Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.mft
File:                     zVIytjxqgymQyGcHy3Ob3ATbmlk.mft (raw, json)
Hash identifier:          H/mysPcTQIhCEbFzbu/PzxCiaYgJaWw2fe+Gtv2HYLs=
Subject key identifier:   9D:FB:30:C7:39:6C:23:04:14:92:81:D0:BB:D8:63:D7:DF:D7:86:37
Authority key identifier: CD:52:32:B6:3C:6A:83:29:90:C8:67:07:CB:73:9B:DC:04:DB:9A:59
Certificate issuer:       /CN=F36114AAAF/serialNumber=CD5232B63C6A832990C86707CB739BDC04DB9A59
Certificate serial:       01FD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zVIytjxqgymQyGcHy3Ob3ATbmlk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.mft
Manifest number:          01EB
Signing time:             Mon 28 Apr 2025 04:22:28 +0000
Manifest this update:     Mon 28 Apr 2025 04:22:27 +0000
Manifest next update:     Wed 30 Apr 2025 04:22:27 +0000
Files and hashes:         1: zVIytjxqgymQyGcHy3Ob3ATbmlk.crl (hash: HarBbDAgz8gwF/g27yDAjLqwJuVI+NYR5qvlWjQOqDY=)
                          2: 18567D62BE9E11EEB4D3B4A9775412E6.roa (hash: Y3fBKAh78k5vI18fpOwm6xT2sIv2rQrR5n28MiwgGw0=)
                          3: B931C400BE9C11EEA0A534A7775412E6.roa (hash: IJ0CO9zxuOXyI58eb3kLZpx5bBprglgm5dvQomrvs7c=)
                          4: AD97399EBE9811EE8014B5A0775412E6.roa (hash: KoccFF7o/yfcbuFNWG6sVlIT4Zk2HEV6xtp7qyYqZfA=)
                          5: 31A128EABE9D11EEA80005A8775412E6.roa (hash: 9O72yrx1j232eGHkNnAgxM/xeTRHwNjlaclX0vJiDlI=)
                          6: E3806EB4BE9C11EE8AD4BEA7775412E6.roa (hash: vi1SaeJ/he/8I4o22H/PsR8oFaPMpVTP4SEKAR/gzwk=)
                          7: F25441C6BE9D11EEADDB66A9775412E6.roa (hash: ThmE1VW2ZBVlYZBrNW/OBthIz+IP2YebXYtomjDPNPw=)
                          8: 0CA88DF8F41B11EF957DCA42762E951A.roa (hash: AROikz2JvvNh8UMiTRM9CoRA6myjtjj7cgzBl88JMUw=)
                          9: 8C387FCEBE9D11EEA544F8A8775412E6.roa (hash: 7a2h0aandtk+7wd2GG30FexJRyIFmO2jPX2swBuFU4w=)
                          10: 06562762BE9D11EE9AD5E1A7775412E6.roa (hash: A47Fv49HrGw8EWfdryHbDHlv+/Oz+z1q6LexSzcMJBw=)
                          11: 2027B3FCBEA911EE992A65BC775412E6.roa (hash: govcD5sR2yJWCYrEozEBzG6TFJptEd6fxcH+UyxA72c=)
                          12: B104455EBE9D11EE832320A9775412E6.roa (hash: NYNFo4d1hV3NuNv2EFx6eQE3ZKc/gOgb/XmK5mngB5c=)
                          13: 5DEF8AB8BE9D11EEA53E40A8775412E6.roa (hash: VO2iMV/jxCvAs2IJefOCn2yGYKSsfwTSPJXA5qWGccs=)
                          14: 7D9A0CEEBE9811EEAA3929A0775412E6.roa (hash: QAI8gTiTkofleiNwqNNvOdSN9OEqHznr5e0GGNajQk0=)
                          15: 472ED74CBE9911EEBE5488A1775412E6.roa (hash: IuMi4HBaMKSuvRfubLEiQXMhOlTDSvv+gItJsDU0jtw=)
                          16: 948EB766BE9C11EEA876EEA6775412E6.roa (hash: nC8yYXnLMq8zCmiLa8fcLRhOJAWhlPxS9VmBsCGk1WM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zVIytjxqgymQyGcHy3Ob3ATbmlk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36114AAAF, serialNumber=CD5232B63C6A832990C86707CB739BDC04DB9A59
        Validity
            Not Before: Apr 28 04:22:27 2025 GMT
            Not After : Apr 30 04:22:27 2025 GMT
        Subject: CN=680f0284-f2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6f:4b:33:b0:85:97:d9:41:b7:fc:28:f2:09:
                    d7:c4:ec:b6:bf:a5:21:10:de:c8:30:44:02:3a:0b:
                    79:e4:92:3d:84:62:c2:93:9a:78:af:69:8f:ac:d6:
                    89:b9:b3:a6:1b:97:0b:af:35:d5:b3:7e:fd:84:43:
                    33:9c:f8:f5:c3:91:1d:ea:fd:63:d6:47:96:5d:49:
                    4d:65:5c:0e:0a:18:77:1b:ea:00:c6:4a:da:04:2a:
                    c1:11:88:a6:f2:30:78:73:40:d8:1e:de:7c:e8:24:
