Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
File:                     JfCxDKLk37Or6AFrgxnhVRHDOhw.mft (raw, json)
Hash identifier:          U1RPMGFGaMoQyuTSjlBGLORxFlxg5LLD9r5HzLwh/Yk=
Subject key identifier:   E9:35:B6:33:12:3A:3F:6D:C7:79:86:8E:70:09:8D:65:BF:98:CB:23
Authority key identifier: 25:F0:B1:0C:A2:E4:DF:B3:AB:E8:01:6B:83:19:E1:55:11:C3:3A:1C
Certificate issuer:       /CN=F36374C9AF/serialNumber=25F0B10CA2E4DFB3ABE8016B8319E15511C33A1C
Certificate serial:       0DDA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JfCxDKLk37Or6AFrgxnhVRHDOhw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
Manifest number:          0DD7
Signing time:             Fri 25 Apr 2025 01:00:00 +0000
Manifest this update:     Fri 25 Apr 2025 01:00:00 +0000
Manifest next update:     Sun 27 Apr 2025 01:00:00 +0000
Files and hashes:         1: JfCxDKLk37Or6AFrgxnhVRHDOhw.crl (hash: 379EguIjx+PSCzG5lgpgBe9zT/s6/Oq0No1QSGRoPnE=)
                          2: 95B9A0DC542E11E68362481EF8AEA228.roa (hash: 8UoC48UqoDeH69RSkPNH1+FjRJDyG7fYrZ/nLYWEfIs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JfCxDKLk37Or6AFrgxnhVRHDOhw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3546 (0xdda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36374C9AF, serialNumber=25F0B10CA2E4DFB3ABE8016B8319E15511C33A1C
        Validity
            Not Before: Apr 25 01:00:00 2025 GMT
            Not After : Apr 27 01:00:00 2025 GMT
        Subject: CN=680ade90-53a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:0c:6c:b1:15:bd:5e:ef:89:ee:fd:8d:91:
                    65:7c:ea:f5:d0:3b:82:1f:64:bd:ff:83:86:d0:ba:
                    e4:96:10:df:88:e4:79:23:fd:a7:af:3f:9b:74:ad:
                    28:d8:3d:e9:f1:4a:08:e9:9f:85:fd:a3:11:23:71:
                    62:db:43:3b:3e:ff:b1:eb:2a:a1:36:6a:2c:e1:fe:
                    99:6a:69:1e:58:68:63:2c:04:a0:cf:be:97:f8:6c:
                    43:b6:6d:6c:ff:6c:2b:03:d7:a9:b7:77:59:0b:19:
                    01:29:6d:4f:d8:d0:d3:78:07:a0:2c:0f:d6:43:fc:
                    63:ff:2a:20:b7:6e:2e:af:11:1a:91:d9:06:8c:97:
                    9a:7f:c7:d2:cd:18:8a:3d:5f:28:95:dc:92:77:3e:
                    eb:21:6d:43:bb:d2:46:8e:30:2b:31:3f:f3:f6:2e:
                    15:8a:ce:4a:a3:be:b0:09:d6:f0:a2:85:49:78:17:
                    f4:27:98:51:d1:dc:50:23:18:94:81:5e:d9:65:7d:
                    fd:4b:1f:a0:ab:1d:5d:db:a9:70:66:10:18:c0:6d:
                    db:bc:e2:b4:11:ef:56:54:9c:f4:e1:30:66:4d:fc:
                    be:7b:56:da:ff:ac:f8:b4:52:ef:5e:eb:a7:e3:57:
                    39:6c:da:39:6b:5d:fa:56:58:9e:1c:5d:cd:a1:6e:
                    ac:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:35:B6:33:12:3A:3F:6D:C7:79:86:8E:70:09:8D:65:BF:98:CB:23
            X509v3 Authority Key Identifier:
                keyid:25:F0:B1:0C:A2:E4:DF:B3:AB:E8:01:6B:83:19:E1:55:11:C3:3A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JfCxDKLk37Or6AFrgxnhVRHDOhw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36374C9/42E9387278AB11E5BFBA862AF8AEA228/JfCxDKLk37Or6AFrgxnhVRHDOhw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:8b:3b:fd:49:a7:b7:af:e8:14:8d:df:7f:3b:7b:ed:c1:76:
         80:2d:93:0f:a1:92:b3:43:a0:2a:25:00:98:09:d4:97:a1:10:
         88:83:d6:58:ef:19:d8:96:4e:8b:e9:5b:a1:bc:3a:29:ae:e7:
         e5:7d:1d:b1:cf:af:84:7c:03:36:ca:f1:e9:40:f7:54:b0:06:
         81:89:e6:02:9c:fb:e6:ac:54:89:21:42:d4:5c:4c:81:15:af:
         0d:b1:ff:00:5d:bc:12:1b:df:75:de:20:fe:32:52:b6:b3:04:
         8a:3a:34:9e:81:29:1c:dc:f2:92:f9:5f:c9:fa:57:7a:c4:0f:
         75:77:c0:0e:74:31:90:28:67:11:7e:99:cb:32:8b:1b:b8:2b:
         53:04:b4:f0:ab:4b:a8:ce:5c:2c:ce:c7:0d:8a:d8:fe:41:ed:
         ac:47:13:75:13:52:02:de:e1:45:38:0d:75:b8:ca:e9:2d:a4:
         cc:cb:99:32:40:10:b0:d2:d1:64:eb:b0:53:c2:8e:18:98:54:
         21:4d:87:0d:30:75:93:85:b2:95:7a:50:27:b9:fd:89:1d:46:
         51:05:8a:8f:3d:6e:ef:b8:b0:ff:f3:50:5f:d4:e6:6c:cf:42:
         77:3c:cb:88:1b:bc:e3:52:f3:56:22:16:92:30:f0:c3:e0:71:
         17:e2:a9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:07 2025 by rpki-client on console.sobornost.net