Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
File:                     XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft (raw, json)
Hash identifier:          fucm7WmJAuxhPGT3mrTGd42subJwxYBShpH9CdBODhQ=
Subject key identifier:   67:B8:CB:C6:C8:9F:C5:0D:E2:24:40:8E:D8:B6:59:31:F1:DD:30:A6
Authority key identifier: 5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32
Certificate issuer:       /CN=F3644DABAF/serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
Certificate serial:       0437
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
Manifest number:          0435
Signing time:             Fri 25 Apr 2025 02:59:11 +0000
Manifest this update:     Fri 25 Apr 2025 02:59:10 +0000
Manifest next update:     Sun 27 Apr 2025 02:59:10 +0000
Files and hashes:         1: XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl (hash: tDthtFVCbjr3k9XvIJSApwo332KjOMQJ2B5V4xBQSvY=)
                          2: 23D327BA3B9111EF8FF3E059762E951A.roa (hash: ZJ3xXOXKk7e28z2xIgECvNbu0qz58iXckPb6BX56yvQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1079 (0x437)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DABAF, serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
        Validity
            Not Before: Apr 25 02:59:10 2025 GMT
            Not After : Apr 27 02:59:10 2025 GMT
        Subject: CN=680afa7f-c10a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:b1:18:c4:0c:62:d9:25:25:db:1e:fc:32:0f:
                    70:95:77:2f:c5:d3:4a:d6:a1:98:b6:f3:04:0d:12:
                    f6:6e:6f:93:ad:ef:3f:98:88:78:cb:95:41:1d:49:
                    46:ef:58:7f:2a:5b:66:e6:07:60:d9:f1:f4:66:9b:
                    0f:86:7a:a1:df:e5:ca:e2:27:77:3b:03:5d:10:e2:
                    a1:4c:99:78:bc:20:f3:c9:19:39:e0:31:5a:70:cb:
                    1e:c8:4b:81:6b:24:bb:45:4f:2b:d3:33:c2:d5:6d:
                    c3:af:3e:79:28:8b:74:37:81:0a:ae:ca:ce:0f:73:
                    7e:c8:18:bb:3a:52:2d:d2:6c:0e:c3:87:ee:72:24:
                    dd:87:7c:ff:13:6a:3a:bc:85:f1:21:fd:69:f0:5f:
                    f6:92:20:7e:5c:b3:c3:58:93:b8:f8:84:c2:89:ca:
                    53:0e:93:32:8c:3a:4d:c2:34:3a:5f:e3:16:37:b6:
                    10:0d:2e:ef:9b:31:fe:5e:85:7d:d2:98:aa:e3:a5:
                    fb:a8:a7:75:90:5b:37:8c:e8:ef:ba:f6:bf:7d:1b:
                    1c:c5:19:f5:00:b6:3c:1f:36:82:8c:a6:48:89:1f:
                    8f:39:93:cc:0d:6a:34:1b:b3:9f:c2:8d:9d:f1:fa:
                    b9:9a:84:ec:bb:f8:65:63:b5:2d:6b:23:6d:23:57:
                    79:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:B8:CB:C6:C8:9F:C5:0D:E2:24:40:8E:D8:B6:59:31:F1:DD:30:A6