                    96:8c:da:97:72:70:ea:21:e2:97:b6:cb:6a:0b:1b:
                    da:56:47:8c:d5:12:12:83:da:2c:65:37:09:3d:17:
                    88:93:6c:15:d2:d4:67:4b:82:5b:e4:5a:1b:84:2c:
                    79:cc:28:96:9e:a5:70:5a:e8:dd:3c:a8:d1:e2:ad:
                    4a:62:d3:1f:86:e4:90:fc:06:f7:67:d2:7e:75:73:
                    eb:13:2d:8d:fe:4f:73:1d:fc:83:ba:2d:42:75:fe:
                    ce:cd:db:d5:41:58:dc:a7:a2:9b:6f:69:8e:e7:8a:
                    45:01:10:20:60:33:16:80:d1:8b:c7:10:3f:50:da:
                    f8:e6:de:cf:5a:cd:c1:cb:ce:23:46:d1:92:7e:da:
                    9d:e2:3b:b7:cc:69:c2:e0:f4:db:b1:0e:a3:c2:24:
                    18:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FB:30:C7:39:6C:23:04:14:92:81:D0:BB:D8:63:D7:DF:D7:86:37
            X509v3 Authority Key Identifier:
                keyid:CD:52:32:B6:3C:6A:83:29:90:C8:67:07:CB:73:9B:DC:04:DB:9A:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zVIytjxqgymQyGcHy3Ob3ATbmlk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:61:22:8c:37:fc:1d:2d:ad:96:74:1f:7c:f7:83:3f:76:34:
         ad:7e:fb:7a:b7:d5:d0:c3:fe:0f:b1:25:46:88:ae:9a:0c:65:
         8a:6a:83:00:a0:27:4b:59:c7:23:2b:06:6f:d8:35:8b:93:c1:
         36:09:50:34:33:bf:6b:f1:2f:9a:f6:58:c5:92:c2:21:98:c8:
         e2:d0:8d:f6:eb:1e:d9:05:10:15:c2:de:4b:08:4f:82:81:9c:
         7e:fd:ec:e7:c4:3d:35:a1:3f:e6:2f:16:51:72:fd:7b:57:2c:
         6b:d4:8c:63:f0:d6:90:67:83:37:71:98:1f:85:df:f1:13:64:
         d4:c2:d3:2e:55:d8:c2:d3:9a:37:17:5a:0d:a3:1b:2e:46:67:
         30:60:99:36:10:ba:70:45:14:d4:df:ad:05:8c:fe:7c:8c:ac:
         9e:9d:48:e8:97:42:5c:15:b5:00:ef:db:de:24:ba:f7:04:a3:
         57:a7:1f:dd:88:3e:1f:ad:bf:63:01:8f:fa:e4:ef:5e:3d:3e:
         1f:29:a5:6f:71:9f:65:9c:81:91:bf:d9:b4:81:b2:9c:43:d9:
         30:54:91:55:9b:44:88:fe:46:1b:41:26:e9:34:76:4a:1c:af:
         37:f3:1a:ce:0b:b3:c7:50:9a:ac:bd:1a:f1:d9:d7:3d:78:3a:
         a0:e8:d9:c3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAf0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTE0QUFBRjExMC8GA1UEBRMoQ0Q1MjMyQjYzQzZBODMyOTkwQzg2NzA3Q0I3MzlC
REMwNERCOUE1OTAeFw0yNTA0MjgwNDIyMjdaFw0yNTA0MzAwNDIyMjdaMBgxFjAU
BgNVBAMTDTY4MGYwMjg0LWYyZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2b0szsIWX2UG3/CjyCdfE7La/pSEQ3sgwRAI6C3nkkj2EYsKTmnivaY+s
1om5s6YblwuvNdWzfv2EQzOc+PXDkR3q/WPWR5ZdSU1lXA4KGHcb6gDGStoEKsER
iKbyMHhzQNge3nzoJJaM2pdycOoh4pe2y2oLG9pWR4zVEhKD2ixlNwk9F4iTbBXS
1GdLglvkWhuELHnMKJaepXBa6N08qNHirUpi0x+G5JD8Bvdn0n51c+sTLY3+T3Md
/IO6LUJ1/s7N29VBWNynoptvaY7nikUBECBgMxaA0YvHED9Q2vjm3s9azcHLziNG
0ZJ+2p3iO7fMacLg9NuxDqPCJBgnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnfsw
xzlsIwQUkoHQu9hj19/XhjcwHwYDVR0jBBgwFoAUzVIytjxqgymQyGcHy3Ob3ATb
mlkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjExNEFBLzg2RDZFNTdFQkU4RjExRUU4MzJGNDQ5MTc3NTQxMkU2L3pWSXl0
anhxZ3ltUXlHY0h5M09iM0FUYm1say5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3pWSXl0anhxZ3ltUXlHY0h5M09iM0FUYm1say5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTE0QUEvODZENkU1N0VCRThGMTFFRTgzMkY0NDkxNzc1
NDEyRTYvelZJeXRqeHFneW1ReUdjSHkzT2IzQVRibWxrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1YSKMN/wdLa2WdB9894M/djStfvt6
t9XQw/4PsSVGiK6aDGWKaoMAoCdLWccjKwZv2DWLk8E2CVA0M79r8S+a9ljFksIh
mMji0I326x7ZBRAVwt5LCE+CgZx+/eznxD01oT/mLxZRcv17Vyxr1Ixj8NaQZ4M3
cZgfhd/xE2TUwtMuVdjC05o3F1oNoxsuRmcwYJk2ELpwRRTU360FjP58jKyenUjo
l0JcFbUA79veJLr3BKNXpx/diD4frb9jAY/65O9ePT4fKaVvcZ9lnIGRv9m0gbKc
Q9kwVJFVm0SI/kYbQSbpNHZKHK838xrOC7PHUJqsvRrx2dc9eDqg6NnD
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:02:25 2025 by rpki-client on console.sobornost.net