Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
File:                     zz9PkkOmHTvtkzzA81M8or4JO9w.mft (raw, json)
Hash identifier:          y+noMDx8L+wlxdY2HQ/SRBLmFw5hXqGOjr9IfOcSfMk=
Subject key identifier:   B0:6B:CC:4B:51:88:FA:6A:4F:0E:4C:F5:65:EF:60:F7:9F:B0:18:3B
Authority key identifier: CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
Certificate issuer:       /CN=F36628D0AF/serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Certificate serial:       01C5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
Manifest number:          01C5
Signing time:             Thu 24 Apr 2025 04:26:25 +0000
Manifest this update:     Thu 24 Apr 2025 04:26:24 +0000
Manifest next update:     Sat 26 Apr 2025 04:26:24 +0000
Files and hashes:         1: zz9PkkOmHTvtkzzA81M8or4JO9w.crl (hash: jP941NBTf79yiBFPx2jpxn5cXoeZElGrXto6E2R+GBI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Apr 2025 00:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36628D0AF, serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
        Validity
            Not Before: Apr 24 04:26:24 2025 GMT
            Not After : Apr 26 04:26:24 2025 GMT
        Subject: CN=6809bd71-d8d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:5e:ac:3e:55:1a:fe:ad:aa:5c:db:e6:5c:
                    2e:d0:95:44:aa:fa:c3:ea:b1:35:29:4e:54:9f:2d:
                    9c:d5:04:6c:38:b3:cf:6e:9d:7c:6f:06:a7:db:41:
                    d0:4d:ea:7e:83:db:a3:a5:bc:08:9e:8a:ed:7d:ae:
                    29:eb:4c:9d:52:17:82:31:b7:d0:2e:93:08:90:4c:
                    97:b8:36:69:1d:ce:6c:e2:58:5d:33:79:31:19:4b:
                    7f:c1:d4:59:3b:ad:75:b9:2a:4c:89:6f:4c:7b:36:
                    2e:7a:d2:db:09:ca:88:31:92:87:ac:ff:8c:be:65:
                    63:95:18:f1:8c:71:2c:fe:f0:18:d5:6f:78:ed:d2:
                    f4:90:bc:e1:06:eb:54:1e:23:24:f9:81:f9:6d:96:
                    75:d4:11:d2:37:a2:95:5a:f4:a5:d4:c4:71:de:2b:
                    c9:8e:04:35:a8:c4:ac:37:f7:ae:69:8e:60:34:a8:
                    47:2a:a0:10:e1:78:69:c1:91:2f:05:5b:1e:6e:85:
                    c7:ef:7a:a6:af:82:9e:6e:b0:6d:be:3c:00:f6:1f:
                    6e:1c:f7:ee:56:d2:4a:b2:14:c8:43:da:20:b1:33:
                    d3:79:3c:32:3f:7c:97:ab:f5:cd:02:b0:ac:f5:fa:
                    4f:f1:3c:50:97:91:ad:08:c4:2e:fd:fb:1b:28:2f:
                    32:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:6B:CC:4B:51:88:FA:6A:4F:0E:4C:F5:65:EF:60:F7:9F:B0:18:3B
            X509v3 Authority Key Identifier:
                keyid:CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e9:48:12:bb:ad:47:7b:c0:24:84:74:ef:66:53:e2:38:c6:
         73:4b:de:fe:e3:e1:27:35:40:dc:7b:f4:af:8b:53:1a:92:39:
         63:8d:2e:fb:db:4f:b0:91:3a:5d:cd:6d:0f:ce:84:28:fd:c9:
         c9:04:8b:d2:c2:91:eb:1f:81:37:92:85:e0:ad:c3:f2:6e:af:
         22:1a:52:8d:e2:62:2f:ff:10:ce:96:91:90:01:8b:4c:45:f4:
         cc:78:17:86:60:63:30:e3:84:aa:3a:86:6e:69:49:aa:51:c2:
         f4:a8:a0:cc:5d:9d:7b:9c:27:b7:9e:da:70:40:db:d4:7e:1e:
         31:ab:13:95:e5:b1:9a:80:64:d8:3a:44:39:c3:f4:f8:68:42:
         94:fd:c1:84:11:93:ae:10:dc:9b:36:ca:3c:16:3c:bc:6a:c0:
         2a:a2:ca:46:77:00:58:c0:cf:21:2e:42:ac:20:3a:e6:41:6d:
         eb:ac:64:25:62:2f:c5:90:6b:69:23:09:eb:c6:d8:a2:ce:34:
         f8:6a:8f:b0:93:5f:c1:ff:43:d4:ab:97:ba:1f:66:e1:c8:22:
         10:64:18:47:fd:b2:5f:9f:0b:ce:d8:68:f7:23:84:b4:c0:d5:
         bd:07:b0:42:82:cc:73:b4:49:0c:c5:5c:12:cf:b5:d1:39:86:
         a9:0d:c1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 06:51:49 2025 by rpki-client on console.sobornost.net