Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
File:                     xtzY6Teskg9K_SJ71pwLimdpcZA.mft (raw, json)
Hash identifier:          uYqCgX1JQwpQk2/X9oqwTGeDt88HznThIPbDleiIwP4=
Subject key identifier:   82:DA:8D:B2:19:41:17:2F:E7:9D:9A:76:D1:BE:0E:0F:82:3D:C2:33
Authority key identifier: C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
Certificate issuer:       /CN=F3642C0FAF/serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
Certificate serial:       046F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
Manifest number:          046F
Signing time:             Fri 25 Apr 2025 02:51:39 +0000
Manifest this update:     Fri 25 Apr 2025 02:51:38 +0000
Manifest next update:     Sun 27 Apr 2025 02:51:38 +0000
Files and hashes:         1: xtzY6Teskg9K_SJ71pwLimdpcZA.crl (hash: 8ttSLCeZtLxCY/7cRwc8d69PR6DbzL6xrlQe2xN3f9k=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1135 (0x46f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642C0FAF, serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
        Validity
            Not Before: Apr 25 02:51:38 2025 GMT
            Not After : Apr 27 02:51:38 2025 GMT
        Subject: CN=680af8bb-e432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:c6:9c:12:e3:28:bc:e9:36:f1:c2:b5:46:
                    20:48:04:6f:61:3c:5a:d4:72:9e:96:21:53:bb:be:
                    a9:65:cd:60:a9:26:98:aa:74:c5:eb:a6:c0:e8:53:
                    5a:33:35:e6:4a:e7:62:8f:f1:2f:28:d2:f9:96:e4:
                    f0:14:21:83:10:d2:2d:3c:00:3f:fd:2f:eb:3a:1a:
                    f7:a9:7f:2b:11:dd:98:66:2d:80:93:eb:ee:20:f9:
                    0d:17:db:56:12:10:50:52:11:62:27:a0:3d:19:34:
                    55:d0:d8:62:6d:03:d1:73:65:0e:48:3b:1d:9f:e9:
                    68:a6:9d:10:b6:1e:6b:e2:e2:eb:33:5b:a7:87:5b:
                    35:b4:e2:58:cf:8d:3e:18:2e:59:66:06:c4:2d:00:
                    5f:03:f8:e1:85:94:3c:57:ee:41:79:a9:75:6e:8a:
                    70:3e:71:8e:70:45:d9:5c:d2:84:5e:e3:53:13:dc:
                    e9:16:c4:62:48:08:00:ae:ec:1b:84:e0:3e:47:7a:
                    d3:a4:ff:89:c3:6d:6a:15:e1:66:84:3f:dd:3a:52:
                    9e:27:2b:12:6f:e0:85:32:cd:78:bb:33:2e:70:0c:
                    54:a0:15:55:b3:d4:05:c8:f5:6e:8d:ac:72:6f:36:
                    bc:0b:3d:0c:22:26:c6:6d:2d:6f:23:dd:c3:99:69:
                    76:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:DA:8D:B2:19:41:17:2F:E7:9D:9A:76:D1:BE:0E:0F:82:3D:C2:33
            X509v3 Authority Key Identifier:
                keyid:C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:eb:64:1b:b0:d9:52:38:41:a8:73:a7:b0:9e:7a:db:92:ac:
         09:03:0e:ec:77:4a:45:7d:ba:dd:1e:0d:e5:e3:ef:26:e0:78:
         db:f4:ae:88:78:c3:66:68:14:7a:91:21:ae:14:ea:a0:aa:3d:
         c6:1c:40:8b:1b:29:bb:34:55:0d:54:ef:6d:c5:53:9e:4a:d5:
         b2:5d:31:6d:d7:bf:28:0c:6d:e0:e8:55:22:cf:64:a2:20:78:
         93:18:6c:7d:26:64:9d:bf:22:74:f0:ae:27:e8:b7:56:86:c7:
         de:f9:30:94:99:98:61:df:bd:da:26:59:3a:80:ec:74:ed:32:
         44:e3:8b:53:23:ed:6b:e3:c9:b6:ca:4f:01:00:5e:84:5c:da:
         ca:37:6b:1f:44:ef:a5:06:4b:23:5a:87:39:85:b1:72:2f:ed:
         5c:f9:32:7b:ac:5e:b9:a1:98:33:bc:c6:3c:2f:f5:36:60:95:
         2b:c3:0a:1b:ed:41:98:04:84:1f:12:11:12:7c:77:45:c5:94:
         a5:06:2f:11:00:05:22:26:d6:ef:6a:17:c0:50:94:e8:81:c6:
         46:9d:4a:8b:ff:12:3e:07:0d:27:3d:a2:ce:a4:d8:d1:1e:6b:
         8d:5d:ab:5a:c9:5a:fa:1f:00:7b:09:2f:c6:c9:20:e7:e1:76:
         9f:5c:a0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:08 2025 by rpki-client on console.sobornost.net