Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
File:                     kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft (raw, json)
Hash identifier:          De5yDNg050SYqdRaHOaraTI9xXm1nzRqzoMTXkrFlk0=
Subject key identifier:   C4:71:B5:7D:24:1C:DA:D5:B2:54:00:81:00:36:79:10:1A:BD:8C:74
Authority key identifier: 92:3B:F9:61:AD:83:53:98:34:50:D3:A3:3F:28:CC:CF:E0:A8:A1:06
Certificate issuer:       /CN=F3611484AF/serialNumber=923BF961AD8353983450D3A33F28CCCFE0A8A106
Certificate serial:       01DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
Manifest number:          01DA
Signing time:             Fri 25 Apr 2025 04:15:57 +0000
Manifest this update:     Fri 25 Apr 2025 04:15:56 +0000
Manifest next update:     Sun 27 Apr 2025 04:15:56 +0000
Files and hashes:         1: kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl (hash: gLnhJ4AZdTKZux2z6XTHAxfoK4QRiprUWI0q0YT6pso=)
                          2: 2908C1DCB9E511EEB9065888775412E6.roa (hash: zUZ7frdCVvRhVt6G1jP6YXP6H0Tz6Q6HJTbMKr0ueno=)
                          3: 60A31C9CB9E411EE910C0687775412E6.roa (hash: k8wj8VzEDiiwJJsRvgprQG7fLZ2kqSdbh1u+v7N4tmY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3611484AF, serialNumber=923BF961AD8353983450D3A33F28CCCFE0A8A106
        Validity
            Not Before: Apr 25 04:15:56 2025 GMT
            Not After : Apr 27 04:15:56 2025 GMT
        Subject: CN=680b0c7c-f00c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1e:a3:d2:ac:1d:87:49:5e:88:ca:cb:9c:7d:
                    0e:e9:15:de:26:a8:01:02:88:19:c2:36:35:68:a0:
                    91:90:82:65:24:93:a7:4f:ee:13:59:f4:ba:8f:ff:
                    b9:11:a0:26:cc:bc:51:9e:06:5f:a5:39:c7:68:b3:
                    97:d4:d3:55:3a:4c:84:44:b3:1a:25:f0:40:cd:48:
                    7f:ff:a3:49:49:39:ab:4b:21:a1:8c:e4:dc:8c:64:
                    30:06:e7:88:af:af:56:d9:27:27:2e:d8:16:c4:48:
                    30:a9:68:40:8c:a7:36:32:9f:a0:fe:c1:ab:92:04:
                    97:61:68:e7:9d:a6:e9:a7:5a:b0:1b:1d:0a:28:f0:
                    23:d7:21:5c:dc:18:f7:0d:c5:c9:29:7e:a5:8f:81:
                    10:41:ad:8b:b0:49:fc:e4:3d:2d:3e:00:33:92:e9:
                    34:7f:cf:29:3b:79:ab:f8:da:21:3a:1e:56:04:3d:
                    51:d9:4d:91:b2:e3:0a:68:60:cb:ef:0a:76:95:12:
                    ca:c0:64:eb:19:57:ed:28:59:6d:e0:42:a6:61:c6:
                    66:c0:41:a7:0f:8b:57:76:f8:89:06:c6:86:41:2c:
                    67:ea:a8:4e:5f:87:ed:66:a9:7c:1a:da:eb:ba:7f:
                    be:57:82:b3:78:d0:62:40:b1:73:3f:26:ef:84:44:
                    6f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:71:B5:7D:24:1C:DA:D5:B2:54:00:81:00:36:79:10:1A:BD:8C:74
            X509v3 Authority Key Identifier:
                keyid:92:3B:F9:61:AD:83:53:98:34:50:D3:A3:3F:28:CC:CF:E0:A8:A1:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kjv5Ya2DU5g0UNOjPyjMz-CooQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611484/E61E0996B9E311EE89052986775412E6/kjv5Ya2DU5g0UNOjPyjMz-CooQY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:8f:5d:99:15:72:6d:ce:51:44:b3:db:ea:a8:04:8e:f6:61:
         e0:be:a0:51:92:74:eb:56:25:c5:12:dd:77:83:d0:ad:b1:f9:
         85:92:c3:3c:eb:26:cf:90:b5:ba:11:9c:00:98:55:d3:4d:c9:
         2e:99:92:23:cb:29:1b:d0:6a:18:69:7e:3f:0a:97:29:e8:27:
         76:43:ec:8e:c9:9a:d1:b9:17:b3:e8:ac:9a:6f:a4:e5:ee:ee:
         65:22:d6:e1:8d:15:3c:39:3b:4b:ac:df:4e:bd:af:73:84:79:
         68:57:e5:54:59:cf:69:fe:3b:aa:1d:44:a4:23:5b:d2:8f:42:
         dd:1d:ed:51:e4:90:52:cd:e4:59:4a:92:0a:ee:1f:2f:36:f1:
         d4:69:a8:44:6b:a7:19:a2:89:1e:99:6d:86:55:83:42:32:48:
         77:55:23:f2:ea:a9:2a:38:56:21:c1:f1:8f:90:23:f8:a3:54:
         35:23:b6:12:2a:57:16:0c:e7:b4:e5:9d:d6:35:2c:bb:5f:7b:
         19:64:75:9e:ca:de:91:13:37:ff:3e:4e:e0:64:d5:cc:6a:2f:
         e8:a7:b9:27:5a:51:54:dd:74:cd:1d:a4:bd:6c:ef:85:76:5e:
         cd:08:8c:18:7b:c4:20:ad:73:af:f1:be:26:0c:02:3c:38:1d:
         42:0b:c5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:05 2025 by rpki-client on console.sobornost.net