Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
File:                     lya7b0ngx_FVN-L2-fJmCV1OpJE.mft (raw, json)
Hash identifier:          622TIJQX6HCRFeirzmhOsWJZgeKvrDASytYzSFRCs7g=
Subject key identifier:   45:7D:0E:A4:C7:21:53:2C:C5:BF:31:EF:6E:62:67:BD:A6:4C:2F:F9
Authority key identifier: 97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91
Certificate issuer:       /CN=F3666CFFAR/serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
Certificate serial:       02CE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
Manifest number:          02CE
Signing time:             Sat 10 May 2025 03:45:19 +0000
Manifest this update:     Sat 10 May 2025 03:45:18 +0000
Manifest next update:     Mon 12 May 2025 03:45:18 +0000
Files and hashes:         1: lya7b0ngx_FVN-L2-fJmCV1OpJE.crl (hash: rvCjRcPb54wCq9Jaa7pfcbUmhrQkPPSenq/HQJm2csQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                          rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 May 2025 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 718 (0x2ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAR, serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
        Validity
            Not Before: May 10 03:45:18 2025 GMT
            Not After : May 12 03:45:18 2025 GMT
        Subject: CN=681ecbcf-8bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a6:89:e9:93:05:28:85:cc:9a:a7:35:57:e2:
                    d9:03:40:ae:50:26:fb:db:1a:65:53:f8:f8:9a:f4:
                    51:81:71:42:58:4d:36:67:98:73:ce:9e:d2:4d:1d:
                    5c:86:0f:dd:ed:d3:fd:44:7b:ee:34:30:a2:71:c5:
                    9f:53:b2:2b:c9:d6:4e:5c:76:dc:eb:12:48:42:f6:
                    9e:e6:71:9b:21:e3:37:22:1f:ae:f7:8c:1c:c2:de:
                    72:eb:04:c1:26:46:c8:fd:cc:da:0f:dd:ae:16:01:
                    87:f9:78:d1:bf:97:77:d8:49:92:3b:30:fd:0a:f9:
                    5c:a8:0b:bc:16:04:3f:e3:ea:b1:9b:c0:3e:b6:ea:
                    6e:48:39:ab:ab:06:18:62:06:bd:11:44:ee:fb:6c:
                    3f:ea:0f:a3:a3:94:5d:70:99:ff:73:62:4c:0f:34:
                    29:d5:27:17:db:0f:bb:68:bc:b4:36:ff:db:fd:aa:
                    f3:c8:1d:1f:f5:5e:a5:ca:c1:4e:66:28:a2:0e:d0:
                    9d:b0:f4:7a:4a:61:a4:a7:02:a0:0e:f0:aa:73:26:
                    8f:9c:1b:ae:fd:78:5c:af:c6:56:9a:39:5f:08:60:
                    b9:a4:31:47:bc:62:67:5a:dd:97:95:46:fc:1f:97:
                    d1:17:00:74:0e:d8:e4:e4:a0:b3:54:e9:58:5a:9d:
                    05:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:7D:0E:A4:C7:21:53:2C:C5:BF:31:EF:6E:62:67:BD:A6:4C:2F:F9
            X509v3 Authority Key Identifier:
                keyid:97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2e:a2:88:42:61:98:b0:0f:50:91:22:c7:0b:e1:f1:82:79:
         a1:9a:11:88:a9:9f:26:86:1c:dd:50:5c:8b:69:e3:40:1f:32:
         ae:12:ec:cc:3e:73:1b:05:6d:2e:cf:dc:c3:f4:21:39:78:a4:
         78:34:3e:9f:25:d5:6e:8f:99:ad:44:f1:67:1a:bb:cc:d6:88:
         4f:98:e7:6a:88:42:1e:c9:ae:ab:ca:45:cb:c7:1e:fb:e7:39:
         3d:53:8c:0c:5f:91:a7:4f:6d:b5:c5:be:f7:13:27:92:47:a2:
         dd:b2:14:1a:2c:06:ec:1d:26:0d:56:fd:49:5e:1c:24:65:07:
         1c:ac:ec:44:84:aa:d7:24:6e:99:58:4e:88:4b:38:9e:d5:da:
         76:62:8c:b3:63:a8:21:4c:26:80:5a:dc:d3:5b:2e:b0:c4:95:
         28:ef:c1:c2:06:03:92:92:7a:19:ae:1e:5e:ce:3e:52:2d:2b:
         87:04:82:a9:11:60:3c:c5:1c:24:8e:b6:ed:07:5f:22:3a:da:
         f7:6f:dc:42:32:13:60:42:b8:85:08:cd:3b:15:55:ae:25:c7:
         2b:bc:00:a0:74:b0:a0:2c:d4:d6:ce:b5:3a:68:60:27:63:7f:
         ec:a1:56:86:5f:f5:20:1d:8b:3f:83:90:97:6f:a3:a2:bb:8e:
         64:da:e4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:03:50 2025 by rpki-client