Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
File:                     UD0YKNTvDNxjpYpU9cDJktI7wao.mft (raw, json)
Hash identifier:          MLZ5VGTUevy9GQ3ru07VNx5gtwTB99aRhOGeaYN7Duk=
Subject key identifier:   47:7C:F1:73:DF:31:A7:42:E3:72:3B:62:DB:7C:47:D1:92:EA:6B:7A
Authority key identifier: 50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA
Certificate issuer:       /CN=F3619AFBAF/serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
Certificate serial:       035D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
Manifest number:          0359
Signing time:             Fri 25 Apr 2025 03:26:04 +0000
Manifest this update:     Fri 25 Apr 2025 03:26:03 +0000
Manifest next update:     Sun 27 Apr 2025 03:26:03 +0000
Files and hashes:         1: UD0YKNTvDNxjpYpU9cDJktI7wao.crl (hash: aF607qApGMm2jDaHC+xH9cbtXaWpSyozqBejK4U72sU=)
                          2: 7BADB9E6F07211EF92AD9376762E951A.roa (hash: B2o+mnnPb8VJ0KXGT1vN0Wq4qZm+iGs6+p3J/guAPnc=)
                          3: F1E5F272F07211EFAFA7997A762E951A.roa (hash: zuqVO/yJxreB8Tl25mp3hH6BAgTW+c+L7Zu/GOdPyYc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861 (0x35d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619AFBAF, serialNumber=503D1828D4EF0CDC63A58A54F5C0C992D23BC1AA
        Validity
            Not Before: Apr 25 03:26:03 2025 GMT
            Not After : Apr 27 03:26:03 2025 GMT
        Subject: CN=680b00cc-19f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b5:14:8f:4b:f4:ca:2d:7a:7d:67:e8:46:ec:
                    0c:61:d9:e2:88:06:fc:80:64:8b:e7:dd:a1:ce:15:
                    b7:09:c6:db:13:58:a7:ca:96:70:c8:75:41:44:7f:
                    49:04:51:06:e2:62:4a:76:b0:fd:ac:ea:b8:e8:b0:
                    61:56:c7:7f:b5:43:df:66:e4:7f:09:e8:30:e2:6f:
                    70:30:1b:15:63:5a:0c:54:2a:16:b7:e4:a3:51:fa:
                    df:6f:a6:0c:0d:3e:32:d0:5d:2c:3e:39:f0:70:f8:
                    6c:bd:6f:b6:fa:d8:10:da:a9:b6:e9:41:6d:72:c8:
                    66:5d:87:2f:08:c0:f7:f9:76:97:0a:65:67:17:07:
                    8e:89:84:05:73:c4:2e:cf:81:29:f0:74:35:01:d9:
                    d5:57:48:36:61:f8:80:a9:49:8b:c8:ce:76:2a:b1:
                    09:43:ef:00:e7:b4:b5:4a:21:bb:03:58:ff:81:ee:
                    0c:90:23:78:ca:b2:b3:7f:80:94:2e:6e:3c:28:a9:
                    2d:cf:ce:ea:4c:73:94:e6:bf:5d:62:d4:7c:07:fb:
                    d2:21:b6:6e:7a:64:df:a4:73:89:b4:f3:fa:0c:ef:
                    38:88:74:06:56:cd:d1:72:28:db:14:5e:13:35:22:
                    df:9d:20:19:cd:2c:95:18:a9:18:5e:b8:17:32:c4:
                    90:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7C:F1:73:DF:31:A7:42:E3:72:3B:62:DB:7C:47:D1:92:EA:6B:7A
            X509v3 Authority Key Identifier:
                keyid:50:3D:18:28:D4:EF:0C:DC:63:A5:8A:54:F5:C0:C9:92:D2:3B:C1:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UD0YKNTvDNxjpYpU9cDJktI7wao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619AFB/CE504C0A9BA511ED9841AEC7F1222468/UD0YKNTvDNxjpYpU9cDJktI7wao.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:dd:49:71:7e:76:65:03:4a:3a:5e:ec:fb:ca:00:b0:f0:f9:
         fe:d6:36:c4:80:98:a3:de:13:2d:d9:08:9d:83:a4:46:07:ed:
         4e:dc:9c:a9:86:73:79:90:64:04:e0:67:ad:ed:b1:30:38:2c:
         5a:68:0e:b9:f5:b1:0f:18:c2:91:28:76:c3:4e:aa:5b:3b:17:
         b6:a8:0b:c8:45:31:07:0c:95:28:cb:58:ed:1e:b2:e2:ef:45:
         f2:af:a8:5b:df:3f:90:45:ae:eb:1f:1c:a0:54:8d:14:08:29:
         7e:cb:38:70:bb:92:ab:d2:5e:ef:c3:93:9a:a5:f6:71:76:7a:
         76:4f:64:11:19:7d:e2:02:6d:f2:19:a8:4b:2c:ae:4b:37:b6:
         5c:fc:f7:6b:99:bd:1c:dc:f8:0f:50:ea:c0:f5:73:05:4d:51:
         e6:9d:b6:c2:60:28:64:ee:fb:93:ed:c5:be:79:0c:9e:6c:a0:
         29:2c:85:04:51:b3:fc:be:ef:1b:b9:9d:84:8a:db:f5:b7:f0:
         39:52:3b:0c:7b:5d:0a:ec:84:a8:f3:9f:a7:a0:1c:b9:52:fd:
         06:7d:d9:e6:1c:66:2c:40:aa:46:20:ef:f7:e1:11:16:4c:97:
         2d:f4:41:c6:ef:35:1f:a6:dd:35:3f:03:f7:95:28:a7:8b:65:
         e7:2e:f5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:05 2025 by rpki-client on console.sobornost.net