Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
File:                     Gui5Af04SDp0-NI1YM3fc7TRUGM.mft (raw, json)
Hash identifier:          LzcMFTfJLUUEof6l70CQVhRyJN4iohrCTrNQ8ofQbRc=
Subject key identifier:   8A:57:5F:02:56:64:E0:7C:C6:44:FB:3B:AF:10:84:5E:D6:1A:24:40
Authority key identifier: 1A:E8:B9:01:FD:38:48:3A:74:F8:D2:35:60:CD:DF:73:B4:D1:50:63
Certificate issuer:       /CN=F3644574AF/serialNumber=1AE8B901FD38483A74F8D23560CDDF73B4D15063
Certificate serial:       E3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Gui5Af04SDp0-NI1YM3fc7TRUGM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
Manifest number:          E3
Signing time:             Sat 26 Apr 2025 04:56:37 +0000
Manifest this update:     Sat 26 Apr 2025 04:56:36 +0000
Manifest next update:     Mon 28 Apr 2025 04:56:36 +0000
Files and hashes:         1: Gui5Af04SDp0-NI1YM3fc7TRUGM.crl (hash: 0deFRwSOhnOEu/EPnckZp2ZMIalimyf5Ul6VNfxwhds=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Gui5Af04SDp0-NI1YM3fc7TRUGM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644574AF, serialNumber=1AE8B901FD38483A74F8D23560CDDF73B4D15063
        Validity
            Not Before: Apr 26 04:56:36 2025 GMT
            Not After : Apr 28 04:56:36 2025 GMT
        Subject: CN=680c6785-a78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:bb:e2:1b:ab:75:63:b6:c9:f7:ea:9e:bb:17:
                    40:6b:f7:66:25:5c:05:f3:ee:25:88:12:04:a4:b4:
                    c9:7b:fd:6f:54:65:95:d0:fe:6b:11:84:5f:38:c5:
                    74:fd:b3:8a:20:68:3a:ad:e5:f6:63:aa:75:8b:d6:
                    d1:53:55:69:09:af:fd:65:2d:93:2f:f2:68:24:06:
                    f7:aa:40:21:24:a4:e5:dc:a7:c3:23:54:4f:09:9e:
                    5b:8a:71:d5:62:ae:7a:67:96:5d:7b:a3:38:f7:f4:
                    69:f6:c3:48:75:c1:ea:d8:40:4f:ca:dd:17:d6:4b:
                    94:25:45:90:d0:cf:f4:0c:b2:3c:85:a6:cf:30:52:
                    57:19:d8:63:24:dd:c5:3e:8b:15:15:58:3a:29:5b:
                    99:77:ff:6a:5a:9b:bf:a3:84:16:c6:e2:4c:e1:93:
                    22:95:d3:bd:76:24:7c:fa:1f:71:b0:18:b6:cf:82:
                    a9:10:54:07:70:a2:6e:c4:1d:55:6a:62:35:3c:09:
                    71:36:e9:f2:7a:92:78:fe:52:24:bb:e0:62:bd:a5:
                    6d:60:03:91:90:21:68:c9:39:b9:d4:b0:59:2a:2e:
                    27:de:66:10:ec:e2:09:c5:b7:f5:5e:06:6e:f3:9e:
                    c3:f7:25:c2:85:8e:66:e7:85:5a:dc:f0:ed:38:82:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:57:5F:02:56:64:E0:7C:C6:44:FB:3B:AF:10:84:5E:D6:1A:24:40
            X509v3 Authority Key Identifier:
                keyid:1A:E8:B9:01:FD:38:48:3A:74:F8:D2:35:60:CD:DF:73:B4:D1:50:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Gui5Af04SDp0-NI1YM3fc7TRUGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644574/1EB618CA778011EF9C5A1CB2762E951A/Gui5Af04SDp0-NI1YM3fc7TRUGM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:7f:d6:e6:08:0f:67:fe:00:67:38:e4:8a:a7:e6:58:22:fc:
         f9:b6:4e:ca:44:5d:e6:fa:f6:a1:f3:99:d7:f4:4a:05:c1:aa:
         dd:31:25:a0:3f:49:06:38:c7:eb:e3:21:1d:b0:46:02:48:2c:
         22:92:bf:59:3f:49:d1:ac:b0:b3:81:d4:d7:05:f1:e2:b0:6f:
         5d:85:ce:94:0b:67:5d:77:15:26:ac:a7:e9:a1:6d:ac:3b:cd:
         eb:af:60:a7:a9:93:7e:97:25:c6:28:a6:d6:50:6d:44:5b:7f:
         2e:a7:35:05:58:d8:91:18:fa:8b:8e:ad:87:ac:48:be:b9:be:
         51:3b:88:1d:89:7f:42:b2:ed:6d:12:6c:88:dc:f7:c0:b5:ea:
         dd:a9:9e:42:c3:83:38:55:15:2c:e0:15:cc:6d:f3:9b:e4:6a:
         f2:57:e7:f2:fc:9c:08:c3:fa:fa:d5:6a:0a:ce:de:bf:5a:39:
         25:3b:8c:c1:f7:58:59:a5:ce:72:a5:98:cf:bb:5d:b3:30:38:
         62:e1:83:72:7c:4d:c0:f3:6e:34:9b:ab:2e:d9:48:13:87:92:
         f2:00:94:bf:07:e0:9d:83:4b:70:23:47:1d:7a:93:00:18:d9:
         49:ef:ba:6a:dd:ee:4b:12:8e:ca:41:86:32:4f:d0:9f:92:f9:
         0d:35:e1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:46:55 2025 by rpki-client on console.sobornost.net