Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
File:                     gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft (raw, json)
Hash identifier:          OLUSx046PuO6/8dGVjb34Y1iaJ5hVBQaIwNelNX8vhs=
Subject key identifier:   A9:F8:5F:DF:EC:CB:34:8B:6B:74:F9:4D:2B:2D:0E:DD:49:B8:6B:90
Authority key identifier: 80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38
Certificate issuer:       /CN=F364744FAF/serialNumber=80AF060E4640C32653D0F00C3024514A9F149538
Certificate serial:       0723
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
Manifest number:          0721
Signing time:             Sat 26 Apr 2025 01:57:49 +0000
Manifest this update:     Sat 26 Apr 2025 01:57:49 +0000
Manifest next update:     Mon 28 Apr 2025 01:57:49 +0000
Files and hashes:         1: gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl (hash: N0bpIyLhwByLGKXc2zVKU9RfbDgw+aRdQpipZMXE4YM=)
                          2: CB8C83A0C88511ED940C44A3F1222468.roa (hash: FlRKAeloaznza0Vyrk2FzdR3/23YEw2VW6tyntdnTAo=)
                          3: 0331A55AC88711EDA1B9D1A6F1222468.roa (hash: Z5DAUvIjXoBx4GGCuvXKQGLH4Jh9pFC0RHSj+G6qEeM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1827 (0x723)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364744FAF, serialNumber=80AF060E4640C32653D0F00C3024514A9F149538
        Validity
            Not Before: Apr 26 01:57:49 2025 GMT
            Not After : Apr 28 01:57:49 2025 GMT
        Subject: CN=680c3d9d-b702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ab:07:ce:79:09:2b:00:d0:db:45:52:ae:56:
                    ea:7c:a5:02:5e:00:4a:fb:3c:7c:88:c6:16:30:1d:
                    9e:b6:bc:df:f7:6d:dd:07:7e:98:c4:48:0d:84:5b:
                    82:dd:3f:6e:f2:e8:23:e0:d4:c4:4e:cb:ee:32:99:
                    76:47:c4:cc:3b:ec:50:f7:b7:d3:2c:b0:41:e4:73:
                    77:d8:d2:02:7f:e3:fb:58:a6:83:a6:b5:51:8f:87:
                    28:9f:e1:b9:28:9c:99:d8:fb:d1:b4:c5:ad:56:df:
                    ce:fc:70:6d:bb:64:ac:11:90:5f:d9:98:1c:f1:c8:
                    67:86:92:32:f6:04:f1:bb:90:01:93:74:26:d0:a1:
                    57:71:97:88:6b:ab:82:b5:8c:17:fe:f6:a9:e5:8d:
                    fb:ee:1c:9a:67:9d:68:57:1a:74:b1:38:c8:dd:65:
                    e2:71:85:20:4b:ec:14:03:69:0e:d3:9d:b6:92:27:
                    71:85:17:c5:42:e5:5e:81:a2:91:fd:b7:c8:f9:71:
                    ff:e4:a2:3c:86:dd:41:94:3c:b1:7a:cf:5a:7b:b4:
                    1b:4e:28:96:09:db:5b:61:7a:42:b0:60:8f:aa:66:
                    7d:bb:e3:4a:41:dd:c8:24:1d:3b:70:b5:fa:cf:de:
                    1a:db:a7:af:d2:f9:38:a9:fa:9d:d2:73:fa:4d:ef:
                    58:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F8:5F:DF:EC:CB:34:8B:6B:74:F9:4D:2B:2D:0E:DD:49:B8:6B:90
            X509v3 Authority Key Identifier:
                keyid:80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:e5:85:6f:de:40:35:93:5e:10:a8:de:fc:95:28:a7:8f:b3:
         b6:91:95:c8:2c:c9:0c:94:05:d7:57:2e:2d:d1:5c:16:0a:7b:
         5e:ad:49:ef:1b:fb:47:7e:6b:07:5b:ef:52:65:50:a2:11:6c:
         40:8c:02:e7:7e:d1:04:ba:46:e1:71:0e:77:15:38:6c:e2:9b:
         8c:cc:ef:10:b5:0e:1f:84:51:29:2f:94:62:e5:8f:f2:1f:d8:
         25:f9:e3:f3:28:08:9f:05:f7:03:90:fc:17:77:bd:4e:f8:c4:
         37:80:18:cb:bd:c8:aa:b7:87:a5:30:8f:b3:d9:82:2b:ef:ed:
         94:a2:f6:36:e5:4b:07:c3:99:5e:23:f5:3c:0f:59:8d:dc:c6:
         ee:a2:f5:0a:40:a8:9d:38:48:67:ae:8d:f2:54:0d:58:b3:f9:
         19:15:fa:13:ab:3b:8f:4f:cc:94:b6:69:73:12:51:ce:2c:6b:
         df:dc:26:bb:40:f5:12:bd:bd:b7:54:58:8c:6e:2e:fa:89:25:
         fb:41:fc:72:46:61:4d:8e:88:70:13:3e:48:e6:47:87:48:0d:
         c7:e3:e0:a7:87:30:c6:f1:69:cc:f4:77:0c:a5:92:d2:a6:5c:
         c0:2b:3f:2b:18:52:4d:7d:94:ed:eb:b8:a3:d5:5a:73:b7:94:
         f4:39:5b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:17:10 2025 by rpki-client on console.sobornost.net