Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
File:                     aRHVUPOKT27JEBz-cu1_bZFhR3E.mft (raw, json)
Hash identifier:          ZMRHkLfw6bYY9fwbEauwZjaqTrIUI+LYeRQmSr0cQ3k=
Subject key identifier:   2F:8F:87:6B:3A:35:73:83:77:3A:55:8C:9A:21:57:A8:CA:A3:74:B6
Authority key identifier: 69:11:D5:50:F3:8A:4F:6E:C9:10:1C:FE:72:ED:7F:6D:91:61:47:71
Certificate issuer:       /CN=F3615826AF/serialNumber=6911D550F38A4F6EC9101CFE72ED7F6D91614771
Certificate serial:       057D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
Manifest number:          057D
Signing time:             Fri 25 Apr 2025 02:25:59 +0000
Manifest this update:     Fri 25 Apr 2025 02:25:58 +0000
Manifest next update:     Sun 27 Apr 2025 02:25:58 +0000
Files and hashes:         1: aRHVUPOKT27JEBz-cu1_bZFhR3E.crl (hash: r7SgZ+u/o5Jlxc1TNDkNtDkbDp2vrqOkzKbRYdxfCDQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1405 (0x57d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3615826AF, serialNumber=6911D550F38A4F6EC9101CFE72ED7F6D91614771
        Validity
            Not Before: Apr 25 02:25:58 2025 GMT
            Not After : Apr 27 02:25:58 2025 GMT
        Subject: CN=680af2b7-4e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c5:43:25:71:55:1c:ac:8b:b6:dd:1b:78:98:
                    ef:03:2b:8c:39:4b:21:d6:e0:04:d0:db:58:5d:c0:
                    21:49:73:dd:c5:28:b3:b5:41:21:a6:ff:2a:55:ec:
                    cf:75:d0:b4:98:bb:4d:69:43:14:8b:11:37:98:12:
                    a7:35:c2:33:6c:18:b8:9a:52:d7:0a:b4:bb:b8:4b:
                    84:80:aa:ad:d0:5d:05:57:e3:ed:74:67:5f:61:8e:
                    c0:c5:d6:ab:c3:69:d4:58:11:c1:44:b8:42:12:a6:
                    53:44:28:4b:fb:dc:92:c7:08:25:62:06:ad:26:dc:
                    8d:1c:00:32:b3:a6:82:7d:24:53:81:25:9e:b6:95:
                    a1:e6:1f:b1:ff:5e:7e:76:8d:7e:9f:1f:f8:7d:33:
                    3f:50:04:46:fb:68:00:01:67:05:f8:a2:e9:50:94:
                    7f:40:3e:b5:35:e9:a8:1c:38:20:ab:06:52:ed:e7:
                    48:77:a5:4d:d9:7e:eb:aa:9e:21:cb:34:1f:8d:be:
                    ea:22:4b:56:5f:5c:fc:47:bd:b6:0f:fa:c9:00:00:
                    a6:10:b4:8a:59:bd:27:14:67:bb:18:14:e6:f3:d3:
                    3f:a1:fd:d8:a9:23:ce:a9:a0:0b:10:f3:cf:40:9b:
                    e4:ca:39:25:99:24:f2:7d:96:01:de:0f:da:85:44:
                    73:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:8F:87:6B:3A:35:73:83:77:3A:55:8C:9A:21:57:A8:CA:A3:74:B6
            X509v3 Authority Key Identifier:
                keyid:69:11:D5:50:F3:8A:4F:6E:C9:10:1C:FE:72:ED:7F:6D:91:61:47:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aRHVUPOKT27JEBz-cu1_bZFhR3E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3615826/38186D12F05711EB93F9A138D8A014CE/aRHVUPOKT27JEBz-cu1_bZFhR3E.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:e9:d3:18:9b:48:54:10:41:db:53:e9:3b:3a:2f:cc:9e:92:
         75:9d:48:7c:ed:00:c7:bb:81:28:0a:5d:97:04:64:f0:97:73:
         ac:01:a5:c4:e7:0e:61:ce:1d:e8:84:77:25:0f:d7:75:dd:ba:
         83:18:67:f9:06:61:96:6f:bf:f3:7a:17:3e:7f:4c:7d:c9:3a:
         97:52:6b:59:06:b4:50:6d:5d:f6:89:0d:b2:7c:19:24:ff:7c:
         38:62:68:c7:33:83:d3:ca:c4:7c:82:2f:d7:9d:8b:aa:94:53:
         3a:33:36:2e:57:7b:58:63:50:4c:58:60:31:0f:79:f8:3f:c1:
         8b:3b:1c:e4:40:f0:dd:db:47:9f:48:72:0a:b6:e6:72:7d:61:
         9a:89:6b:b5:09:60:29:08:40:f1:6b:14:4e:ec:27:d9:16:60:
         fe:16:41:37:57:a1:cf:51:40:a6:c0:d7:e8:8b:61:2e:3c:c0:
         85:f4:08:ec:4a:e2:13:45:b9:a7:4d:ac:72:cd:a3:a5:db:ac:
         35:73:0c:53:6e:c6:5a:5d:ab:0d:9c:d8:67:86:3c:7b:8c:bf:
         51:6c:31:f2:af:f2:80:0d:3a:61:ac:76:57:a1:72:7f:37:2f:
         c0:c1:4b:2f:8d:79:7c:e7:ff:d9:9e:5f:ed:4b:0b:4c:45:87:
         22:c0:1c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:05 2025 by rpki-client on console.sobornost.net