Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
File:                     v1plQpwwfXk7DXBa2V_P60lCIWo.mft (raw, json)
Hash identifier:          NhnerAZQncD4KC/Zi0pW1/P/eZJaUX4KRlOSM07sAbk=
Subject key identifier:   8C:51:E7:F1:B1:BE:FE:92:7C:D2:17:AE:11:84:44:53:0C:30:3E:F8
Authority key identifier: BF:5A:65:42:9C:30:7D:79:3B:0D:70:5A:D9:5F:CF:EB:49:42:21:6A
Certificate issuer:       /CN=F3619CE0AF/serialNumber=BF5A65429C307D793B0D705AD95FCFEB4942216A
Certificate serial:       9C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
Manifest number:          9B
Signing time:             Thu 24 Apr 2025 05:09:04 +0000
Manifest this update:     Thu 24 Apr 2025 05:09:04 +0000
Manifest next update:     Sat 26 Apr 2025 05:09:04 +0000
Files and hashes:         1: v1plQpwwfXk7DXBa2V_P60lCIWo.crl (hash: XC8UDb+g6XbRl/MVmBDGPlRX7vRwIkutabzwJX2bbdA=)
                          2: 3995E772B22911EF8FFA5C88762E951A.roa (hash: q5GdnXuThvMc7lFNIre+h57AswQCqM5v2uH6+3ENceQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Apr 2025 00:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 156 (0x9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619CE0AF, serialNumber=BF5A65429C307D793B0D705AD95FCFEB4942216A
        Validity
            Not Before: Apr 24 05:09:04 2025 GMT
            Not After : Apr 26 05:09:04 2025 GMT
        Subject: CN=6809c770-36bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f6:49:99:47:76:2b:bf:40:eb:5e:b1:9f:e2:
                    c9:dc:0e:bf:1f:a9:ff:42:86:97:87:f7:b5:41:8b:
                    16:54:d9:f4:0b:39:aa:23:71:bc:6b:4a:c4:3b:fe:
                    0f:d6:b3:79:8a:a4:d7:2c:5e:54:4c:48:00:4d:29:
                    99:d2:fe:64:f6:88:0f:4c:1a:14:4e:3f:b0:88:03:
                    28:8e:80:22:18:42:b6:ed:0e:1a:2a:7a:2c:10:f6:
                    c4:11:6c:5c:42:9a:4b:f4:b7:77:d6:61:d4:33:99:
                    2f:1c:16:88:c1:41:c6:df:f5:08:10:a5:ac:d5:b4:
                    f9:17:7a:28:bb:c3:5f:a1:cd:09:3b:3e:96:ec:ac:
                    84:8a:11:79:af:f8:88:65:24:d1:88:22:02:10:78:
                    13:47:49:82:01:49:d2:65:5d:ed:c8:69:18:ad:f6:
                    4a:a3:bc:e0:4b:42:75:be:a8:a4:e4:50:25:dd:3d:
                    84:7b:af:58:e7:ea:5f:9e:c2:19:30:28:9f:df:1b:
                    fa:68:88:78:ef:a7:bc:60:1f:4c:2e:94:5d:34:b1:
                    3f:15:8d:13:49:8f:56:b5:6b:ec:2c:6b:78:55:a8:
                    12:82:d2:44:49:42:54:60:4f:c3:c8:9a:8a:2e:a1:
                    b3:0e:45:eb:71:a3:92:01:49:18:21:1f:57:13:a2:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:51:E7:F1:B1:BE:FE:92:7C:D2:17:AE:11:84:44:53:0C:30:3E:F8
            X509v3 Authority Key Identifier:
                keyid:BF:5A:65:42:9C:30:7D:79:3B:0D:70:5A:D9:5F:CF:EB:49:42:21:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v1plQpwwfXk7DXBa2V_P60lCIWo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619CE0/FC275A24AD5F11EF91E30957762E951A/v1plQpwwfXk7DXBa2V_P60lCIWo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f5:51:e5:a1:c2:18:98:6f:7b:12:d7:1f:53:4c:da:ca:6c:
         b2:2a:fb:7d:2d:5e:d9:87:a0:52:ba:37:14:34:bd:a5:05:0e:
         ee:31:5f:c6:91:0f:8f:0e:53:cc:35:3e:b1:b5:53:32:3f:53:
         0f:c7:2f:39:69:df:e0:8a:f1:38:2c:5b:27:75:85:ac:26:68:
         d9:88:4f:1d:71:a4:7d:25:ec:18:19:e4:20:3b:6d:19:f0:8b:
         ae:71:99:77:04:39:ef:8c:33:d1:6b:4f:57:48:a0:7c:56:83:
         14:2b:19:4b:e6:6a:eb:1d:f1:c9:20:00:3d:13:23:86:c5:44:
         72:7e:83:b4:39:ca:51:fe:d5:c7:a7:8c:0e:d8:27:57:23:a9:
         9e:37:db:96:a0:65:3a:4e:f5:62:87:42:0c:99:74:34:5e:e1:
         03:4e:84:2d:7b:99:21:4b:f6:30:e2:4e:43:5b:af:a0:8a:5e:
         94:54:f6:42:c6:a2:af:5f:b0:07:78:c1:d3:10:00:9e:7b:c7:
         e4:37:dd:f8:1d:6f:84:d2:9c:0f:a4:8c:0f:13:ca:be:c9:02:
         b3:df:72:06:8d:18:aa:5f:69:6d:17:c3:f1:30:f4:21:b6:d5:
         72:f1:b5:be:5c:10:19:61:40:4f:e4:5b:ce:aa:18:2b:6b:7f:
         d0:a9:29:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 06:51:46 2025 by rpki-client on console.sobornost.net