Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
File:                     yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft (raw, json)
Hash identifier:          xhm+AvHeg+tbAo3okcb5PTj8HWXPzLRc8w2EefhaVFQ=
Subject key identifier:   A4:B5:24:AF:7B:EC:E9:B8:1C:04:E0:23:60:F4:08:B0:4F:98:31:D5
Authority key identifier: C9:02:40:FC:75:12:AF:A1:03:11:98:70:E2:83:4B:D2:D4:C2:39:C4
Certificate issuer:       /CN=F36FB3EDAF/serialNumber=C90240FC7512AFA103119870E2834BD2D4C239C4
Certificate serial:       03B9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
Manifest number:          03B8
Signing time:             Tue 22 Apr 2025 03:17:14 +0000
Manifest this update:     Tue 22 Apr 2025 03:17:13 +0000
Manifest next update:     Thu 24 Apr 2025 03:17:13 +0000
Files and hashes:         1: yQJA_HUSr6EDEZhw4oNL0tTCOcQ.crl (hash: pahO2Bx2zT0CZUyOeo9JFIYehIyHD/SSPkaz4dGibLA=)
                          2: CBC05E684EC411EDBBC03A8BF1222468.roa (hash: iwEq/fHu2kMxv/0tavD/wLmOmI/Juh/s4dhe4VyEou8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Apr 2025 00:06:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 953 (0x3b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB3EDAF, serialNumber=C90240FC7512AFA103119870E2834BD2D4C239C4
        Validity
            Not Before: Apr 22 03:17:13 2025 GMT
            Not After : Apr 24 03:17:13 2025 GMT
        Subject: CN=68070a3a-ad53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:48:a9:34:d5:0d:75:38:63:9d:09:5d:0e:d7:
                    7b:71:ea:16:1d:5f:b5:e8:64:ad:55:74:78:b1:3c:
                    1b:d8:0a:05:6d:dc:e6:84:a5:3e:b4:86:15:1b:20:
                    cd:ee:64:af:dc:c0:1b:1c:d0:cd:70:6f:18:74:4e:
                    55:05:00:e2:5e:df:00:e8:e4:97:b0:c1:63:28:3a:
                    26:9f:03:2d:cc:ca:d3:18:c9:4f:96:e9:6b:d5:2b:
                    b7:c0:01:e9:64:ba:57:8b:f6:b9:9a:2c:05:ee:4d:
                    60:4b:5e:94:7e:c9:4b:2d:6e:50:ba:15:9a:5c:25:
                    98:17:51:62:01:73:2b:13:05:88:b9:44:f6:df:1d:
                    76:7c:19:d7:5d:58:3c:5f:20:51:e6:f2:d6:02:68:
                    59:71:9d:84:a2:5c:db:f5:64:09:5a:86:49:42:77:
                    00:c6:fb:c8:ff:42:fc:77:64:20:75:8c:ef:ab:86:
                    9d:40:3f:51:11:ae:d4:c0:8f:39:e5:d0:17:3b:b3:
                    20:46:2b:36:5a:cc:0a:67:b7:14:b7:1c:e3:18:03:
                    45:8f:be:a3:dc:de:fd:5a:7c:bb:8c:cd:56:d0:cb:
                    32:1b:f3:c3:f5:28:d4:59:95:ff:82:2a:b9:01:29:
                    3d:02:f4:e6:0e:fb:d9:68:51:87:89:25:b8:2c:e1:
                    19:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B5:24:AF:7B:EC:E9:B8:1C:04:E0:23:60:F4:08:B0:4F:98:31:D5
            X509v3 Authority Key Identifier:
                keyid:C9:02:40:FC:75:12:AF:A1:03:11:98:70:E2:83:4B:D2:D4:C2:39:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB3ED/9024FED24EC311ED888A1488F1222468/yQJA_HUSr6EDEZhw4oNL0tTCOcQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:73:3b:e6:91:8e:e1:75:86:5a:e6:35:10:82:13:5d:77:6b:
         2f:e9:b2:82:87:58:da:00:44:64:4a:d2:e2:44:3b:00:d4:6e:
         74:f7:ca:e0:18:18:b5:bb:ee:22:89:b5:5e:93:e3:aa:67:8a:
         a7:40:28:7c:b9:b1:e4:d4:50:65:f8:49:27:64:5a:b4:b8:7f:
         cc:bd:bb:b4:2b:b0:4c:66:ad:f0:a6:b8:18:b1:a1:39:a5:ae:
         26:6f:0e:29:6e:c9:a5:f9:ed:9a:5d:1f:99:aa:c1:50:c9:97:
         c1:fa:fe:be:24:1c:cf:c0:bd:84:5e:81:6d:4e:01:5d:a2:1d:
         f9:6a:59:5f:9f:fa:d1:99:4d:d1:33:b5:c8:10:fa:47:1d:0a:
         22:3d:92:d9:cf:a8:62:14:37:b7:65:62:05:f0:ff:2c:09:b1:
         28:7b:60:40:d6:d4:bb:d2:44:f4:96:da:2b:7c:ca:e0:e4:6a:
         70:74:f5:fe:43:92:f8:80:b9:bc:b7:60:14:1d:bc:74:0b:96:
         05:90:50:2c:2b:16:6b:93:db:c4:35:64:c2:cb:f8:1a:29:a0:
         68:a9:65:ef:45:24:9a:73:62:a8:3c:01:ff:39:d5:b7:7e:33:
         35:b7:98:7f:9b:14:21:08:e8:02:e1:27:d5:aa:9d:84:99:05:
         80:22:4f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:25:50 2025 by rpki-client