Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
File:                     OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft (raw, json)
Hash identifier:          9Jr3yYOIGIL8hazKn3LuPJQ48tKjWbSj5lYvI/FcxAU=
Subject key identifier:   04:AB:4A:7F:7D:32:7F:36:A3:4F:EF:01:60:16:B8:26:2C:4F:4D:61
Authority key identifier: 39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59
Certificate issuer:       /CN=F3610F96AF/serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
Certificate serial:       02C4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
Manifest number:          02BF
Signing time:             Fri 25 Apr 2025 03:48:50 +0000
Manifest this update:     Fri 25 Apr 2025 03:48:49 +0000
Manifest next update:     Sun 27 Apr 2025 03:48:49 +0000
Files and hashes:         1: OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl (hash: USCbR3+r4/ZopDZoUVcvTtoYQJZJuzsDK28Z5zpWHFo=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 708 (0x2c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610F96AF, serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
        Validity
            Not Before: Apr 25 03:48:49 2025 GMT
            Not After : Apr 27 03:48:49 2025 GMT
        Subject: CN=680b0622-9acf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6c:89:6a:8d:f3:50:41:4c:dc:d9:b9:89:b4:
                    ca:22:50:57:68:f3:af:97:37:26:33:7c:47:08:2f:
                    88:9a:46:21:d1:26:22:99:ca:cd:b9:3e:3d:05:8e:
                    83:c2:48:d0:7a:4e:a8:32:ab:9c:b2:0f:7c:4a:68:
                    3b:f7:1c:ff:54:3e:81:91:a4:61:91:6e:13:44:57:
                    cc:81:9a:46:10:9d:0e:13:18:68:7c:9d:f8:31:a7:
                    05:d1:c7:84:79:2c:86:d2:5d:c6:41:ee:8f:12:74:
                    dc:2b:3a:22:3e:fa:a6:03:21:d2:3e:56:9a:bc:42:
                    ec:18:bc:86:27:55:5c:8d:3b:28:e1:c6:e3:13:49:
                    2c:98:2f:eb:b4:e4:f6:87:2d:3d:4c:02:62:54:33:
                    1a:83:1e:58:7e:33:d1:6e:60:39:de:1f:0d:02:74:
                    db:07:b0:6e:55:47:79:eb:6b:80:5a:30:f3:9f:69:
                    ff:9c:fd:05:bb:12:0c:b2:40:8a:9e:c3:5b:36:aa:
                    b8:1e:26:4e:c4:de:75:cf:29:82:2d:2f:d5:ae:f5:
                    2c:0e:f3:b3:40:58:9b:82:b2:75:39:1d:42:f1:82:
                    d3:c3:6f:25:fb:04:04:e1:f4:4b:7c:e4:ca:fd:90:
                    2c:fb:61:ca:1e:9c:a6:86:09:95:28:6d:c0:22:8f:
                    0f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AB:4A:7F:7D:32:7F:36:A3:4F:EF:01:60:16:B8:26:2C:4F:4D:61
            X509v3 Authority Key Identifier:
                keyid:39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:bc:fc:d2:4c:4a:9c:ca:df:b0:2d:73:c1:a6:a7:22:3d:a4:
         13:25:4a:63:e0:65:ae:a8:5c:f3:f9:03:de:2b:18:9e:d7:17:
         b4:94:4c:41:79:83:22:60:72:9c:4e:b7:e3:17:77:0d:d1:e8:
         5b:b4:15:8a:c8:08:01:74:c1:ca:79:cd:2a:0f:00:d0:0e:59:
         26:ac:49:4d:3c:22:f8:6e:57:02:f4:ff:ae:97:02:8c:9e:94:
         3d:e6:64:ed:90:e1:61:71:4d:0b:4f:3c:24:07:c0:b1:a9:d3:
         32:26:a9:01:11:11:34:2c:a3:6e:8a:3d:e1:03:c8:e4:ed:e2:
         54:05:82:d5:9b:2c:d1:c8:b1:aa:e4:72:c8:1c:da:a0:5d:06:
         cc:70:51:45:37:a5:8e:22:c0:0b:93:7b:4e:03:3a:13:31:1e:
         f2:a0:2d:74:4d:3e:c1:3a:c9:fd:86:f7:35:54:ca:47:2d:17:
         89:30:de:58:7e:46:87:63:50:3b:52:0c:d7:48:ce:28:ac:16:
         88:73:f3:ea:cb:da:ea:6f:0b:0d:88:bf:e8:d5:30:27:3c:b1:
         3f:d5:53:1b:75:f2:1a:b2:bf:3b:bb:a7:99:05:aa:27:44:92:
         40:fa:8e:88:ce:ae:c1:38:14:1c:4c:3a:b9:8d:14:ae:c5:ef:
         c7:69:c4:36
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAsQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTBGOTZBRjExMC8GA1UEBRMoMzk0MTYzNEY3RDk1NjVCNTZCMTk3QTEwRUMzNEM1
MEFBOTQ3MzU1OTAeFw0yNTA0MjUwMzQ4NDlaFw0yNTA0MjcwMzQ4NDlaMBgxFjAU
BgNVBAMTDTY4MGIwNjIyLTlhY2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDrbIlqjfNQQUzc2bmJtMoiUFdo86+XNyYzfEcIL4iaRiHRJiKZys25Pj0F
joPCSNB6Tqgyq5yyD3xKaDv3HP9UPoGRpGGRbhNEV8yBmkYQnQ4TGGh8nfgxpwXR
x4R5LIbSXcZB7o8SdNwrOiI++qYDIdI+Vpq8QuwYvIYnVVyNOyjhxuMTSSyYL+u0
5PaHLT1MAmJUMxqDHlh+M9FuYDneHw0CdNsHsG5VR3nra4BaMPOfaf+c/QW7Egyy
QIqew1s2qrgeJk7E3nXPKYItL9Wu9SwO87NAWJuCsnU5HULxgtPDbyX7BATh9Et8
5Mr9kCz7YcoenKaGCZUobcAijw+dAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBKtK
f30yfzajT+8BYBa4JixPTWEwHwYDVR0jBBgwFoAUOUFjT32VZbVrGXoQ7DTFCqlH
NVkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjEwRjk2LzUyMzMyMDJFMTBENjExRUU5NzVERUMxNTRBRDlFNkZDL09VRmpU
MzJWWmJWckdYb1E3RFRGQ3FsSE5Way5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09VRmpUMzJWWmJWckdYb1E3RFRGQ3FsSE5Way5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTBGOTYvNTIzMzIwMkUxMEQ2MTFFRTk3NURFQzE1NEFE
OUU2RkMvT1VGalQzMlZaYlZyR1hvUTdEVEZDcWxITlZrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfvPzSTEqcyt+wLXPBpqciPaQTJUpj
4GWuqFzz+QPeKxie1xe0lExBeYMiYHKcTrfjF3cN0ehbtBWKyAgBdMHKec0qDwDQ
DlkmrElNPCL4blcC9P+ulwKMnpQ95mTtkOFhcU0LTzwkB8CxqdMyJqkBERE0LKNu
ij3hA8jk7eJUBYLVmyzRyLGq5HLIHNqgXQbMcFFFN6WOIsALk3tOAzoTMR7yoC10
TT7BOsn9hvc1VMpHLReJMN5YfkaHY1A7UgzXSM4orBaIc/Pqy9rqbwsNiL/o1TAn
PLE/1VMbdfIasr87u6eZBaonRJJA+o6Izq7BOBQcTDq5jRSuxe/HacQ2
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:05 2025 by rpki-client on console.sobornost.net