Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
File:                     Pw7qWRltFKMq812hcQ8VDV-d3dg.mft (raw, json)
Hash identifier:          wQAJqnn+H9C5rF9x8A5qB49X9Tif+t0IzFWQDyGh6ic=
Subject key identifier:   A4:6F:41:C7:BB:29:38:A2:76:64:40:41:A4:ED:1A:9D:7A:0A:1E:A5
Authority key identifier: 3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8
Certificate issuer:       /CN=F3652C3AAF/serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
Certificate serial:       020E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
Manifest number:          020A
Signing time:             Sat 26 Apr 2025 04:13:39 +0000
Manifest this update:     Sat 26 Apr 2025 04:13:38 +0000
Manifest next update:     Mon 28 Apr 2025 04:13:38 +0000
Files and hashes:         1: Pw7qWRltFKMq812hcQ8VDV-d3dg.crl (hash: kT+GCR3PlQdlGpGPAB8vkvT4ilosaIaB44zweK3GOsw=)
                          2: D15451B8AEF411EE804D56A3775412E6.roa (hash: YBWjlP8F+YdvA9ozU69TQggPOcEWkXW+zdvhhb0CYsA=)
                          3: 9DB45F1AAEF411EEBD21E1A2775412E6.roa (hash: zk4qjNpUR6ox7pi92CW344nHF3kKf96YYdu89XzhQ3o=)
                          4: B918F940B04E11EEBBD2E697775412E6.roa (hash: ZrUlsRanFtsZhQlEVluoYbwWKfggdoIE9yZOZzdy4S4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652C3AAF, serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
        Validity
            Not Before: Apr 26 04:13:38 2025 GMT
            Not After : Apr 28 04:13:38 2025 GMT
        Subject: CN=680c5d73-b36c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:10:27:0e:9c:0b:84:2a:5a:a4:41:ce:2b:94:
                    96:b0:13:00:fc:aa:6a:b3:ff:36:7b:ac:ea:ee:e4:
                    2c:3f:cb:e6:6f:21:cd:7a:27:25:1f:51:fe:ac:34:
                    37:bd:78:c8:c0:cf:46:b0:40:ee:de:95:cb:3c:ce:
                    ba:f0:0e:9c:fa:3d:27:b5:da:a8:fe:cf:36:97:6d:
                    4a:55:dc:0e:74:d0:3a:34:39:06:a4:2a:06:08:a7:
                    f7:5b:68:95:69:6e:32:97:22:01:59:99:cf:d2:b9:
                    6c:84:c5:61:fb:60:fa:30:0b:c5:ff:aa:8a:38:ab:
                    14:d6:a4:59:74:ba:33:99:8c:4b:65:c6:9f:dd:ac:
                    ae:2b:a4:b3:e1:1f:58:6b:ef:b4:40:be:e0:58:3a:
                    d6:ec:6b:fb:f9:a4:7b:a4:bb:72:7b:ea:3c:34:00:
                    f1:41:37:66:a1:36:c4:65:06:e2:e3:3e:ad:49:00:
                    42:68:6d:45:55:bb:11:5e:ff:06:20:82:72:6a:73:
                    4a:6f:5a:f8:b0:8c:79:f0:05:12:b4:16:15:a1:81:
                    84:2a:01:5e:20:19:65:33:05:33:f3:31:2e:98:0c:
                    44:cd:1b:ad:a9:ab:06:1b:16:5d:73:fb:1b:e8:35:
                    8f:d6:0e:92:03:4f:71:45:04:91:96:7b:f8:c9:18:
                    63:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6F:41:C7:BB:29:38:A2:76:64:40:41:A4:ED:1A:9D:7A:0A:1E:A5
            X509v3 Authority Key Identifier:
                keyid:3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:9b:c2:66:db:2d:99:c3:79:14:2a:c9:21:42:a0:69:bf:ba:
         21:71:1d:01:e0:21:50:45:79:be:d1:d8:b0:9c:9f:bb:c6:55:
         32:de:bc:f4:08:b6:f2:ed:82:3e:e1:7d:e6:17:61:f0:75:c1:
         7b:0a:58:b4:88:5e:7c:c9:4a:18:2a:2b:d8:ba:9a:2c:46:90:
         e3:0f:61:39:bc:ae:29:80:7c:36:c6:7f:e3:54:0d:dd:1e:30:
         99:2d:81:72:f6:0c:5c:f4:a9:75:3a:02:03:57:29:52:4e:0c:
         b2:71:8a:64:99:2b:76:30:75:a4:30:1e:c9:1c:d4:33:a8:6a:
         69:64:b7:f7:97:38:8f:f9:9f:30:35:08:ef:b8:ca:9b:0c:0c:
         35:28:11:e2:35:dd:38:b8:7d:dc:04:e0:00:ce:1b:c6:fb:cf:
         c4:be:06:03:8f:31:ab:c8:76:63:7a:bb:cc:1e:a5:a2:c7:cb:
         73:a3:04:ed:26:e9:3d:fd:91:60:9c:f3:93:d8:df:e0:f0:c7:
         e4:d5:f3:7c:45:0a:19:99:77:d8:59:f4:d7:81:d5:87:b9:4d:
         fb:ae:5c:b5:d1:cd:93:88:cc:44:7a:63:3c:42:6f:0d:ff:f4:
         cf:f3:24:86:19:b9:0c:a1:00:68:17:91:9d:36:9f:51:5f:55:
         d6:02:a2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:17:10 2025 by rpki-client on console.sobornost.net