Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
File:                     ib0Ua61yHpyUGcUJxustXey5ZyE.mft (raw, json)
Hash identifier:          sVGjyJD9VBDgk1rDN5c8Jr4snKfhNSL06MrwAHqZxv8=
Subject key identifier:   76:08:F3:58:3D:66:86:1C:44:46:EB:7B:61:FD:E1:A0:FF:74:CF:07
Authority key identifier: 89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21
Certificate issuer:       /CN=F36675E3AF/serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
Certificate serial:       01D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
Manifest number:          01D3
Signing time:             Fri 25 Apr 2025 04:22:36 +0000
Manifest this update:     Fri 25 Apr 2025 04:22:36 +0000
Manifest next update:     Sun 27 Apr 2025 04:22:36 +0000
Files and hashes:         1: ib0Ua61yHpyUGcUJxustXey5ZyE.crl (hash: WVbRg20No6wfFVMNBbYAqfaj3SMM0z5f9RbNMldQ+o8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36675E3AF, serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
        Validity
            Not Before: Apr 25 04:22:36 2025 GMT
            Not After : Apr 27 04:22:36 2025 GMT
        Subject: CN=680b0e0c-5e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:24:8f:6e:f2:70:67:b6:1f:69:c9:d7:9a:6c:
                    c2:f0:ad:c1:78:e9:ac:82:42:f6:7a:06:96:3f:a8:
                    48:2b:af:5a:fc:05:fc:91:1f:43:a9:c5:ed:03:12:
                    80:05:b3:f2:83:90:45:7a:f1:3a:f1:95:12:d7:c3:
                    0a:8f:eb:2c:da:96:34:e4:00:56:1e:ee:fa:a1:02:
                    16:13:7b:73:db:e0:1d:2e:f3:34:fe:e9:74:5d:62:
                    00:e6:5a:ec:04:77:d4:d2:d8:73:a1:85:1f:0e:8d:
                    f3:f1:36:5c:51:bb:7f:47:7e:70:54:fb:f8:0b:9d:
                    65:c1:fe:3e:42:5a:cd:25:52:8b:89:5e:c7:90:4d:
                    5a:cc:14:5d:91:75:a0:7d:a5:89:67:7e:12:7a:5a:
                    5e:78:1c:a4:c7:f5:e3:cf:e3:01:74:c9:5c:57:6d:
                    c2:80:de:d1:68:17:4c:ee:46:d0:8c:7a:8e:52:75:
                    fe:6f:0e:38:2b:43:a4:40:46:5a:15:3b:33:d4:26:
                    d1:5c:86:de:81:44:af:5c:ab:81:66:1a:9f:9b:e3:
                    d5:43:32:fd:34:c4:aa:ae:c3:72:38:c9:7e:d0:0d:
                    c6:ed:e6:85:ca:b5:15:9b:36:bb:84:0c:7d:a8:76:
                    01:06:6c:c2:e2:53:11:a7:6f:48:fb:18:bf:c3:43:
                    99:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:08:F3:58:3D:66:86:1C:44:46:EB:7B:61:FD:E1:A0:FF:74:CF:07
            X509v3 Authority Key Identifier:
                keyid:89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b6:65:ff:92:8a:d7:26:1c:2f:0d:d2:3d:39:14:0c:6f:43:
