Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
File:                     9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft (raw, json)
Hash identifier:          6/K57VCKmIWY61ilYeC4TALris35rCF02j+ngXQ71XE=
Subject key identifier:   38:6D:02:D0:A5:97:15:97:B5:D6:EF:E3:5C:1A:14:41:19:5B:8D:08
Authority key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
Certificate issuer:       /CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Certificate serial:       0235
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
Manifest number:          022A
Signing time:             Fri 25 Apr 2025 04:09:47 +0000
Manifest this update:     Fri 25 Apr 2025 04:09:46 +0000
Manifest next update:     Sun 27 Apr 2025 04:09:46 +0000
Files and hashes:         1: 9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl (hash: ya/ligRc4tHCp9SNNl5VVYzFstLif2TVxI/3t8CWJ8U=)
                          2: 771608343F6511EFB9F4EABA762E951A.roa (hash: 9Q+GZAt0BfDQgU00GMZWd99zLhXCbOr7gAEaYiC7Dyo=)
                          3: 5A705AB83F6511EFB113C3BA762E951A.roa (hash: 46y6LOxfLG2hpzs8KqldDqb+T4CZAqoGN7kv9ge6l2Q=)
                          4: C37677449B4211EE97C01A0BD25BE465.roa (hash: BAmmlnMHUybbiPHqjjkYtKpac8mib54JfOVw/2b2OnA=)
                          5: 9C2FB4D49B4211EE82B8CF0AD25BE465.roa (hash: RKm1ONyaKM8MZ2trCs9RLFoAoaY0CDYQpfQjdSvu7io=)
                          6: D91B9FD2905311EF97DBC8B6762E951A.roa (hash: //pQLXl186UK+YngQ4Oqc4YBM5xFv+Ww/aM3Yp8J0R4=)
                          7: ACB50F14905311EF9F4DCCB4762E951A.roa (hash: 57inawtVdw1IaHCvXR36yukcxfO3Teh83tMpkhTAd4M=)
                          8: 5AA6ED769BE611EE88684334D25BE465.roa (hash: J9soXt+A2SzJz6ium1VPFEErWV44KnKWZA3DTIrB3Z8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656BB8AF, serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
        Validity
            Not Before: Apr 25 04:09:46 2025 GMT
            Not After : Apr 27 04:09:46 2025 GMT
        Subject: CN=680b0b0b-fdf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:10:78:b6:27:7c:23:7e:c1:a4:66:d9:63:aa:
                    e2:53:73:14:df:e2:2b:26:cb:b6:6c:bb:67:42:3e:
                    b7:1e:d1:9c:ed:9c:ff:8e:14:d9:35:22:da:db:60:
                    c9:5d:8c:4d:0e:6c:30:cf:53:c1:04:e2:de:c8:86:
                    2b:e5:e5:3f:33:d9:9c:30:39:04:89:7e:eb:d2:b7:
                    e4:4a:31:36:91:9f:12:88:12:6e:17:cc:03:93:b1:
                    78:b0:ca:4f:ff:e4:e8:49:65:75:2e:6c:4d:bc:21:
                    8a:ac:42:2a:91:12:a6:39:cc:65:5d:e8:4b:10:d3:
                    fc:31:42:2c:6c:62:da:51:f8:0b:70:fd:71:7e:70:
                    c1:a0:63:b1:35:3c:31:ca:ba:f4:a8:f3:6b:04:f5:
                    6e:f1:d5:ee:1c:49:8e:35:43:44:9b:20:3f:70:34:
                    f0:52:59:82:3d:07:f3:35:b0:f5:86:0c:3d:92:56:
                    35:a9:bf:14:bc:e3:6b:71:f6:dc:69:fd:80:7e:ad:
                    12:5f:81:41:1a:75:df:0d:09:dd:5f:1b:c7:7c:36:
