Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3657B9B/2B343DB038D711EC866DDE7DD8A014CE/5EQ9BuJ23CaV_RskPB6hv524UiY.mft
File:                     5EQ9BuJ23CaV_RskPB6hv524UiY.mft (raw, json)
Hash identifier:          6nfhYDuwDIuh0f32moC/6fcU94JSGs+GOv/i0hYXK8o=
Subject key identifier:   8E:11:C3:30:FE:7A:1D:8D:90:94:D8:0C:CB:26:AB:40:65:22:63:A1
Authority key identifier: E4:44:3D:06:E2:76:DC:26:95:FD:1B:24:3C:1E:A1:BF:9D:B8:52:26
Certificate issuer:       /CN=F3657B9BAF/serialNumber=E4443D06E276DC2695FD1B243C1EA1BF9DB85226
Certificate serial:       0521
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5EQ9BuJ23CaV_RskPB6hv524UiY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3657B9B/2B343DB038D711EC866DDE7DD8A014CE/5EQ9BuJ23CaV_RskPB6hv524UiY.mft
Manifest number:          0520
Signing time:             Fri 25 Apr 2025 02:39:28 +0000
Manifest this update:     Fri 25 Apr 2025 02:39:27 +0000
Manifest next update:     Sun 27 Apr 2025 02:39:27 +0000
Files and hashes:         1: 5EQ9BuJ23CaV_RskPB6hv524UiY.crl (hash: bUEskuVa3DpNLKYjlTTDhTpiTgn+ijdlnJZHNzhQO4o=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3657B9B/2B343DB038D711EC866DDE7DD8A014CE/5EQ9BuJ23CaV_RskPB6hv524UiY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3657B9B/2B343DB038D711EC866DDE7DD8A014CE/5EQ9BuJ23CaV_RskPB6hv524UiY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5EQ9BuJ23CaV_RskPB6hv524UiY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1313 (0x521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3657B9BAF, serialNumber=E4443D06E276DC2695FD1B243C1EA1BF9DB85226
        Validity
            Not Before: Apr 25 02:39:27 2025 GMT
            Not After : Apr 27 02:39:27 2025 GMT
        Subject: CN=680af5e0-6a89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ef:09:ad:72:5d:86:66:df:6e:85:ed:30:c5:
                    2b:86:d6:06:81:5e:3e:96:18:8c:5f:4b:b8:38:ed:
                    32:de:b3:42:49:ae:b4:3d:09:83:aa:aa:42:e9:93:
                    64:bb:0f:e4:54:a0:59:e8:ad:87:8d:81:3b:57:c4:
                    6c:52:fc:c1:30:05:8c:8b:99:d5:8e:61:67:9b:76:
                    ad:47:44:1a:9b:c0:39:95:29:88:3b:34:f0:cd:44:
                    0c:53:7a:1f:a9:6f:df:0e:5c:6a:89:3f:91:1a:85:
                    75:db:b9:ac:9e:39:e9:8c:8b:97:58:20:78:53:99:
                    86:90:7a:ae:c9:9f:45:47:fa:7d:78:3b:f8:d9:16:
                    9d:0c:14:6e:ff:23:dd:4b:7a:57:2d:d5:8f:21:2e:
                    f2:15:a7:f1:72:26:2a:29:c4:13:ee:05:b1:d1:d2:
                    f7:4a:fb:2e:32:3e:00:21:59:76:34:ad:d5:23:4a:
                    75:e2:1e:a1:73:8e:ff:c1:c7:a4:b2:39:82:da:32:
                    aa:ab:eb:bf:3e:22:f0:70:74:48:19:86:8d:93:b2:
                    04:86:04:17:21:82:57:06:28:fb:3b:98:32:7c:6f:
                    c6:a4:26:ba:bb:85:60:5a:35:e9:ae:a1:35:1d:2e:
                    79:44:31:c8:ea:89:db:26:b6:f3:19:e2:ff:2f:6f:
                    f6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:11:C3:30:FE:7A:1D:8D:90:94:D8:0C:CB:26:AB:40:65:22:63:A1
            X509v3 Authority Key Identifier:
                keyid:E4:44:3D:06:E2:76:DC:26:95:FD:1B:24:3C:1E:A1:BF:9D:B8:52:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3657B9B/2B343DB038D711EC866DDE7DD8A014CE/5EQ9BuJ23CaV_RskPB6hv524UiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5EQ9BuJ23CaV_RskPB6hv524UiY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3657B9B/2B343DB038D711EC866DDE7DD8A014CE/5EQ9BuJ23CaV_RskPB6hv524UiY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:72:eb:ba:0a:c9:10:e4:cc:07:4d:d7:ca:e6:a3:c3:8f:18:
         57:54:51:5b:9d:15:e4:04:22:30:1e:e5:0b:5b:72:56:44:92:
         77:1e:3b:02:52:5f:a0:9e:68:0d:9d:46:78:cc:f7:fe:6b:b9:
         78:8c:3b:32:28:75:ae:2b:2f:65:22:29:6a:93:f5:75:d5:d3:
         7b:69:fc:4d:8b:a5:b5:53:0f:a8:e2:85:16:47:ec:23:39:ba:
         48:7e:a8:b1:01:26:4c:0e:50:8f:6c:05:3b:77:e9:67:ee:b5:
         c8:9f:45:8d:cb:e6:27:02:ef:ea:c7:85:e7:99:d9:b4:4d:06:
         8f:1b:d5:e6:f3:99:a1:08:fc:c6:9e:18:e7:77:67:05:06:e7:
         6c:31:96:be:c6:e9:2c:c0:4b:35:b9:38:d1:d3:a3:7e:a4:50:
         76:b2:ec:72:f1:e9:51:da:4b:06:aa:68:6c:94:f9:39:05:1e:
         f2:7d:4f:c5:04:5d:ab:27:f9:8a:50:4e:8c:fb:1a:80:9c:4c:
         7d:77:d9:bf:37:2b:9e:64:a8:ba:5b:cd:60:a4:aa:7a:e5:f7:
         e6:85:cc:fb:2f:dd:fa:06:19:31:a7:ce:a1:6a:cc:42:ec:d0:
         9c:70:cd:62:0e:47:5a:b4:6a:c3:a1:1e:f4:d0:b8:2c:99:c6:
         1e:9c:2d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:08 2025 by rpki-client on console.sobornost.net