            X509v3 Authority Key Identifier:
                keyid:5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:2b:8d:f8:b8:b0:70:be:42:24:8a:0b:97:b9:31:c7:db:41:
         68:60:8f:d4:d9:94:2e:0f:aa:eb:34:84:6a:fa:93:35:56:36:
         33:36:d0:ba:7f:3e:40:a7:0d:6f:93:e3:d4:51:2f:08:c6:6c:
         9d:77:08:d1:a4:ce:c0:13:3a:44:9f:db:47:9f:e5:94:ae:e2:
         a1:54:b5:a5:52:53:11:b3:e0:31:7d:52:66:1d:f3:b4:b0:f9:
         90:81:2a:8d:b8:9a:0a:42:bd:92:a3:ca:01:56:ab:fa:70:40:
         45:98:7e:07:6d:20:25:00:37:96:2b:12:48:9d:25:6a:22:b8:
         b8:cb:1f:c1:e0:a0:60:e2:f5:1b:5b:6e:bb:a5:52:5b:4e:19:
         44:36:e8:56:9e:9f:3f:54:f6:f7:4e:fe:b7:26:a9:fc:c1:19:
         9e:27:08:5c:c0:42:50:2a:26:66:10:6c:df:bc:c7:13:df:08:
         3b:0f:1a:1e:38:51:89:f3:94:f2:f7:5d:66:dc:a1:b8:c6:21:
         6b:06:16:7c:97:45:d4:55:0e:fa:94:98:7e:8b:ec:1b:12:97:
         d7:e4:45:0a:b0:de:16:b9:ba:7c:c0:0c:7a:ce:77:0d:12:45:
         75:b2:d4:54:80:75:ce:ad:32:c6:52:0b:6d:d0:5c:4b:4e:f4:
         1b:7f:07:f2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDREQUJBRjExMC8GA1UEBRMoNUQ1QzJBOTZCMkUzNzJCMEFDNDdGNDhEQkRDN0Q3
RkQxRkJEQjEzMjAeFw0yNTA0MjUwMjU5MTBaFw0yNTA0MjcwMjU5MTBaMBgxFjAU
BgNVBAMTDTY4MGFmYTdmLWMxMGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDhsRjEDGLZJSXbHvwyD3CVdy/F00rWoZi28wQNEvZub5Ot7z+YiHjLlUEd
SUbvWH8qW2bmB2DZ8fRmmw+GeqHf5criJ3c7A10Q4qFMmXi8IPPJGTngMVpwyx7I
S4FrJLtFTyvTM8LVbcOvPnkoi3Q3gQquys4Pc37IGLs6Ui3SbA7Dh+5yJN2HfP8T
ajq8hfEh/WnwX/aSIH5cs8NYk7j4hMKJylMOkzKMOk3CNDpf4xY3thANLu+bMf5e
hX3SmKrjpfuop3WQWzeM6O+69r99GxzFGfUAtjwfNoKMpkiJH485k8wNajQbs5/C
jZ3x+rmahOy7+GVjtS1rI20jV3lXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUZ7jL
xsifxQ3iJECO2LZZMfHdMKYwHwYDVR0jBBgwFoAUXVwqlrLjcrCsR/SNvcfX/R+9
sTIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ0REFCL0I1MTFGN0U0RjI0OTExRUNBMjc5MTE5MkYxMjIyNDY4L1hWd3Fs
ckxqY3JDc1JfU052Y2ZYX1ItOXNUSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hWd3FsckxqY3JDc1JfU052Y2ZYX1ItOXNUSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDREQUIvQjUxMUY3RTRGMjQ5MTFFQ0EyNzkxMTkyRjEy
MjI0NjgvWFZ3cWxyTGpjckNzUl9TTnZjZlhfUi05c1RJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKK434uLBwvkIkiguXuTHH20FoYI/U
2ZQuD6rrNIRq+pM1VjYzNtC6fz5Apw1vk+PUUS8IxmyddwjRpM7AEzpEn9tHn+WU
ruKhVLWlUlMRs+AxfVJmHfO0sPmQgSqNuJoKQr2So8oBVqv6cEBFmH4HbSAlADeW
KxJInSVqIri4yx/B4KBg4vUbW267pVJbThlENuhWnp8/VPb3Tv63Jqn8wRmeJwhc
wEJQKiZmEGzfvMcT3wg7DxoeOFGJ85Ty911m3KG4xiFrBhZ8l0XUVQ76lJh+i+wb
EpfX5EUKsN4Wubp8wAx6zncNEkV1stRUgHXOrTLGUgtt0FxLTvQbfwfy
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:08 2025 by rpki-client on console.sobornost.net