         bc:2c:f1:f5:c0:90:9a:4d:82:8e:c7:9b:1f:89:0c:7f:30:1c:
         86:f2:27:35:d9:5a:5b:31:33:bd:22:0b:05:ab:dc:8a:0a:bf:
         ba:71:1b:75:5a:01:55:ea:98:61:40:a8:11:f4:30:21:24:dd:
         12:0a:c9:6f:82:1f:d5:9b:07:08:03:2f:4d:b6:76:94:21:19:
         0f:e6:e5:97:12:18:21:70:4b:7c:cd:cb:39:44:ce:4a:c9:25:
         19:61:c0:79:1d:60:94:a1:6c:2a:b5:77:ee:61:d1:d5:e4:5d:
         81:1f:8c:93:cc:f0:20:2c:58:9b:c7:3f:f5:40:26:ac:93:b2:
         91:67:51:11:f8:59:40:ba:3b:04:ff:80:df:ce:1a:8c:e1:ea:
         4f:c9:15:12:a1:3f:24:72:69:a9:5f:a4:c7:9f:6d:f3:e7:75:
         0a:8e:c3:65:23:31:d6:64:32:97:24:ae:3e:8a:00:5d:30:7f:
         c9:2d:24:49:27:5b:36:91:06:e6:bb:bd:c3:ab:e1:4c:09:c0:
         0d:4c:d2:33:8e:31:92:f3:d7:4b:9b:58:53:9d:01:6a:84:e9:
         a8:52:58:3d:d7:20:4f:65:5a:9b:3a:0c:2f:b9:38:1d:24:ff:
         4a:61:7f:ff
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Njc1RTNBRjExMC8GA1UEBRMoODlCRDE0NkJBRDcyMUU5Qzk0MTlDNTA5QzZFQjJE
NURFQ0I5NjcyMTAeFw0yNTA0MjUwNDIyMzZaFw0yNTA0MjcwNDIyMzZaMBgxFjAU
BgNVBAMTDTY4MGIwZTBjLTVlNGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDcJI9u8nBnth9pydeabMLwrcF46ayCQvZ6BpY/qEgrr1r8BfyRH0Opxe0D
EoAFs/KDkEV68TrxlRLXwwqP6yzaljTkAFYe7vqhAhYTe3Pb4B0u8zT+6XRdYgDm
WuwEd9TS2HOhhR8OjfPxNlxRu39HfnBU+/gLnWXB/j5CWs0lUouJXseQTVrMFF2R
daB9pYlnfhJ6Wl54HKTH9ePP4wF0yVxXbcKA3tFoF0zuRtCMeo5Sdf5vDjgrQ6RA
RloVOzPUJtFcht6BRK9cq4FmGp+b49VDMv00xKquw3I4yX7QDcbt5oXKtRWbNruE
DH2odgEGbMLiUxGnb0j7GL/DQ5lVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUdgjz
WD1mhhxERut7Yf3hoP90zwcwHwYDVR0jBBgwFoAUib0Ua61yHpyUGcUJxustXey5
ZyEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY3NUUzL0RBNkExMzYyRDNFRjExRUVCMEJGN0Y0Rjc3NTQxMkU2L2liMFVh
NjF5SHB5VUdjVUp4dXN0WGV5NVp5RS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2liMFVhNjF5SHB5VUdjVUp4dXN0WGV5NVp5RS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Njc1RTMvREE2QTEzNjJEM0VGMTFFRUIwQkY3RjRGNzc1
NDEyRTYvaWIwVWE2MXlIcHlVR2NVSnh1c3RYZXk1WnlFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCctmX/korXJhwvDdI9ORQMb0O8LPH1
wJCaTYKOx5sfiQx/MByG8ic12VpbMTO9IgsFq9yKCr+6cRt1WgFV6phhQKgR9DAh
JN0SCslvgh/VmwcIAy9NtnaUIRkP5uWXEhghcEt8zcs5RM5KySUZYcB5HWCUoWwq
tXfuYdHV5F2BH4yTzPAgLFibxz/1QCask7KRZ1ER+FlAujsE/4DfzhqM4epPyRUS
oT8kcmmpX6THn23z53UKjsNlIzHWZDKXJK4+igBdMH/JLSRJJ1s2kQbmu73Dq+FM
CcANTNIzjjGS89dLm1hTnQFqhOmoUlg91yBPZVqbOgwvuTgdJP9KYX//
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:12 2025 by rpki-client on console.sobornost.net