Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.mft
File:                     Ex2mcDsWwqK0jDriza4e_9rh-zo.mft (raw, json)
Hash identifier:          4W5u06dXhqvMevzhAeOqf1qXsmrk0dH0XTtpwsBGczE=
Subject key identifier:   EA:4A:52:DB:03:4E:05:FE:10:EB:C7:E6:39:4B:24:18:85:88:31:C2
Authority key identifier: 13:1D:A6:70:3B:16:C2:A2:B4:8C:3A:E2:CD:AE:1E:FF:DA:E1:FB:3A
Certificate issuer:       /CN=F365052EAF/serialNumber=131DA6703B16C2A2B48C3AE2CDAE1EFFDAE1FB3A
Certificate serial:       010B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ex2mcDsWwqK0jDriza4e_9rh-zo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.mft
Manifest number:          010A
Signing time:             Sun 27 Apr 2025 04:47:10 +0000
Manifest this update:     Sun 27 Apr 2025 04:47:09 +0000
Manifest next update:     Tue 29 Apr 2025 04:47:09 +0000
Files and hashes:         1: Ex2mcDsWwqK0jDriza4e_9rh-zo.crl (hash: h3CZbw4fyWYwdmf20bAtd6JNb71sHcK+qj8B8tCVxpE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ex2mcDsWwqK0jDriza4e_9rh-zo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365052EAF, serialNumber=131DA6703B16C2A2B48C3AE2CDAE1EFFDAE1FB3A
        Validity
            Not Before: Apr 27 04:47:09 2025 GMT
            Not After : Apr 29 04:47:09 2025 GMT
        Subject: CN=680db6ce-ca8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1c:b6:19:82:e8:c2:e3:25:8c:a4:ec:13:f2:
                    03:ce:52:f6:f3:c8:f2:b4:3f:21:9d:49:63:0e:61:
                    04:c4:1e:dd:37:f8:fe:25:6b:aa:cd:03:fd:ed:a2:
                    5c:68:c2:73:50:01:f5:92:99:3c:3d:a4:96:c3:a5:
                    56:62:4d:98:92:a4:66:6e:56:00:18:d3:60:8b:8c:
                    ba:ab:a4:3a:c9:01:52:84:ee:fd:8e:d5:b4:52:a4:
                    35:25:f8:fe:ac:a6:a9:71:66:1b:07:55:37:13:ab:
                    61:f1:22:d4:71:f3:6a:16:5f:8c:b6:10:ee:1e:ae:
                    2a:11:4b:bd:08:47:2d:0c:45:56:08:5d:b2:fb:65:
                    c0:b1:0e:a5:ad:6e:a8:8d:86:b8:70:e4:cb:72:e1:
                    21:d9:71:e1:99:94:e0:f1:3a:17:7a:b3:23:ee:e4:
                    3b:a8:8e:cc:b1:fd:cc:59:ea:a1:98:1b:c1:5e:5d:
                    e9:c6:6f:bc:3b:da:19:be:22:33:8b:23:4d:b1:78:
                    3d:bc:ae:52:bc:98:af:7e:b2:4d:a7:ee:46:17:8d:
                    2d:fd:aa:3e:64:02:31:51:1d:23:5f:d9:d3:a3:7e:
                    b8:d8:a3:79:96:16:17:67:9b:be:44:d3:79:66:ae:
                    2f:ae:14:2d:63:e3:e2:f3:a7:00:c1:ed:6c:bd:ab:
                    d0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4A:52:DB:03:4E:05:FE:10:EB:C7:E6:39:4B:24:18:85:88:31:C2
            X509v3 Authority Key Identifier:
                keyid:13:1D:A6:70:3B:16:C2:A2:B4:8C:3A:E2:CD:AE:1E:FF:DA:E1:FB:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ex2mcDsWwqK0jDriza4e_9rh-zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365052E/7BC482DE5E4B11EFBC78A1A3762E951A/Ex2mcDsWwqK0jDriza4e_9rh-zo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6e:0d:4e:f7:e7:25:3b:4d:12:26:e1:70:2a:a4:ab:d1:6a:
         2c:33:9a:91:32:e9:a8:8f:a0:86:28:37:d8:50:8b:e4:56:57:
         9e:48:e0:95:83:9a:4b:81:55:fc:1d:8a:59:6c:b8:6f:45:54:
         1b:ca:34:3f:60:be:1e:86:66:22:02:46:44:ae:42:4e:39:e8:
         6b:af:f8:82:76:41:f1:04:8b:bd:16:c5:a8:de:bc:d6:48:60:
         9e:5d:5c:4c:33:3c:03:70:aa:5b:19:cb:cb:d1:8a:0b:f7:83:
         ab:9e:0b:f7:3e:06:b4:f5:9b:71:f2:6c:ec:55:bf:d3:01:3b:
         bc:78:2e:71:32:c1:81:55:cf:8f:e3:d7:4c:4e:13:43:6c:8a:
         81:29:d9:7f:9a:43:85:3d:e2:48:4d:bb:b5:06:ca:c3:3d:82:
         9e:cc:af:74:21:27:ac:33:73:9e:07:87:02:47:de:d9:0a:e3:
         5c:7a:0f:c5:06:6d:16:f3:6a:0f:05:46:b9:4e:71:7e:df:ef:
         6c:de:a4:68:bb:14:14:f5:86:3c:14:17:6d:89:90:3e:94:65:
         cc:2a:95:a9:44:da:95:16:ee:99:99:95:0d:0f:e4:3e:88:68:
         eb:51:cd:40:35:b7:b4:64:b4:68:25:76:fe:91:c3:21:46:9f:
         7f:86:83:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:37 2025 by rpki-client on console.sobornost.net