Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.mft
File:                     vujDtMU1w6-g9ubE9pxolZBF-RY.mft (raw, json)
Hash identifier:          RahbsiEzDc50J2qa4LZX53IpaaJrQvmYeTqw+liQkyY=
Subject key identifier:   D1:CB:95:F3:B6:19:34:76:E3:CF:89:F7:02:66:2A:FC:9E:A5:26:22
Authority key identifier: BE:E8:C3:B4:C5:35:C3:AF:A0:F6:E6:C4:F6:9C:68:95:90:45:F9:16
Certificate issuer:       /CN=F36311EEAF/serialNumber=BEE8C3B4C535C3AFA0F6E6C4F69C68959045F916
Certificate serial:       DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.mft
Manifest number:          D8
Signing time:             Mon 28 Apr 2025 05:04:03 +0000
Manifest this update:     Mon 28 Apr 2025 05:04:02 +0000
Manifest next update:     Wed 30 Apr 2025 05:04:02 +0000
Files and hashes:         1: vujDtMU1w6-g9ubE9pxolZBF-RY.crl (hash: 9EoJ0KakgPsLL5SRaRnSLbH1BL5R7b+KWT89TT4B14E=)
                          2: D3A052DE8C5011EF962EB66B762E951A.roa (hash: 7F3ZZIsrdZCw76gUa9ufWVDJqlOoOPIvRQ+47HnEl7c=)
                          3: 620994148C5011EF94268569762E951A.roa (hash: 9V4bZYCHudK+iK9UuvGM5Ummg+j57Il9EjuvcaUWhiI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36311EEAF, serialNumber=BEE8C3B4C535C3AFA0F6E6C4F69C68959045F916
        Validity
            Not Before: Apr 28 05:04:02 2025 GMT
            Not After : Apr 30 05:04:02 2025 GMT
        Subject: CN=680f0c42-0202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:df:0a:8f:0b:22:e5:a0:0d:ba:30:6d:8d:03:
                    fa:53:91:7f:e1:4e:79:59:20:04:e0:97:be:37:d4:
                    bc:6a:b1:52:d8:86:dd:4e:f6:55:84:bb:0f:39:54:
                    07:b5:b3:5a:73:59:c9:35:21:2f:3b:bb:9a:75:24:
                    10:16:8c:9d:cb:bd:21:da:25:5b:1c:80:4a:87:23:
                    e1:f0:4b:3f:fc:42:26:1a:20:d9:72:d5:04:1a:90:
                    e2:dc:0b:c3:f7:6a:e2:59:a1:34:2e:0b:41:fd:95:
                    cd:33:34:55:25:6a:0b:0a:7c:00:9a:93:d6:24:db:
                    d3:58:a6:10:32:1c:94:7d:1f:22:9f:dc:a4:f4:39:
                    f1:c5:5f:fd:1a:bf:1a:f9:f3:7a:bd:fc:f5:c0:cc:
                    d3:c1:f0:8b:d3:b0:0a:cb:80:c3:94:9d:bb:ec:95:
                    1b:54:41:e6:4a:e5:ec:10:ec:ba:40:cd:ad:ed:b6:
                    d7:57:44:a2:e5:4e:76:44:7c:d3:62:92:fd:ae:e6:
                    40:53:9f:e3:49:51:16:a3:7c:e2:79:a1:ba:88:fb:
                    7d:dc:59:6f:ae:17:a1:9c:2e:c1:ff:93:3b:86:2f:
                    b8:f8:80:fd:2a:86:9c:1d:e0:e2:dc:1f:65:da:1c:
                    55:98:10:dd:54:0a:88:d2:99:e5:e3:e1:fb:ed:08:
                    8f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CB:95:F3:B6:19:34:76:E3:CF:89:F7:02:66:2A:FC:9E:A5:26:22
            X509v3 Authority Key Identifier:
                keyid:BE:E8:C3:B4:C5:35:C3:AF:A0:F6:E6:C4:F6:9C:68:95:90:45:F9:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vujDtMU1w6-g9ubE9pxolZBF-RY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36311EE/397BAD0A8BA811EF8A740842762E951A/vujDtMU1w6-g9ubE9pxolZBF-RY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:26:ec:ae:2f:5d:ba:e2:76:ff:bd:63:d7:a9:c6:6e:69:be:
         b4:1e:92:3b:b0:65:db:8b:e4:75:d8:af:36:6f:e3:ad:e2:a5:
         fb:a1:ad:0b:e4:88:9b:ba:c2:ea:fc:38:a4:e2:00:2f:9b:2c:
         84:ba:a9:0c:2b:18:b7:bf:50:e0:86:79:49:6c:a9:34:07:26:
         ff:37:ff:80:59:6a:d1:9a:21:8b:aa:0d:dd:29:c2:41:81:db:
         65:b5:81:64:3b:f4:97:24:0e:22:88:45:e4:06:db:22:e7:f8:
         9f:6a:64:20:5a:56:b0:08:a2:05:e8:ab:e1:6b:94:72:57:a1:
         77:45:41:ed:a5:2f:ad:06:b1:a9:65:b3:b4:46:97:14:9d:0b:
         ef:8f:86:d8:c0:a2:97:3f:58:ac:7b:3b:de:ae:ad:9a:96:1f:
         11:82:eb:ad:3e:56:94:55:70:e8:4e:f8:1d:fb:42:6f:00:bb:
         b7:ad:8f:98:d4:46:90:1e:40:54:c7:2b:4f:cc:11:81:6a:b7:
         bb:d1:1c:64:df:77:d3:0d:b0:fc:c6:24:1a:48:41:47:04:2e:
         0b:84:31:38:89:c7:a2:61:8f:7a:08:fb:56:80:91:be:e5:9c:
         0d:74:2d:97:ce:31:95:63:17:38:b8:b0:8d:31:04:cb:4e:63:
         ef:8f:2f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:23:03 2025 by rpki-client on console.sobornost.net