Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
File:                     x_9uywvS7BI1alQX4xxzC5BQlBE.mft (raw, json)
Hash identifier:          SxIsVZ03jcYS2yqy316RXaLuDSkJC9B0xS7Sqp3eaP4=
Subject key identifier:   C4:4E:FE:F3:D0:52:B0:E2:66:38:B1:F0:66:1E:02:17:17:E8:3E:7F
Authority key identifier: C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11
Certificate issuer:       /CN=F3639A71AF/serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
Certificate serial:       01EE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
Manifest number:          01EC
Signing time:             Sat 26 Apr 2025 04:16:19 +0000
Manifest this update:     Sat 26 Apr 2025 04:16:18 +0000
Manifest next update:     Mon 28 Apr 2025 04:16:18 +0000
Files and hashes:         1: x_9uywvS7BI1alQX4xxzC5BQlBE.crl (hash: cixqwzGh7jpRqHq0QbA9pHEnrrxaXvTXnijTOZtA2nk=)
                          2: 209064A80ECA11EFA0FB8D6C017001B1.roa (hash: SYHt2ENsggByHF7FNfIiJDtYCTGlxeYoFHTIRbjH6Hc=)
                          3: 3906A38AAD5411EEB67B65B2775412E6.roa (hash: ReFNAC4d+VQBlR/AEunK+azob89VljT5w2yD48BTB3A=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 494 (0x1ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639A71AF, serialNumber=C7FF6ECB0BD2EC12356A5417E31C730B90509411
        Validity
            Not Before: Apr 26 04:16:18 2025 GMT
            Not After : Apr 28 04:16:18 2025 GMT
        Subject: CN=680c5e13-eb55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:05:ca:ff:01:3a:4d:69:ae:fb:db:4d:19:
                    25:02:ca:35:37:4b:d8:37:5a:00:72:c8:5d:49:b5:
                    21:ae:ed:94:16:a8:84:62:92:ff:ea:01:0b:a8:4b:
                    97:e9:f8:49:bb:e9:23:3c:47:54:c7:63:3c:56:de:
                    1a:96:ad:5e:67:54:a1:95:9e:c8:85:b1:a1:49:f3:
                    c7:bb:b0:a0:32:a3:59:c6:8c:99:47:8a:f5:4d:af:
                    65:2d:96:e4:9b:07:63:5d:68:dc:21:12:bc:c1:22:
                    0c:34:43:0b:50:c9:51:56:58:3a:5d:08:c8:2e:29:
                    74:58:3b:8d:39:00:53:1f:24:3d:a7:f1:64:da:1b:
                    c4:52:14:0f:7e:4e:80:2c:6e:61:46:52:78:ba:d1:
                    71:21:07:97:4d:c3:b9:d1:8b:83:90:6c:97:75:97:
                    71:bd:51:28:fc:d7:84:3e:d3:5e:bd:94:61:b0:9a:
                    69:2f:a0:d0:42:bf:89:9a:76:c4:5c:91:2c:6d:b5:
                    02:21:59:50:22:6a:0e:f0:24:a9:80:28:d4:c3:f0:
                    7f:31:7b:00:9e:15:f6:f8:a9:b7:a2:74:9e:72:51:
                    79:e4:6f:9b:31:ff:f0:b9:1b:3e:f0:a5:1c:d4:ac:
                    8a:89:b6:cb:46:a4:66:34:85:2b:35:0f:1e:5c:97:
                    2d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:4E:FE:F3:D0:52:B0:E2:66:38:B1:F0:66:1E:02:17:17:E8:3E:7F
            X509v3 Authority Key Identifier:
                keyid:C7:FF:6E:CB:0B:D2:EC:12:35:6A:54:17:E3:1C:73:0B:90:50:94:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x_9uywvS7BI1alQX4xxzC5BQlBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639A71/42C01EDAAD5211EE97470BAF775412E6/x_9uywvS7BI1alQX4xxzC5BQlBE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f0:af:59:46:72:a2:e1:d0:84:d7:e1:a8:98:f3:da:ad:a4:
         7c:d7:14:59:70:20:66:36:35:4c:74:37:8a:d8:77:11:45:9f:
         5d:1b:8d:0e:98:57:f0:00:94:42:34:44:1e:7e:13:6b:aa:b4:
         06:76:fa:48:8a:7e:55:c6:18:0f:af:ff:70:cc:15:f0:64:f4:
         7d:19:fb:52:0a:18:92:db:53:2f:7e:8b:bf:70:7e:f6:6a:75:
         24:71:d8:3c:13:30:04:43:14:b6:13:65:a1:90:53:c1:3d:02:
         86:7c:59:4d:c4:5f:84:be:3b:17:0d:80:5c:f2:15:f2:57:7d:
         d4:cd:a1:a7:f6:30:83:67:e8:09:3a:64:e9:cf:7c:07:ba:fe:
         80:bc:14:b3:25:1f:fe:76:99:48:a5:dc:82:38:e0:91:c9:46:
         84:99:2a:a7:aa:d8:52:f4:14:57:1d:3a:e4:61:e6:e0:7c:f8:
         d4:2b:d7:d3:b8:6c:80:8b:cf:1f:46:db:24:20:df:a5:67:ae:
         ec:c5:1a:5d:3c:fe:df:80:35:c8:a7:54:23:e5:24:ab:64:bd:
         54:8a:1b:3c:cb:4b:a7:41:9a:ac:74:ef:47:5b:a6:d0:f3:cf:
         2c:c3:2d:ba:38:cc:99:3a:08:7b:ee:ee:02:0c:ac:e5:6e:a0:
         d9:98:0d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:17:08 2025 by rpki-client on console.sobornost.net