Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
File:                     PUpO_QKaES64mqyOyp2RekfLbFw.mft (raw, json)
Hash identifier:          lMChhxKaVPYgOCzXF7ASjM50s4A8hFjl6hdDDh8rvog=
Subject key identifier:   04:CA:E5:56:2D:59:8C:CB:C2:C7:0E:B5:1A:40:96:27:96:E2:D3:6B
Authority key identifier: 3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C
Certificate issuer:       /CN=F36598F5AF/serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
Certificate serial:       0454
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
Manifest number:          0451
Signing time:             Fri 25 Apr 2025 02:55:12 +0000
Manifest this update:     Fri 25 Apr 2025 02:55:11 +0000
Manifest next update:     Sun 27 Apr 2025 02:55:11 +0000
Files and hashes:         1: PUpO_QKaES64mqyOyp2RekfLbFw.crl (hash: KosR1v8vLoSmczaSalbLroJ6vZNB9E0DhyQgvjnh7YM=)
                          2: FDE0E02C1E4611EF94A680057DDC24C2.roa (hash: 1djty5fRWOAsejw0HL8rgxOF0W9HT4RaKUN6d3OwjTM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1108 (0x454)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36598F5AF, serialNumber=3D4A4EFD029A112EB89AAC8ECA9D917A47CB6C5C
        Validity
            Not Before: Apr 25 02:55:11 2025 GMT
            Not After : Apr 27 02:55:11 2025 GMT
        Subject: CN=680af990-7368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:43:cf:ac:60:35:83:3a:45:cc:7f:84:3c:b7:
                    66:1f:1f:9f:00:b3:21:5b:a6:64:ee:7b:52:64:06:
                    b4:d7:d3:55:a1:b0:4f:00:09:93:2a:96:6c:fb:05:
                    49:2e:94:b4:f4:0b:64:57:d7:4e:a7:a2:03:ad:c4:
                    d2:33:48:77:60:ef:81:32:3f:28:cc:b1:1c:10:8b:
                    d5:ec:0b:8f:36:02:6b:bd:7b:39:17:4a:64:ef:1a:
                    e0:ec:31:e3:56:e2:09:6d:04:eb:f2:ae:38:b7:0a:
                    57:41:c4:3a:cc:2a:08:02:f8:9c:43:fe:6a:be:97:
                    0e:2d:96:c0:e7:40:05:a2:10:b4:1a:25:19:4e:b0:
                    8b:53:4e:5d:89:b0:6a:ae:ee:92:cd:d4:a3:7d:55:
                    77:a9:71:cb:9c:89:c8:a2:c5:e8:34:ca:d3:48:05:
                    00:b6:cf:d1:3b:ef:a3:4d:92:33:6a:ae:04:6b:a7:
                    07:53:2f:05:25:80:4e:f7:45:54:a2:06:30:2f:c1:
                    23:81:8d:f9:fd:9c:c4:c8:13:8b:43:eb:f1:e5:9c:
                    7e:88:39:4b:6f:94:d0:55:57:26:aa:06:06:5e:5c:
                    65:d0:32:ad:b2:17:ee:36:f1:95:29:d4:00:0c:0d:
                    ac:a2:9b:27:66:58:df:85:64:43:ab:9f:cf:cc:83:
                    d4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CA:E5:56:2D:59:8C:CB:C2:C7:0E:B5:1A:40:96:27:96:E2:D3:6B
            X509v3 Authority Key Identifier:
