Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
File:                     A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft (raw, json)
Hash identifier:          6hc3F+C7cuBnOAxt1yuxEAH4U5D5TcfkU/g2AfSlNm8=
Subject key identifier:   CE:BC:5D:E4:4C:29:05:C1:11:44:90:76:EA:D4:71:DB:17:B4:85:F7
Authority key identifier: 03:9A:AF:7F:E9:F6:0B:F0:97:74:86:FA:74:B5:87:18:59:AE:A1:3D
Certificate issuer:       /CN=F3628C37AF/serialNumber=039AAF7FE9F60BF0977486FA74B5871859AEA13D
Certificate serial:       058A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A5qvf-n2C_CXdIb6dLWHGFmuoT0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
Manifest number:          0589
Signing time:             Sun 27 Apr 2025 02:24:37 +0000
Manifest this update:     Sun 27 Apr 2025 02:24:36 +0000
Manifest next update:     Tue 29 Apr 2025 02:24:36 +0000
Files and hashes:         1: A5qvf-n2C_CXdIb6dLWHGFmuoT0.crl (hash: 7s0ZnQkVeNxJZoYxVJfY9iZ3oMkOPe7UZNGrE73eDoQ=)
                          2: D9591C72EA1611EBA09F1503D8A014CE.roa (hash: ULu6v5Xd4RylQXz/DNaRnBo4gOCnbUZvm9Y1D6Eb7lc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A5qvf-n2C_CXdIb6dLWHGFmuoT0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1418 (0x58a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628C37AF, serialNumber=039AAF7FE9F60BF0977486FA74B5871859AEA13D
        Validity
            Not Before: Apr 27 02:24:36 2025 GMT
            Not After : Apr 29 02:24:36 2025 GMT
        Subject: CN=680d9565-b80c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:4e:be:ec:e0:73:bd:3a:34:7d:c8:03:fc:07:
                    14:62:65:e8:b7:9b:06:6e:f7:40:93:91:3f:1d:4d:
                    29:d8:1c:e7:bf:31:39:23:94:cf:07:2c:0e:58:a8:
                    43:6b:ee:9a:81:64:91:7a:3a:1d:22:ac:31:17:65:
                    0e:6f:92:17:c3:fd:82:9f:27:da:76:d6:90:a0:6e:
                    bb:c8:14:13:12:ac:4a:5e:db:51:65:5e:7d:c5:b4:
                    eb:3a:c5:9d:bf:55:43:0a:bb:28:ef:da:f1:2a:31:
                    20:04:71:a1:e0:04:77:66:fc:39:03:92:bb:9f:1d:
                    9a:09:15:fa:6b:7c:f0:dd:ca:fe:f6:40:ad:50:01:
                    06:cb:0e:4c:ca:c2:7f:b1:52:c7:1d:88:25:80:d3:
                    03:b7:53:e2:85:fd:ff:6e:b5:74:84:14:48:33:62:
                    77:6a:2e:32:5d:29:c1:45:b2:ba:75:c1:07:d5:5e:
                    46:26:7e:c2:f8:9b:80:73:be:e0:53:f2:0c:04:bc:
                    9c:ca:22:28:64:26:9c:89:0b:d0:a4:83:c4:6c:1e:
                    9c:c1:fd:fd:bf:67:b1:d2:a3:62:b2:c0:8d:3c:43:
                    8f:bc:74:dd:70:c3:c4:e0:5b:83:b2:9e:6a:24:44:
                    aa:fc:e5:80:11:df:d1:4d:47:fa:3d:4a:4c:54:05:
                    7c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:BC:5D:E4:4C:29:05:C1:11:44:90:76:EA:D4:71:DB:17:B4:85:F7
            X509v3 Authority Key Identifier:
                keyid:03:9A:AF:7F:E9:F6:0B:F0:97:74:86:FA:74:B5:87:18:59:AE:A1:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A5qvf-n2C_CXdIb6dLWHGFmuoT0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628C37/B37EA5C2EA1511EBA6126201D8A014CE/A5qvf-n2C_CXdIb6dLWHGFmuoT0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:08:98:09:41:05:60:b8:77:7e:f9:d1:44:33:e4:8d:00:d1:
         e2:b5:45:ba:30:bd:c8:34:07:d0:5a:78:2b:c7:16:5c:d4:eb:
         a8:08:92:a7:76:bd:a7:44:91:16:1d:89:a6:ec:d1:49:91:b6:
         6b:81:08:27:0b:52:76:e8:dd:02:c7:14:bb:42:4d:5f:35:b9:
         a0:18:e2:c2:e0:87:92:2a:c2:50:26:6d:2c:b5:55:1d:f0:eb:
         e8:15:4a:3b:47:fd:95:bf:7e:e1:e5:28:46:e3:dd:b3:12:bb:
         77:54:57:a9:ab:8c:4b:76:98:d0:47:a1:29:1e:67:61:b4:5f:
         58:0d:cc:36:bb:a0:8d:92:4b:6e:3c:80:2f:0a:ed:15:81:e0:
         25:06:c8:2b:78:d0:44:94:65:ab:0a:e5:95:0d:47:c2:e9:88:
         14:69:14:8b:bb:ae:6f:c2:41:c7:d0:42:68:86:f6:65:cd:18:
         17:28:05:58:f9:1b:0e:5c:c9:17:d6:9d:cf:dc:4f:3d:a4:aa:
         d9:11:9d:4e:54:e4:07:c8:57:81:43:63:c1:26:0f:cd:fa:9f:
         62:ab:57:bb:e0:c4:fd:0c:e3:2f:d6:bd:5e:26:5a:38:1e:64:
         83:8a:e8:e7:d5:ec:f6:1c:40:bf:91:be:bc:f4:a2:f8:b1:e9:
         97:f8:0f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:39 2025 by rpki-client on console.sobornost.net