Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
File:                     PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft (raw, json)
Hash identifier:          Mp68n8apdEFibOvmVRce2mvrBlZSqwKvaHmb9Ap9UuM=
Subject key identifier:   D0:AE:C8:65:24:CB:22:3D:BC:79:84:A2:36:C7:14:40:CE:F4:6D:63
Authority key identifier: 3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B
Certificate issuer:       /CN=F3666CFFAF/serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
Certificate serial:       02BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
Manifest number:          02BE
Signing time:             Fri 25 Apr 2025 03:45:30 +0000
Manifest this update:     Fri 25 Apr 2025 03:45:29 +0000
Manifest next update:     Sun 27 Apr 2025 03:45:29 +0000
Files and hashes:         1: PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl (hash: 7LFyr+P6MBO0RXI8ZJrlAq8oa3fvTkeMPedn63ZOtJo=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAF, serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
        Validity
            Not Before: Apr 25 03:45:29 2025 GMT
            Not After : Apr 27 03:45:29 2025 GMT
        Subject: CN=680b055a-41a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:76:75:ff:04:63:2d:16:50:6e:f9:07:7c:
                    ea:b6:46:4a:d3:5c:40:ba:ef:62:ad:a5:6c:66:de:
                    ae:af:bf:fd:77:bc:e3:bf:1e:5b:2b:89:69:73:61:
                    76:9a:bc:83:52:ad:71:03:a6:e3:8b:cd:66:c0:98:
                    6e:82:bf:ff:df:eb:f1:99:60:be:bd:b2:4e:7c:a6:
                    5c:85:6d:a3:3c:bf:41:35:08:15:cc:ac:64:8c:f6:
                    4a:59:95:98:9e:6c:8c:24:f1:c1:6d:de:5b:36:a9:
                    9a:16:2d:f3:b6:cc:51:6d:3e:d3:b1:54:31:1e:46:
                    a6:be:1f:6a:03:eb:d3:aa:44:57:dd:ec:2b:a8:9d:
                    87:2c:b5:d3:dc:a4:dc:3e:bc:98:a0:0d:d3:91:fc:
                    fd:96:86:b7:a4:ff:74:e3:43:f9:76:a1:bc:25:9d:
                    49:0d:99:00:17:59:18:34:71:00:cd:c6:83:de:65:
                    e6:67:ff:fd:4a:56:af:ac:bd:a5:13:16:e0:35:e1:
                    39:06:d5:ec:e5:1d:99:c2:44:96:fe:7e:1c:08:30:
                    fa:4d:bf:ab:ff:44:87:c7:c9:be:f1:98:9a:41:f7:
                    05:8f:2d:2d:70:fb:5e:c7:05:62:6d:06:d8:bd:8b:
                    a9:54:54:ce:e5:cf:53:5e:e0:1c:6f:f9:06:12:b7:
                    23:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:AE:C8:65:24:CB:22:3D:BC:79:84:A2:36:C7:14:40:CE:F4:6D:63
            X509v3 Authority Key Identifier:
                keyid:3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:bc:39:d2:32:70:16:da:d9:f6:2e:42:e3:9c:98:f2:e1:ca:
         fb:16:8d:8e:45:c2:32:47:81:8d:28:0d:be:f3:5e:dc:1e:fd:
         dc:94:31:70:77:ad:47:bb:1f:46:43:4b:ec:ea:15:47:53:65:
         63:9e:e9:77:f2:b7:a9:3d:2d:cb:21:c8:5a:d7:04:60:61:7f:
         bd:92:c1:32:0a:33:0d:b2:64:98:a5:11:87:15:c1:6a:a7:59:
         d9:e1:d3:dc:08:ad:2e:13:bd:4a:d7:3e:21:d4:b3:09:43:81:
         04:32:5f:62:8b:ba:3a:1a:a7:5c:6c:d0:a7:ff:e8:87:32:f2:
         8b:94:a7:be:13:ec:14:86:65:f4:c0:63:03:a2:1d:02:3c:92:
         cc:d8:70:cb:0f:83:fc:ac:1c:99:b6:b9:bf:a0:93:8d:71:97:
         52:f0:66:15:e1:84:a8:d0:2d:9b:68:3d:2d:10:8c:08:d4:76:
         27:d1:cd:a6:97:66:2b:24:26:5e:c5:26:93:96:18:2e:5e:0c:
         d0:c2:87:cf:be:27:10:4d:67:b3:47:95:39:66:69:2e:a7:ab:
         fc:8b:d0:09:27:ba:43:71:ec:8b:20:7c:5d:37:91:a8:63:e1:
         3b:ca:3a:50:e1:99:1b:14:84:27:31:a0:b3:8f:90:02:d1:86:
         fc:88:e7:f3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjZDRkZBRjExMC8GA1UEBRMoM0UwOUQ1QzNBQzI3QkZGOTVEOENFNUFGMDA0MTFB
MDE3NjgwNjU0QjAeFw0yNTA0MjUwMzQ1MjlaFw0yNTA0MjcwMzQ1MjlaMBgxFjAU
BgNVBAMTDTY4MGIwNTVhLTQxYTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCfQHZ1/wRjLRZQbvkHfOq2RkrTXEC672KtpWxm3q6vv/13vOO/HlsriWlz
YXaavINSrXEDpuOLzWbAmG6Cv//f6/GZYL69sk58plyFbaM8v0E1CBXMrGSM9kpZ
lZiebIwk8cFt3ls2qZoWLfO2zFFtPtOxVDEeRqa+H2oD69OqRFfd7CuonYcstdPc
pNw+vJigDdOR/P2Whrek/3TjQ/l2obwlnUkNmQAXWRg0cQDNxoPeZeZn//1KVq+s
vaUTFuA14TkG1ezlHZnCRJb+fhwIMPpNv6v/RIfHyb7xmJpB9wWPLS1w+17HBWJt
Bti9i6lUVM7lz1Ne4Bxv+QYStyO1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0K7I
ZSTLIj28eYSiNscUQM70bWMwHwYDVR0jBBgwFoAUPgnVw6wnv/ldjOWvAEEaAXaA
ZUswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY2Q0ZGLzAxNzZCMTAwMEFBMDExRUU5MTBGOUUzQTRBRDlFNkZDL1BnblZ3
Nndudl9sZGpPV3ZBRUVhQVhhQVpVcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BnblZ3Nndudl9sZGpPV3ZBRUVhQVhhQVpVcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjZDRkYvMDE3NkIxMDAwQUEwMTFFRTkxMEY5RTNBNEFE
OUU2RkMvUGduVnc2d252X2xkak9XdkFFRWFBWGFBWlVzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsvDnSMnAW2tn2LkLjnJjy4cr7Fo2O
RcIyR4GNKA2+817cHv3clDFwd61Hux9GQ0vs6hVHU2Vjnul38repPS3LIcha1wRg
YX+9ksEyCjMNsmSYpRGHFcFqp1nZ4dPcCK0uE71K1z4h1LMJQ4EEMl9ii7o6Gqdc
bNCn/+iHMvKLlKe+E+wUhmX0wGMDoh0CPJLM2HDLD4P8rByZtrm/oJONcZdS8GYV
4YSo0C2baD0tEIwI1HYn0c2ml2YrJCZexSaTlhguXgzQwofPvicQTWezR5U5Zmku
p6v8i9AJJ7pDceyLIHxdN5GoY+E7yjpQ4ZkbFIQnMaCzj5AC0Yb8iOfz
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:12 2025 by rpki-client on console.sobornost.net