                keyid:3D:4A:4E:FD:02:9A:11:2E:B8:9A:AC:8E:CA:9D:91:7A:47:CB:6C:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PUpO_QKaES64mqyOyp2RekfLbFw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36598F5/A410D350DC0211EC99E36188F1222468/PUpO_QKaES64mqyOyp2RekfLbFw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:12:2d:2a:16:e1:e6:bc:53:04:3a:be:aa:60:5a:1e:c5:29:
         dc:cd:cd:47:d3:5d:bd:e1:59:72:70:2c:bf:24:6a:0c:e6:05:
         a4:a7:71:bd:0f:16:39:07:71:2b:42:78:99:54:67:9b:df:c5:
         01:e7:e0:20:2f:16:2e:07:fb:00:d8:1a:e1:fd:50:c0:7a:5c:
         e0:3d:8a:a5:85:e2:19:2d:2e:7f:a3:57:83:1d:74:ee:dc:1d:
         09:17:27:fd:44:c7:8d:d1:d7:cb:3b:ad:83:7c:64:de:e6:56:
         46:49:51:c0:32:9d:d2:df:9a:a0:b1:1d:ab:c8:d7:32:9d:dc:
         02:0c:f3:9f:36:9a:76:52:4f:09:32:c5:44:83:e1:7b:4e:62:
         2a:79:84:9d:57:e7:65:82:7b:06:31:d9:d5:28:8a:4a:ad:46:
         72:ba:34:fa:a9:3c:60:4f:aa:3f:8b:fe:46:6f:64:1a:fa:54:
         29:05:31:fc:70:b2:6b:29:36:3f:7d:d4:d4:1f:3e:23:c1:99:
         27:ce:73:87:56:c7:fe:4f:21:c2:19:18:c2:68:1e:3d:69:75:
         b3:b5:86:e3:74:ee:41:83:c8:2e:16:48:88:e8:30:2f:17:77:
         0d:3e:01:f9:f5:84:3f:cc:04:56:c5:c2:1f:a4:2d:99:30:db:
         8e:43:bf:c9
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTk4RjVBRjExMC8GA1UEBRMoM0Q0QTRFRkQwMjlBMTEyRUI4OUFBQzhFQ0E5RDkx
N0E0N0NCNkM1QzAeFw0yNTA0MjUwMjU1MTFaFw0yNTA0MjcwMjU1MTFaMBgxFjAU
BgNVBAMTDTY4MGFmOTkwLTczNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjQ8+sYDWDOkXMf4Q8t2YfH58AsyFbpmTue1JkBrTX01WhsE8ACZMqlmz7
BUkulLT0C2RX106nogOtxNIzSHdg74EyPyjMsRwQi9XsC482Amu9ezkXSmTvGuDs
MeNW4gltBOvyrji3CldBxDrMKggC+JxD/mq+lw4tlsDnQAWiELQaJRlOsItTTl2J
sGqu7pLN1KN9VXepccuciciixeg0ytNIBQC2z9E776NNkjNqrgRrpwdTLwUlgE73
RVSiBjAvwSOBjfn9nMTIE4tD6/HlnH6IOUtvlNBVVyaqBgZeXGXQMq2yF+428ZUp
1AAMDayimydmWN+FZEOrn8/Mg9SLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBMrl
Vi1ZjMvCxw61GkCWJ5bi02swHwYDVR0jBBgwFoAUPUpO/QKaES64mqyOyp2RekfL
bFwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5OEY1L0E0MTBEMzUwREMwMjExRUM5OUUzNjE4OEYxMjIyNDY4L1BVcE9f
UUthRVM2NG1xeU95cDJSZWtmTGJGdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BVcE9fUUthRVM2NG1xeU95cDJSZWtmTGJGdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTk4RjUvQTQxMEQzNTBEQzAyMTFFQzk5RTM2MTg4RjEy
MjI0NjgvUFVwT19RS2FFUzY0bXF5T3lwMlJla2ZMYkZ3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBGEi0qFuHmvFMEOr6qYFoexSnczc1H
01294VlycCy/JGoM5gWkp3G9DxY5B3ErQniZVGeb38UB5+AgLxYuB/sA2Brh/VDA
elzgPYqlheIZLS5/o1eDHXTu3B0JFyf9RMeN0dfLO62DfGTe5lZGSVHAMp3S35qg
sR2ryNcyndwCDPOfNpp2Uk8JMsVEg+F7TmIqeYSdV+dlgnsGMdnVKIpKrUZyujT6
qTxgT6o/i/5Gb2Qa+lQpBTH8cLJrKTY/fdTUHz4jwZknznOHVsf+TyHCGRjCaB49
aXWztYbjdO5Bg8guFkiI6DAvF3cNPgH59YQ/zARWxcIfpC2ZMNuOQ7/J
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:08 2025 by rpki-client on console.sobornost.net