Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
File:                     XudwaWdbdcoke_xc0zALF7WznDQ.mft (raw, json)
Hash identifier:          5gQQA47BBtghOmPUVcIZ0C8u0xQglyF6ZmR7xhBVQ38=
Subject key identifier:   FB:82:EE:42:24:5D:C0:D1:70:6F:30:6A:FF:0F:7B:63:63:24:B7:BA
Authority key identifier: 5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
Certificate issuer:       /CN=F3646008AF/serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Certificate serial:       06A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
Manifest number:          06A7
Signing time:             Fri 25 Apr 2025 02:00:48 +0000
Manifest this update:     Fri 25 Apr 2025 02:00:47 +0000
Manifest next update:     Sun 27 Apr 2025 02:00:47 +0000
Files and hashes:         1: XudwaWdbdcoke_xc0zALF7WznDQ.crl (hash: 56RTgCDSURZBnLKpCgCSAWy72rOKFhWL+aHrFJLhJNM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1703 (0x6a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646008AF, serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
        Validity
            Not Before: Apr 25 02:00:47 2025 GMT
            Not After : Apr 27 02:00:47 2025 GMT
        Subject: CN=680aecd0-5dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:3b:73:29:78:94:2e:e4:af:b7:da:d4:0b:
                    84:18:49:11:46:85:4b:25:66:f0:fa:b4:d5:09:52:
                    e0:44:92:71:65:f3:16:ef:72:af:b0:79:8f:d6:7c:
                    81:5e:ea:d7:ae:78:a8:23:72:ef:11:3a:4c:e5:7a:
                    5d:ff:cd:6a:f9:08:5e:03:e1:3e:93:66:8a:d2:51:
                    be:12:b6:30:4a:46:7b:40:76:1f:18:6c:77:a5:56:
                    ab:81:62:a4:60:36:a5:3f:30:ab:de:7c:78:7e:b4:
                    ff:b7:17:b8:ff:9a:57:15:aa:ec:4b:28:0a:2b:6a:
                    9d:8c:f9:0a:f0:e7:e5:8e:3d:22:94:80:0b:8d:65:
                    32:89:93:86:b7:9f:83:df:6e:b0:19:d3:f6:9d:bf:
                    05:ff:cf:6c:a5:ef:34:4b:9f:0c:da:0b:6c:ca:77:
                    92:d4:18:19:bf:bd:4a:b9:f1:34:b3:e0:45:d7:64:
                    68:35:89:8b:df:f4:e1:3c:a2:69:d2:ed:5d:ec:0f:
                    d2:a9:0e:64:d3:03:20:c0:a3:39:30:6c:ed:c5:fc:
                    3a:2e:23:0d:d5:ef:40:8f:02:04:16:32:89:ee:9f:
                    12:01:95:13:1c:d5:df:56:23:53:c6:d2:32:9f:2f:
                    95:6e:1e:c0:5f:11:de:b8:e4:a6:80:4d:38:fb:31:
                    11:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:82:EE:42:24:5D:C0:D1:70:6F:30:6A:FF:0F:7B:63:63:24:B7:BA
            X509v3 Authority Key Identifier:
                keyid:5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:3e:f7:9b:cc:2f:33:69:98:ff:dc:f7:16:0d:25:d6:39:be:
         4d:ee:c4:2e:30:c5:52:d3:b7:be:2f:84:8e:ae:06:c4:5b:b1:
         92:6a:73:0a:58:20:ec:00:4d:42:cc:8e:b5:d5:64:b3:3f:ec:
         1a:52:54:82:8a:04:6f:8c:6b:1d:a9:5e:b2:0d:b7:58:25:8e:
         25:d8:d5:f5:e8:69:91:93:e2:fd:f2:ac:8b:68:6c:f0:d7:65:
         31:27:b5:ec:81:44:c6:06:0b:3a:76:f5:9f:1f:d6:60:38:d4:
         fd:49:e9:15:6d:c9:5d:a4:47:f9:dc:fd:92:67:83:0e:56:fc:
         80:7b:86:85:cd:32:8e:24:a6:bd:9c:f1:3f:af:e4:75:92:1d:
         83:e6:8d:67:b1:53:66:ab:f6:e5:dc:74:27:21:9d:51:93:13:
         73:d8:2b:47:14:49:a0:fb:66:8c:ae:a2:52:f7:de:5f:09:9f:
         cd:9b:6f:0a:30:df:db:70:eb:fb:5d:fa:5b:d5:77:55:ff:05:
         61:19:39:ba:ee:53:1f:fc:35:52:eb:6e:8a:84:dc:9e:48:6d:
         cd:a4:7c:76:36:59:9f:cf:d1:8c:ca:2d:2e:e5:6a:d7:a4:5c:
         b7:a4:aa:00:da:7e:dd:ef:91:6b:6c:44:aa:e7:0f:8e:89:8c:
         ab:1f:94:35
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBqcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDYwMDhBRjExMC8GA1UEBRMoNUVFNzcwNjk2NzVCNzVDQTI0N0JGQzVDRDMzMDBC
MTdCNUIzOUMzNDAeFw0yNTA0MjUwMjAwNDdaFw0yNTA0MjcwMjAwNDdaMBgxFjAU
BgNVBAMTDTY4MGFlY2QwLTVkYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDB6TtzKXiULuSvt9rUC4QYSRFGhUslZvD6tNUJUuBEknFl8xbvcq+weY/W
fIFe6teueKgjcu8ROkzlel3/zWr5CF4D4T6TZorSUb4StjBKRntAdh8YbHelVquB
YqRgNqU/MKvefHh+tP+3F7j/mlcVquxLKAorap2M+Qrw5+WOPSKUgAuNZTKJk4a3
n4PfbrAZ0/advwX/z2yl7zRLnwzaC2zKd5LUGBm/vUq58TSz4EXXZGg1iYvf9OE8
omnS7V3sD9KpDmTTAyDAozkwbO3F/DouIw3V70CPAgQWMonunxIBlRMc1d9WI1PG
0jKfL5VuHsBfEd645KaATTj7MRHvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+4Lu
QiRdwNFwbzBq/w97Y2Mkt7owHwYDVR0jBBgwFoAUXudwaWdbdcoke/xc0zALF7Wz
nDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ2MDA4Lzc4NTE3NUNBMDg4RDExRUJBQUQxQkM1QkY4QUVBMjI4L1h1ZHdh
V2RiZGNva2VfeGMwekFMRjdXem5EUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1h1ZHdhV2RiZGNva2VfeGMwekFMRjdXem5EUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDYwMDgvNzg1MTc1Q0EwODhEMTFFQkFBRDFCQzVCRjhB
RUEyMjgvWHVkd2FXZGJkY29rZV94YzB6QUxGN1d6bkRRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDCPvebzC8zaZj/3PcWDSXWOb5N7sQu
MMVS07e+L4SOrgbEW7GSanMKWCDsAE1CzI611WSzP+waUlSCigRvjGsdqV6yDbdY
JY4l2NX16GmRk+L98qyLaGzw12UxJ7XsgUTGBgs6dvWfH9ZgONT9SekVbcldpEf5
3P2SZ4MOVvyAe4aFzTKOJKa9nPE/r+R1kh2D5o1nsVNmq/bl3HQnIZ1RkxNz2CtH
FEmg+2aMrqJS995fCZ/Nm28KMN/bcOv7Xfpb1XdV/wVhGTm67lMf/DVS626KhNye
SG3NpHx2Nlmfz9GMyi0u5WrXpFy3pKoA2n7d75FrbESq5w+OiYyrH5Q1
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:08 2025 by rpki-client on console.sobornost.net