Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
File:                     qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft (raw, json)
Hash identifier:          9CRHLtTOdz5Sc65f7Yx07eO8kT6SXqmLwKadO8pO+Mc=
Subject key identifier:   66:53:7E:CB:37:2A:2F:9B:E9:63:81:04:88:04:79:A3:92:78:3A:3D
Authority key identifier: A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53
Certificate issuer:       /CN=F36493E2AF/serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
Certificate serial:       063C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
Manifest number:          0630
Signing time:             Thu 24 Apr 2025 02:09:12 +0000
Manifest this update:     Thu 24 Apr 2025 02:09:11 +0000
Manifest next update:     Sat 26 Apr 2025 02:09:11 +0000
Files and hashes:         1: qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl (hash: q16XmdOvzzTZ3qcFs+ndWouJAIBDvEh8af/6Y8mPtls=)
                          2: 751920CE7E9611EE8D4DD95B4AD9E6FC.roa (hash: CNMY5e2drHouzm76FLKpVmYcbX4KrOkhsePbbpZjJY8=)
                          3: 44E2BFD6BEB611EEB2F13E55775412E6.roa (hash: 6BGl+d3/Qn7Bi9MGN7eS+0tAvnZagMzcLCnJkf/75K0=)
                          4: 1516EA16764311EB901D143DF8AEA228.roa (hash: NKQ3jb8Jf2A8DHKj6MSRen4+1RRngARTbxS7x9DY4og=)
                          5: 9C0922A07CDA11EE826623584AD9E6FC.roa (hash: uECmY3jV3qiuTfMrOHue7zCKctO8EvT0qW7ZBh1T6zE=)
                          6: B27462D677CE11EE92D72D474AD9E6FC.roa (hash: jAN4r34ofSFeK8zRXd4T/2zGryJDsF7FCE205yiNRzU=)
                          7: 2DA2A10A7E9811EEB624E1614AD9E6FC.roa (hash: z/8MHOUuN5njwZAEAwp8qmMotdx3/iv3rmL5RO3TKDM=)
                          8: 9041503A357F11ED918CA4F4F1222468.roa (hash: d9OBwQy2VVd8P9taUy3HKMMWH3ZjWatzRT+TYQdJ6mE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Apr 2025 00:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1596 (0x63c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36493E2AF, serialNumber=A8A1AF02F96C1BA92D93A522CABE9ED8E5295153
        Validity
            Not Before: Apr 24 02:09:11 2025 GMT
            Not After : Apr 26 02:09:11 2025 GMT
        Subject: CN=68099d48-950d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:89:5f:49:ae:43:44:8e:d3:c5:bc:bb:9d:16:
                    61:df:29:1e:cc:82:58:a7:ec:13:18:a9:2f:ed:b5:
                    9a:86:11:8d:75:06:63:70:fb:0e:d8:46:dd:68:ac:
                    cd:1a:20:2f:82:d0:9d:3a:a1:c1:e5:73:45:7c:64:
                    d1:b7:08:cc:de:18:02:76:6a:47:f3:7b:ee:b2:c5:
                    5b:a1:bc:21:5d:97:5f:56:8d:05:85:20:f5:5f:17:
                    fb:d3:88:d5:9b:6f:fb:83:18:ba:a6:ca:c4:f4:f8:
                    14:86:3c:91:54:aa:6c:74:20:fa:73:57:61:4a:71:
                    4e:89:38:88:b7:33:75:76:2e:4d:0e:cb:bb:4e:bd:
                    37:8c:be:a1:74:36:32:f7:3a:ed:1b:b6:40:50:ac:
                    d2:34:59:ba:5b:fc:85:c3:dd:77:c8:ba:c7:b5:67:
                    ea:32:f6:d8:51:20:73:d5:7d:5e:f9:b7:00:3e:71:
                    73:92:cc:4c:90:ef:d9:6b:10:b2:13:a9:aa:7e:84:
                    0b:87:dc:d6:77:ce:81:b7:20:cc:06:ad:41:73:8a:
                    1a:e9:3c:a3:76:6f:6b:52:c6:5c:a0:5c:63:18:37:
                    e3:6f:b0:dd:31:be:cd:3f:07:69:bc:f2:72:71:89:
                    76:41:50:8d:75:e4:ff:46:52:74:b2:6d:93:7f:28:
                    8e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:53:7E:CB:37:2A:2F:9B:E9:63:81:04:88:04:79:A3:92:78:3A:3D
            X509v3 Authority Key Identifier:
                keyid:A8:A1:AF:02:F9:6C:1B:A9:2D:93:A5:22:CA:BE:9E:D8:E5:29:51:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36493E2/CD0DCC106FDC11EB9FF77B58F8AEA228/qKGvAvlsG6ktk6Uiyr6e2OUpUVM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:b1:2e:c5:ea:a3:76:8e:fb:39:2c:85:c7:73:f5:83:97:29:
         79:20:a0:77:3e:21:db:a2:54:20:51:7c:dc:1f:97:39:d8:aa:
         d8:d9:67:d2:4c:7a:49:e2:02:a7:d6:81:32:98:a2:a2:9a:f8:
         a0:30:29:c4:c1:cb:39:7a:0e:99:e9:dd:43:6d:60:88:74:68:
         48:1f:38:fb:af:36:49:2b:9e:f7:e2:99:72:0b:01:8c:94:26:
         94:3c:b0:0b:6f:5f:44:86:eb:6a:a5:66:44:c7:a1:88:48:02:
         7c:0d:12:bb:b2:27:4a:92:ee:8e:11:87:55:64:fb:b5:a6:e4:
         80:c7:26:f1:8f:66:27:f7:fb:b2:87:bd:1c:d0:f5:02:6c:15:
         97:77:6b:28:b0:94:06:fc:dc:5a:a9:df:54:2f:fa:ae:b6:4e:
         56:12:a5:4a:07:16:2d:34:23:08:40:72:5c:45:4c:6d:1e:1a:
         70:8a:4f:af:e4:0a:2a:4a:7e:fb:d7:f2:b7:49:6d:ed:b5:d6:
         57:bb:77:4d:54:3e:73:5b:d6:b3:dd:b8:75:c8:8d:fa:2c:82:
         c0:31:f2:09:82:6b:27:71:4e:9d:fe:23:fa:5d:81:71:b8:ca:
         0a:df:4a:6c:3d:43:c5:58:e5:b1:44:0d:e2:53:e2:bf:3b:ba:
         67:ce:cc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:33:57 2025 by rpki-client on console.sobornost.net