Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
File:                     Vgq77plEvBY3TSi-TCYHISxchBo.mft (raw, json)
Hash identifier:          j6EPxB3Ro4HTe4slfBgHt2Ezj1+zWwAxxbZdvoP61/M=
Subject key identifier:   16:E4:C1:CE:2D:C5:1E:B2:45:C2:D1:35:D3:97:E6:9B:01:B3:D8:F0
Authority key identifier: 56:0A:BB:EE:99:44:BC:16:37:4D:28:BE:4C:26:07:21:2C:5C:84:1A
Certificate issuer:       /CN=F3624E32AR/serialNumber=560ABBEE9944BC16374D28BE4C2607212C5C841A
Certificate serial:       02E6
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
Manifest number:          02E5
Signing time:             Fri 25 Apr 2025 03:41:04 +0000
Manifest this update:     Fri 25 Apr 2025 03:41:03 +0000
Manifest next update:     Sun 27 Apr 2025 03:41:03 +0000
Files and hashes:         1: Vgq77plEvBY3TSi-TCYHISxchBo.crl (hash: MF8hzC3KGnIC6uhp5Xq0p+dz9B6z4BX+3t/XBQ8W7OI=)
                          2: 5CEB9A26EE7311EDAE92A5174AD9E6FC.roa (hash: rLtmy6+gg/x50UbRPkkqh7K/Hhi9wWQKPE+ocVnJ+7I=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
                          rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 742 (0x2e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624E32AR, serialNumber=560ABBEE9944BC16374D28BE4C2607212C5C841A
        Validity
            Not Before: Apr 25 03:41:03 2025 GMT
            Not After : Apr 27 03:41:03 2025 GMT
        Subject: CN=680b0450-599f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1e:47:be:07:65:88:9a:b9:1c:b7:66:b7:44:
                    88:2f:61:6e:7c:ee:35:02:fe:3d:cd:cc:05:0d:0d:
                    b8:ef:11:c0:dd:bf:91:82:d5:5d:d0:21:89:2a:59:
                    7d:ad:35:bf:f4:88:df:82:5a:da:69:b9:d2:42:84:
                    42:df:25:30:21:26:53:45:5f:24:00:3c:9f:8c:fc:
                    00:eb:54:22:1f:8f:01:69:5a:50:02:12:06:d9:d8:
                    7f:cf:e6:45:e2:2e:ca:41:07:5a:a6:e0:1a:20:81:
                    3a:15:89:e6:7a:9e:73:24:e6:1d:38:a8:1c:3e:28:
                    e0:b7:ba:2e:aa:d3:5b:90:77:9a:c5:11:34:68:18:
                    e0:f9:dd:61:fc:d7:d0:2f:a0:60:17:dc:ca:11:92:
                    ba:da:63:69:f7:73:03:66:0c:a6:fe:b2:b3:b1:40:
                    f2:12:87:d3:d6:7b:07:5f:ab:b6:06:10:bf:a5:28:
                    ec:1c:17:4f:da:e6:8e:26:f2:11:9a:f6:fd:51:2f:
                    9c:97:f2:a2:b3:df:62:6c:ff:b1:65:1f:76:29:74:
                    8c:34:40:85:b0:f6:bc:20:44:be:d1:f5:d7:8d:6f:
                    74:e8:2c:02:42:5a:f0:b6:20:8b:09:68:e1:39:d4:
                    d0:4a:8d:bd:87:f0:43:fe:0a:87:8e:8b:82:e6:76:
                    11:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E4:C1:CE:2D:C5:1E:B2:45:C2:D1:35:D3:97:E6:9B:01:B3:D8:F0
            X509v3 Authority Key Identifier:
