Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft
File:                     vc-uJWmnA46pcPrPQDA0GPY1H0g.mft (raw, json)
Hash identifier:          d5h+AOX7xKD5mD6NneeNB0X8mfa24CH6mvlcQTYJbkw=
Subject key identifier:   B3:00:D9:32:C9:EA:AE:90:A8:74:AF:05:0C:FA:64:91:06:65:6E:C7
Authority key identifier: BD:CF:AE:25:69:A7:03:8E:A9:70:FA:CF:40:30:34:18:F6:35:1F:48
Certificate issuer:       /CN=F3658A3FAF/serialNumber=BDCFAE2569A7038EA970FACF40303418F6351F48
Certificate serial:       ED
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vc-uJWmnA46pcPrPQDA0GPY1H0g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft
Manifest number:          EA
Signing time:             Fri 25 Apr 2025 04:51:47 +0000
Manifest this update:     Fri 25 Apr 2025 04:51:46 +0000
Manifest next update:     Sun 27 Apr 2025 04:51:46 +0000
Files and hashes:         1: vc-uJWmnA46pcPrPQDA0GPY1H0g.crl (hash: QAMVZ2Ih6dj/lyw3EhQZrbXRspFxTqsp7SU2YEksmKI=)
                          2: 2FD55E82741E11EFAC1F5677762E951A.roa (hash: yK+GF+mnFJmB3GPr0etfsyb2RoWyRhvCEdCQ6Xl4fOM=)
                          3: B1580E28775211EF8422209B762E951A.roa (hash: 3jNv2hrO32PB5K8c+t8vu6E3ApIkflNjeVX5pzc7APs=)
                          4: FF8E457C741D11EF8D538675762E951A.roa (hash: 6X3NUQA2g5a3P3oPEfsVXoEnHkdqMcSAGwMmrV+SpqU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vc-uJWmnA46pcPrPQDA0GPY1H0g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658A3FAF, serialNumber=BDCFAE2569A7038EA970FACF40303418F6351F48
        Validity
            Not Before: Apr 25 04:51:46 2025 GMT
            Not After : Apr 27 04:51:46 2025 GMT
        Subject: CN=680b14e3-c99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:0d:4b:5c:86:17:3b:8b:d3:35:39:81:f3:45:
                    00:f7:4b:44:6a:dc:19:90:2b:82:7f:78:32:75:e9:
                    04:b4:5a:04:15:08:c3:28:61:eb:a5:2c:51:b3:70:
                    9e:8e:34:dd:8a:85:32:4c:f1:91:01:c2:98:4f:1e:
                    8b:ac:2a:81:a1:69:08:1e:31:a9:56:77:e6:cb:42:
                    e8:8b:14:47:85:8c:91:05:36:62:cf:aa:2d:5e:3a:
                    b3:5d:ea:18:c7:40:b4:84:bc:cf:23:de:be:39:06:
                    6a:dc:ef:2d:06:5f:51:64:de:88:6b:a8:b4:03:f6:
                    c8:d0:b7:af:b7:90:e8:52:fc:c8:1f:89:7c:60:55:
                    0b:e4:74:f2:0b:7d:c0:18:aa:0b:e5:09:73:5a:48:
                    74:63:f3:33:f0:52:53:cc:0b:cb:bb:e0:c8:90:2e:
                    41:93:c8:55:32:65:1b:db:69:0b:26:24:85:e2:a1:
                    68:98:27:05:c8:bc:7b:a8:02:69:ce:11:72:9a:09:
                    3c:cd:61:28:db:6a:c2:b8:ac:05:0b:fc:6c:a4:b1:
                    3e:55:17:24:24:70:fc:8a:7e:a5:71:2d:86:c5:ee:
                    c3:9e:5f:ae:92:3d:90:a0:f9:d5:74:d1:87:9d:c3:
                    6a:b3:9c:2d:d2:f5:bc:dd:30:48:16:e5:cf:24:1a:
                    29:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:00:D9:32:C9:EA:AE:90:A8:74:AF:05:0C:FA:64:91:06:65:6E:C7