                    fc:63:90:62:37:2b:49:36:e6:2a:37:cd:09:db:f3:
                    ec:f8:09:b4:d0:bb:55:56:13:ed:79:72:7d:39:b5:
                    77:47:a9:02:eb:cb:72:ea:86:52:82:6b:fc:f6:b3:
                    56:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6D:02:D0:A5:97:15:97:B5:D6:EF:E3:5C:1A:14:41:19:5B:8D:08
            X509v3 Authority Key Identifier:
                keyid:F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:8a:bd:79:de:8b:b3:f6:9e:77:88:db:85:51:23:1f:e9:d9:
         4c:ce:ee:6d:78:68:9a:13:10:a4:6f:7e:55:11:e5:4f:dc:91:
         62:a5:a7:da:15:46:53:3c:22:cd:d4:3d:73:09:34:bd:54:23:
         43:15:69:c3:98:a3:4f:34:37:63:7c:18:bb:e7:fa:61:7e:87:
         c5:72:a9:0a:f1:78:2c:a5:2a:54:9a:67:1b:3e:e9:af:b9:c8:
         68:84:24:77:29:d1:0a:76:2d:cc:cd:5e:a7:4b:e9:1d:3d:bb:
         53:82:5e:db:ee:9f:f7:80:c7:59:7f:70:de:14:b9:6f:ec:ee:
         5c:f4:18:23:6c:70:69:8d:cc:18:06:b3:b0:26:62:b4:d1:a8:
         d4:f1:df:d5:a6:8f:ce:7b:ee:1c:6f:1f:24:f3:c6:8c:df:43:
         4f:9f:06:79:29:3e:86:a5:56:cc:37:34:7b:a9:33:87:ec:9c:
         d1:6a:7b:5b:ba:6d:c8:7a:7c:2e:4c:22:70:3e:a5:59:03:8d:
         37:27:f4:01:17:15:ce:cc:d7:63:92:68:e4:be:3e:e1:e0:d7:
         81:9b:a5:40:70:af:39:76:8a:99:d0:5d:f0:31:de:5f:0f:16:
         fc:ce:c6:db:d6:4a:9f:3d:a9:42:d0:ff:98:12:93:10:c4:e7:
         01:6f:85:c7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTZCQjhBRjExMC8GA1UEBRMoRjY3MDY2NDM5QUNEOUVBRkQ0ODk5RkM2OEM2MDc1
QzcwQ0UzOUFENTAeFw0yNTA0MjUwNDA5NDZaFw0yNTA0MjcwNDA5NDZaMBgxFjAU
BgNVBAMTDTY4MGIwYjBiLWZkZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrEHi2J3wjfsGkZtljquJTcxTf4ismy7Zsu2dCPrce0ZztnP+OFNk1Itrb
YMldjE0ObDDPU8EE4t7Ihivl5T8z2ZwwOQSJfuvSt+RKMTaRnxKIEm4XzAOTsXiw
yk//5OhJZXUubE28IYqsQiqREqY5zGVd6EsQ0/wxQixsYtpR+Atw/XF+cMGgY7E1
PDHKuvSo82sE9W7x1e4cSY41Q0SbID9wNPBSWYI9B/M1sPWGDD2SVjWpvxS842tx
9txp/YB+rRJfgUEadd8NCd1fG8d8NvxjkGI3K0k25io3zQnb8+z4CbTQu1VWE+15
cn05tXdHqQLry3LqhlKCa/z2s1ZRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUOG0C
0KWXFZe11u/jXBoUQRlbjQgwHwYDVR0jBBgwFoAU9nBmQ5rNnq/UiZ/GjGB1xwzj
mtUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU2QkI4L0Q3OUVFQjk0ODkxQzExRUVBRjY1Qzc2MDRBRDlFNkZDLzluQm1R
NXJObnFfVWlaX0dqR0IxeHd6am10VS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzluQm1RNXJObnFfVWlaX0dqR0IxeHd6am10VS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTZCQjgvRDc5RUVCOTQ4OTFDMTFFRUFGNjVDNzYwNEFE
OUU2RkMvOW5CbVE1ck5ucV9VaVpfR2pHQjF4d3pqbXRVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCCir153ouz9p53iNuFUSMf6dlMzu5t
eGiaExCkb35VEeVP3JFipafaFUZTPCLN1D1zCTS9VCNDFWnDmKNPNDdjfBi75/ph
fofFcqkK8XgspSpUmmcbPumvuchohCR3KdEKdi3MzV6nS+kdPbtTgl7b7p/3gMdZ
f3DeFLlv7O5c9BgjbHBpjcwYBrOwJmK00ajU8d/Vpo/Oe+4cbx8k88aM30NPnwZ5
KT6GpVbMNzR7qTOH7JzRantbum3IenwuTCJwPqVZA403J/QBFxXOzNdjkmjkvj7h
4NeBm6VAcK85doqZ0F3wMd5fDxb8zsbb1kqfPalC0P+YEpMQxOcBb4XH
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:08 2025 by rpki-client on console.sobornost.net