                keyid:56:0A:BB:EE:99:44:BC:16:37:4D:28:BE:4C:26:07:21:2C:5C:84:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:9c:41:7f:1d:2a:08:1e:8c:a6:a6:50:ed:ee:1e:a4:e5:da:
         ca:32:8a:16:dd:35:8c:77:64:bd:b9:e1:9e:99:cd:40:43:06:
         ee:78:ad:34:c8:73:90:c5:d0:29:3f:1e:15:e9:bc:a9:cc:1d:
         fd:19:63:66:5d:df:1b:be:64:70:a3:c5:17:c2:7c:ca:fb:31:
         f3:1f:87:55:8e:ee:0b:7e:90:cf:fe:6f:8f:a5:20:03:8a:aa:
         40:f9:9f:7f:6c:bb:71:50:42:e1:3e:f1:8e:e7:91:c9:19:2f:
         d7:1e:69:72:90:c6:7a:19:d0:25:49:03:93:46:b9:7b:cb:36:
         13:47:34:24:70:86:f5:4d:30:a2:cf:0f:42:e0:a5:0b:2d:5c:
         79:4e:21:1f:c7:01:4b:d6:22:b2:e8:d3:89:97:8f:c0:23:89:
         46:1c:8e:bc:5b:86:fd:e5:57:86:30:cf:3e:62:c0:a2:67:62:
         32:ef:02:18:ce:fc:5c:16:b5:f4:53:2a:97:ee:ce:ca:77:ce:
         d9:62:88:75:85:62:a0:5c:18:2a:0e:ed:4b:fa:c9:40:56:a2:
         59:aa:69:07:3b:c6:5e:ae:e3:b3:a7:a7:46:6c:85:d4:d7:94:
         2b:c8:0c:b2:28:f8:ff:d2:b0:66:e9:da:06:9a:ba:04:a4:ef:
         63:95:50:83
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICAuYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjRFMzJBUjExMC8GA1UEBRMoNTYwQUJCRUU5OTQ0QkMxNjM3NEQyOEJFNEMyNjA3
MjEyQzVDODQxQTAeFw0yNTA0MjUwMzQxMDNaFw0yNTA0MjcwMzQxMDNaMBgxFjAU
BgNVBAMTDTY4MGIwNDUwLTU5OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCbHke+B2WImrkct2a3RIgvYW587jUC/j3NzAUNDbjvEcDdv5GC1V3QIYkq
WX2tNb/0iN+CWtppudJChELfJTAhJlNFXyQAPJ+M/ADrVCIfjwFpWlACEgbZ2H/P
5kXiLspBB1qm4BoggToVieZ6nnMk5h04qBw+KOC3ui6q01uQd5rFETRoGOD53WH8
19AvoGAX3MoRkrraY2n3cwNmDKb+srOxQPISh9PWewdfq7YGEL+lKOwcF0/a5o4m
8hGa9v1RL5yX8qKz32Js/7FlH3YpdIw0QIWw9rwgRL7R9deNb3ToLAJCWvC2IIsJ
aOE51NBKjb2H8EP+CoeOi4LmdhGtAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUFuTB
zi3FHrJFwtE105fmmwGz2PAwHwYDVR0jBBgwFoAUVgq77plEvBY3TSi+TCYHISxc
hBowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI0RTMyL0YxMzQwRTRFRUU3MjExRURCQTUzMjcxNjRBRDlFNkZDL1ZncTc3
cGxFdkJZM1RTaS1UQ1lISVN4Y2hCby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1ZncTc3cGxFdkJZM1RTaS1UQ1lISVN4Y2hCby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MjRFMzIvRjEzNDBFNEVFRTcyMTFFREJBNTMyNzE2NEFEOUU2
RkMvVmdxNzdwbEV2QlkzVFNpLVRDWUhJU3hjaEJvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSnEF/HSoIHoymplDt7h6k5drKMooW3TWM
d2S9ueGemc1AQwbueK00yHOQxdApPx4V6bypzB39GWNmXd8bvmRwo8UXwnzK+zHz
H4dVju4LfpDP/m+PpSADiqpA+Z9/bLtxUELhPvGO55HJGS/XHmlykMZ6GdAlSQOT
Rrl7yzYTRzQkcIb1TTCizw9C4KULLVx5TiEfxwFL1iKy6NOJl4/AI4lGHI68W4b9
5VeGMM8+YsCiZ2Iy7wIYzvxcFrX0UyqX7s7Kd87ZYoh1hWKgXBgqDu1L+slAVqJZ
qmkHO8ZeruOzp6dGbIXU15QryAyyKPj/0rBm6doGmroEpO9jlVCD
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:06 2025 by rpki-client on console.sobornost.net