            X509v3 Authority Key Identifier:
                keyid:BD:CF:AE:25:69:A7:03:8E:A9:70:FA:CF:40:30:34:18:F6:35:1F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vc-uJWmnA46pcPrPQDA0GPY1H0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:02:d8:91:30:da:fd:55:25:d2:cb:90:15:b8:74:4c:0e:04:
         26:d6:ab:73:36:cf:86:f3:25:92:ea:db:2f:04:59:58:cc:f7:
         fa:4a:79:54:3b:97:a5:b5:c9:12:d7:9c:b5:f4:70:e6:5a:2f:
         ed:7e:91:5b:45:40:77:68:9f:3b:58:1c:18:ed:fc:4d:24:3d:
         2a:9a:aa:93:23:24:e6:ef:be:d5:bd:17:60:62:9a:42:88:ae:
         7a:89:12:bf:cf:57:ae:cb:5b:2b:dd:55:cb:1c:a4:02:74:4d:
         7c:ee:0a:e0:d9:fe:03:56:5e:87:c7:50:47:a2:f9:a6:90:c7:
         9a:1d:1b:2c:0d:9b:e0:0a:fc:4c:56:c1:d6:75:82:0a:d2:df:
         c4:d9:b1:44:87:60:c4:5f:44:64:37:d0:9a:76:2f:1c:fd:2c:
         52:ce:a6:5f:51:ec:ad:23:52:37:e1:6d:79:2e:fd:8a:c2:04:
         cd:9f:b3:10:70:aa:ce:26:c4:59:14:01:4f:e5:34:bd:32:4f:
         28:ae:71:3b:97:8e:25:f0:b9:18:b5:cc:99:9f:3e:33:90:16:
         9b:79:d5:f1:f9:14:ff:d7:8a:df:99:49:86:39:f8:9d:94:d2:
         b6:33:3f:b7:ea:d2:eb:a8:b2:91:b0:c0:e2:a3:67:e6:5f:bb:
         ec:56:ba:27
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAO0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NThBM0ZBRjExMC8GA1UEBRMoQkRDRkFFMjU2OUE3MDM4RUE5NzBGQUNGNDAzMDM0
MThGNjM1MUY0ODAeFw0yNTA0MjUwNDUxNDZaFw0yNTA0MjcwNDUxNDZaMBgxFjAU
BgNVBAMTDTY4MGIxNGUzLWM5OWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDiDUtchhc7i9M1OYHzRQD3S0Rq3BmQK4J/eDJ16QS0WgQVCMMoYeulLFGz
cJ6ONN2KhTJM8ZEBwphPHousKoGhaQgeMalWd+bLQuiLFEeFjJEFNmLPqi1eOrNd
6hjHQLSEvM8j3r45Bmrc7y0GX1Fk3ohrqLQD9sjQt6+3kOhS/MgfiXxgVQvkdPIL
fcAYqgvlCXNaSHRj8zPwUlPMC8u74MiQLkGTyFUyZRvbaQsmJIXioWiYJwXIvHuo
AmnOEXKaCTzNYSjbasK4rAUL/GyksT5VFyQkcPyKfqVxLYbF7sOeX66SPZCg+dV0
0Yedw2qznC3S9bzdMEgW5c8kGimdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUswDZ
MsnqrpCodK8FDPpkkQZlbscwHwYDVR0jBBgwFoAUvc+uJWmnA46pcPrPQDA0GPY1
H0gwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU4QTNGLzc0REQ4NDRDNzQxRDExRUZBMkQwMTY3Mzc2MkU5NTFBL3ZjLXVK
V21uQTQ2cGNQclBRREEwR1BZMUgwZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3ZjLXVKV21uQTQ2cGNQclBRREEwR1BZMUgwZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NThBM0YvNzRERDg0NEM3NDFEMTFFRkEyRDAxNjczNzYy
RTk1MUEvdmMtdUpXbW5BNDZwY1ByUFFEQTBHUFkxSDBnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8AtiRMNr9VSXSy5AVuHRMDgQm1qtz
Ns+G8yWS6tsvBFlYzPf6SnlUO5eltckS15y19HDmWi/tfpFbRUB3aJ87WBwY7fxN
JD0qmqqTIyTm777VvRdgYppCiK56iRK/z1euy1sr3VXLHKQCdE187grg2f4DVl6H
x1BHovmmkMeaHRssDZvgCvxMVsHWdYIK0t/E2bFEh2DEX0RkN9Cadi8c/SxSzqZf
UeytI1I34W15Lv2KwgTNn7MQcKrOJsRZFAFP5TS9Mk8ornE7l44l8LkYtcyZnz4z
kBabedXx+RT/14rfmUmGOfidlNK2Mz+36tLrqLKRsMDio2fmX7vsVron
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:27 2025 by rpki-client on console.sobornost.net