Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
File:                     cJAIrccXkY_f_PFnQftbEwunxDA.mft (raw, json)
Hash identifier:          dF3K/mhjUNMdcB7EYjuVNpfxqh4mXVrxeIr3rzxGe1M=
Subject key identifier:   3E:06:A5:71:E8:85:59:0A:83:19:58:20:54:28:B3:94:07:81:21:6A
Authority key identifier: 70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30
Certificate issuer:       /CN=F36111C6AF/serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
Certificate serial:       01B8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
Manifest number:          01B8
Signing time:             Sat 26 Apr 2025 04:24:05 +0000
Manifest this update:     Sat 26 Apr 2025 04:24:04 +0000
Manifest next update:     Mon 28 Apr 2025 04:24:04 +0000
Files and hashes:         1: cJAIrccXkY_f_PFnQftbEwunxDA.crl (hash: TKTVfRQWvUAH4zyL9fghqJf8TQTkgFDkWD86XwbK2Mw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 440 (0x1b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36111C6AF, serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
        Validity
            Not Before: Apr 26 04:24:04 2025 GMT
            Not After : Apr 28 04:24:04 2025 GMT
        Subject: CN=680c5fe4-1396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:31:ac:42:88:76:f4:d0:5a:9b:d6:93:b0:86:
                    d7:8e:5d:6e:f9:b4:96:9a:62:61:89:5d:1f:cb:5a:
                    4b:65:0e:eb:a1:b2:77:66:6c:a0:c3:ed:7f:f3:43:
                    e4:c8:b9:14:01:af:9e:9a:1d:cb:dd:ce:69:f1:80:
                    02:0f:b3:ec:67:a9:6e:32:d7:af:0f:49:7f:d5:ed:
                    ef:d6:9d:f0:bc:7b:5c:b4:5f:18:83:81:73:60:b2:
                    a7:6c:68:f0:54:71:ae:df:b0:df:69:5d:e0:32:7c:
                    b6:4f:b3:79:cf:68:74:74:ff:20:9e:37:92:8b:02:
                    78:36:1f:b2:7c:0b:bf:8c:05:a2:21:f9:95:a8:f2:
                    db:82:75:e8:17:0c:69:88:c7:7b:2b:fa:1a:5c:f9:
                    13:80:88:d3:82:db:f4:0e:af:24:ad:87:03:c0:1d:
                    e4:a0:1e:5b:08:a2:86:75:fa:6d:87:d6:28:6d:a7:
                    ec:a0:c0:1b:06:44:9a:83:5b:4d:bf:41:f0:1f:32:
                    c7:25:1c:c4:83:e5:28:f0:f2:18:5a:fb:64:e0:e0:
                    b0:b5:2f:95:be:8b:6c:e6:90:75:4a:a9:5e:12:35:
                    db:83:b3:13:e7:b8:79:14:48:19:b3:2a:c6:d6:88:
                    97:09:84:0d:aa:3c:70:fe:0e:88:3e:66:19:0d:09:
                    a4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:06:A5:71:E8:85:59:0A:83:19:58:20:54:28:B3:94:07:81:21:6A
            X509v3 Authority Key Identifier:
                keyid:70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:9a:50:d6:57:3d:7d:a7:cb:e4:08:37:43:1d:50:4b:e7:59:
         e2:e0:74:73:0b:7e:c6:91:f4:4f:48:3b:79:ae:4d:6e:28:15:
         19:73:ce:d4:a7:94:0e:67:28:ff:1f:04:02:77:17:ae:10:13:
         87:01:c4:2f:dc:93:67:0d:1c:cc:9d:d2:17:e9:56:24:9d:a3:
         41:81:e0:46:3f:f7:1d:d4:af:06:96:8e:2d:e9:9e:f5:cd:4b:
         f3:b6:98:43:e2:55:66:a1:6d:b3:6b:8f:3c:e2:c9:e0:3e:09:
         8d:e3:bd:06:2c:af:1c:a4:70:bb:19:fc:75:77:21:2b:4f:9d:
         15:23:eb:f6:ae:7b:6b:61:c2:07:50:8a:71:c6:da:3a:b3:3c:
         fb:10:20:a6:7f:8f:22:8a:bc:ba:6f:f7:69:e7:4b:37:a4:fd:
         45:f2:a9:77:56:5b:3d:52:af:5e:3f:34:d1:0e:f6:ba:6f:d2:
         d1:bb:db:a4:dd:f1:d2:78:8c:ac:80:df:21:33:29:4b:12:dd:
         db:c9:64:73:c3:af:7c:a5:8c:f6:d6:b1:02:7b:bb:0d:ac:dd:
         40:5a:ab:70:2a:47:cc:f6:c5:da:4a:1c:ee:72:50:28:d3:d4:
         42:d0:59:6e:17:3c:4e:1a:38:64:9d:df:b0:17:59:d9:39:d9:
         ac:eb:0f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:17:07 2025 by rpki-client on console.sobornost.net