Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
File:                     YCmqMiQ3H_80BW6mdrX5npQG208.mft (raw, json)
Hash identifier:          WVvrni+sXct5CgBEWYp1pSqJAvrhxk22mh96mJe8Xt8=
Subject key identifier:   E1:80:47:49:1E:EF:DB:EC:87:7F:D4:A1:35:8D:C6:7B:C1:79:2C:16
Authority key identifier: 60:29:AA:32:24:37:1F:FF:34:05:6E:A6:76:B5:F9:9E:94:06:DB:4F
Certificate issuer:       /CN=F362BDD7AF/serialNumber=6029AA3224371FFF34056EA676B5F99E9406DB4F
Certificate serial:       D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
Manifest number:          D1
Signing time:             Sun 27 Apr 2025 04:56:35 +0000
Manifest this update:     Sun 27 Apr 2025 04:56:35 +0000
Manifest next update:     Tue 29 Apr 2025 04:56:35 +0000
Files and hashes:         1: YCmqMiQ3H_80BW6mdrX5npQG208.crl (hash: We4fWLRFSQsP+Rogst0E9yO8F752F3cnmLGvIWcvLFA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 209 (0xd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362BDD7AF, serialNumber=6029AA3224371FFF34056EA676B5F99E9406DB4F
        Validity
            Not Before: Apr 27 04:56:35 2025 GMT
            Not After : Apr 29 04:56:35 2025 GMT
        Subject: CN=680db903-c1e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8e:31:84:01:bd:c3:87:ff:29:8a:6a:71:40:
                    90:5b:d1:1c:9b:9e:b1:28:c7:18:0c:8e:0a:a7:3b:
                    16:35:0a:d2:02:88:95:e4:1b:e0:11:24:3b:35:44:
                    46:e4:65:5a:24:a9:89:79:47:e9:6a:5a:62:bc:fa:
                    c9:4c:fe:94:b1:7f:83:40:91:03:6b:e9:e7:0b:d8:
                    25:0a:f6:76:35:38:7d:23:bf:bf:b7:d2:7c:d0:71:
                    83:ac:f0:20:24:47:f3:cd:bb:b1:b5:ef:cb:90:89:
                    f6:4b:7f:b5:48:2a:91:66:94:85:26:4e:31:59:29:
                    32:d3:8d:3f:76:59:8f:9d:82:48:62:32:de:7a:a0:
                    89:e3:42:15:dc:b3:8d:1b:2e:42:5a:71:8b:55:52:
                    d6:81:3a:21:8c:f7:b3:52:4f:31:67:5b:5e:35:82:
                    49:4e:c1:eb:b6:73:da:39:d5:e7:06:2f:2e:4c:22:
                    71:e7:7a:ad:c2:14:a2:27:79:10:22:ac:eb:0a:d1:
                    f3:52:4a:ed:71:5f:43:cd:88:05:48:5f:a1:f0:8f:
                    35:26:ef:a1:dc:a7:a1:ec:10:4f:45:33:99:ed:f7:
                    de:9c:1b:7a:09:a7:75:f2:fb:23:ff:ec:df:8d:31:
                    66:56:05:9e:05:5f:90:87:ff:62:9a:39:0d:e9:a3:
                    01:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:80:47:49:1E:EF:DB:EC:87:7F:D4:A1:35:8D:C6:7B:C1:79:2C:16
            X509v3 Authority Key Identifier:
                keyid:60:29:AA:32:24:37:1F:FF:34:05:6E:A6:76:B5:F9:9E:94:06:DB:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:18:7c:ac:c3:7b:ff:29:33:60:14:35:88:4e:bc:45:96:94:
         6d:8b:c4:d4:0c:53:1e:ba:1d:db:db:55:bc:22:23:2f:a8:95:
         f6:d3:81:e9:7e:27:25:67:6b:25:b3:d2:6c:f1:11:2f:eb:63:
         2c:75:51:d3:8f:f2:ce:af:a5:8e:f8:f8:73:86:b2:c1:31:d9:
         fb:4f:89:fe:6d:0f:6b:f0:86:ec:17:93:7f:43:76:7f:f5:b0:
         ce:a8:fb:42:64:d0:7a:31:29:ba:96:a9:23:5e:49:4e:0a:31:
         21:f8:3b:2a:c0:9c:f9:c6:63:37:3c:7c:d7:c9:18:79:a3:c2:
         4f:cc:80:fb:77:dc:05:21:a9:1f:0c:24:e2:bc:09:a9:58:1c:
         a2:28:ee:b1:d2:8f:81:d4:fe:d2:74:7f:45:87:6c:8b:59:c3:
         de:5c:14:47:10:68:78:aa:81:39:59:b8:65:63:50:67:eb:d3:
         d7:63:67:fa:98:1a:8f:6e:16:9f:1a:97:92:cc:5e:96:19:2a:
         2e:4f:be:78:de:3e:9a:89:75:34:f3:86:ee:cb:24:89:9e:d9:
         6d:c0:ad:03:5d:36:b3:bf:71:2e:1a:7a:0a:c9:16:d9:48:37:
         51:f4:44:26:88:6b:92:ca:2e:b8:f0:1f:c2:f0:ff:db:40:bd:
         0c:8a:73:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:37 2025 by rpki-client on console.sobornost.net