:0a:
         42:f7:6d:3c:92:19:67:53:9a:cd:ee:97:5d:0c:a5:52:0d:c3:
         c2:7a:95:4a:71:1a:c5:05:9e:60:9e:c4:7a:e1:53:fc:30:c0:
         7a:24:72:30:16:75:03:94:21:2a:0a:a3:3e:8a:c0:68:ee:7e:
         7f:a7:d7:21:0c:70:b6:36:47:24:7c:dd:5a:c4:0d:3e:89:66:
         42:2a:77:b2:12:63:f9:9e:b0:eb:e0:bd:ff:74:d5:3d:a7:2b:
         37:55:2f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:51 2025 by rpki-client