Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.mft
File:                     53ShMCOPlyuu0yi9QDj8r4LXhLc.mft (raw, json)
Hash identifier:          r8dNZYpQs94EBDViovxcfMUxpEH3INLoXhXGgCIZNnQ=
Subject key identifier:   A7:CE:1C:7A:69:FD:FD:E1:35:0D:8E:E7:09:76:5D:30:DB:1E:73:04
Authority key identifier: E7:74:A1:30:23:8F:97:2B:AE:D3:28:BD:40:38:FC:AF:82:D7:84:B7
Certificate issuer:       /CN=F364ECB6AF/serialNumber=E774A130238F972BAED328BD4038FCAF82D784B7
Certificate serial:       0425
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/53ShMCOPlyuu0yi9QDj8r4LXhLc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.mft
Manifest number:          0424
Signing time:             Fri 25 Apr 2025 03:02:04 +0000
Manifest this update:     Fri 25 Apr 2025 03:02:04 +0000
Manifest next update:     Sun 27 Apr 2025 03:02:04 +0000
Files and hashes:         1: 53ShMCOPlyuu0yi9QDj8r4LXhLc.crl (hash: UIPv+laH0zputAZcie3g/RY0cb7G00/ZfbAcusmU0iA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/53ShMCOPlyuu0yi9QDj8r4LXhLc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364ECB6AF, serialNumber=E774A130238F972BAED328BD4038FCAF82D784B7
        Validity
            Not Before: Apr 25 03:02:04 2025 GMT
            Not After : Apr 27 03:02:04 2025 GMT
        Subject: CN=680afb2c-1cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4a:00:36:ae:f2:d6:60:6a:f5:6e:ff:32:11:
                    f1:b7:c2:97:1b:1d:0e:aa:03:75:a6:f8:2b:96:0c:
                    23:ec:92:08:07:df:f6:7c:c5:78:7e:17:55:b6:99:
                    f7:c8:61:01:18:da:98:7f:59:8c:60:2d:ea:05:39:
                    27:43:45:c4:6a:4d:7a:82:0d:9e:e8:e5:c7:af:f7:
                    e0:93:78:78:86:e0:df:16:04:d6:b6:0e:fe:ec:d0:
                    c4:56:5e:a2:57:23:d8:53:98:96:16:1a:b4:04:0b:
                    56:4f:42:94:76:57:02:8e:6d:b5:85:2b:e1:bc:19:
                    0c:9d:02:1c:cb:46:78:2f:b1:c6:1e:50:0c:fc:8a:
                    0d:15:95:36:02:a7:c6:ce:65:03:08:57:74:15:a9:
                    90:f9:bc:67:a5:0c:a7:b9:bd:01:94:11:cc:81:32:
                    d2:23:f1:a2:af:ea:da:21:d1:08:a4:f0:0c:40:fa:
                    5a:88:15:7e:68:7d:85:72:4a:5e:d2:cf:3e:b3:61:
                    9a:64:f3:57:e9:a0:7c:6e:3d:0c:e4:ca:6e:89:97:
                    d6:22:3d:56:cf:7c:9f:46:a4:c4:ba:7e:34:a3:15:
                    d9:bd:8e:cb:ab:0f:92:14:c4:23:3c:05:86:1c:42:
                    94:c8:ff:db:ae:aa:cb:a9:02:a9:df:e0:e7:70:6c:
                    d8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:CE:1C:7A:69:FD:FD:E1:35:0D:8E:E7:09:76:5D:30:DB:1E:73:04
            X509v3 Authority Key Identifier:
                keyid:E7:74:A1:30:23:8F:97:2B:AE:D3:28:BD:40:38:FC:AF:82:D7:84:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/53ShMCOPlyuu0yi9QDj8r4LXhLc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364ECB6/8696F7A6FDD511EC94AA4FCBF1222468/53ShMCOPlyuu0yi9QDj8r4LXhLc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:cc:19:e3:6e:8b:02:43:69:2e:07:d5:c9:33:3f:16:fd:06:
         b1:62:f6:aa:55:73:98:86:66:7b:21:03:3b:03:20:e8:95:18:
         0e:a7:fa:44:76:55:c1:6c:b1:09:9d:1f:6f:b0:3c:3d:88:d2:
         02:d3:a2:16:de:bd:e0:3f:87:b0:a5:28:22:37:b0:3f:b4:6a:
         c8:a9:b0:2d:d2:ff:f0:6e:74:d9:2f:fd:ec:c3:40:7c:f6:77:
         df:4d:55:51:1f:19:1f:97:40:1d:96:c3:df:d2:92:97:16:fe:
         dc:08:42:1c:f3:e5:d1:5e:e8:d6:7b:91:d1:25:be:ce:31:f0:
         6a:8c:11:0d:aa:b1:c4:be:7f:0b:93:06:e6:ee:ae:98:55:af:
         94:c0:e1:20:46:55:c7:93:3c:63:8d:8d:50:f5:36:d9:6a:6a:
         9b:05:08:0a:ff:8e:31:39:2f:1a:b4:d7:ec:33:91:41:d7:52:
         30:df:26:41:cc:15:53:e7:aa:05:36:3a:92:bf:a5:52:d2:74:
         8b:48:5e:39:94:dc:42:48:7b:ef:bc:21:f7:1f:37:36:86:d4:
         ec:c2:32:47:4a:a3:02:e6:b1:b9:7f:27:5c:65:52:e8:c0:fc:
         32:cf:8b:23:70:00:fb:5e:23:76:1a:ab:50:33:12:73:16:fb:
         df:19:59:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:08 2025 by rpki-client on console.sobornost.net