Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
File:                     MU_85UKRThk8fBoqA8c1dGLqGBY.mft (raw, json)
Hash identifier:          FsniMQ7riUuysYe3Y6Lf+75i2WQmjGtw2SyM8DsWqV4=
Subject key identifier:   AF:CA:04:06:B4:F6:0A:03:59:34:5C:D6:85:7E:DF:B2:4A:F6:3D:B6
Authority key identifier: 31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16
Certificate issuer:       /CN=F3668037AF/serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
Certificate serial:       0CF6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
Manifest number:          0CD6
Signing time:             Thu 24 Apr 2025 01:04:26 +0000
Manifest this update:     Thu 24 Apr 2025 01:04:25 +0000
Manifest next update:     Sat 26 Apr 2025 01:04:25 +0000
Files and hashes:         1: MU_85UKRThk8fBoqA8c1dGLqGBY.crl (hash: EWoJ8jM5b8oVHNkRycK90iLdNZEO9fd6fD6ZnJHEvYg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Apr 2025 00:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3318 (0xcf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668037AF, serialNumber=314FFCE542914E193C7C1A2A03C7357462EA1816
        Validity
            Not Before: Apr 24 01:04:25 2025 GMT
            Not After : Apr 26 01:04:25 2025 GMT
        Subject: CN=68098e1a-abde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4d:c5:73:3a:cd:a5:42:57:5b:aa:9f:79:33:
                    92:a0:7d:6f:25:c5:b8:5e:d2:5d:3c:63:5b:5c:fb:
                    d5:95:cf:80:c8:33:a6:15:8e:a1:ac:e4:c6:64:53:
                    0e:c9:6d:25:2a:3b:25:b0:87:0f:08:52:f8:54:ad:
                    da:7b:3a:86:37:8e:0b:e9:b2:2b:b9:f1:3c:9a:70:
                    af:df:b8:76:c5:93:6e:bc:ea:9e:b2:ef:2b:01:b8:
                    62:22:e6:cd:0e:1b:a3:d0:e0:96:28:1f:3c:4f:25:
                    e3:7e:ce:1f:c8:95:0a:61:a2:99:1f:52:65:ae:aa:
                    c7:9f:7c:38:d5:0c:dc:19:56:9c:fe:56:89:d9:db:
                    91:18:71:5c:f1:eb:a8:2e:fe:9d:e7:12:df:b0:69:
                    5d:0c:bd:1d:1a:61:fa:6b:3b:ee:d7:6b:1e:ba:8a:
                    b1:84:91:11:62:5a:97:59:9b:83:d3:be:9c:a9:0b:
                    b3:7e:13:c1:25:d4:0c:70:8d:ef:4e:76:70:0c:43:
                    ec:49:cb:1e:bd:f1:e0:cf:2d:9d:fc:9d:f0:dc:2f:
                    5a:6c:c1:11:35:63:87:87:64:e9:40:e7:5a:1f:51:
                    d7:33:f0:ef:a6:f8:8d:ad:ec:41:d4:26:bb:d4:85:
                    0d:c2:c0:a8:2e:3d:ee:b1:d9:a5:80:db:3f:17:0b:
                    60:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CA:04:06:B4:F6:0A:03:59:34:5C:D6:85:7E:DF:B2:4A:F6:3D:B6
            X509v3 Authority Key Identifier:
                keyid:31:4F:FC:E5:42:91:4E:19:3C:7C:1A:2A:03:C7:35:74:62:EA:18:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MU_85UKRThk8fBoqA8c1dGLqGBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668037/2AB390E26DC711E68265362DF8AEA228/MU_85UKRThk8fBoqA8c1dGLqGBY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:93:53:d1:a0:0d:f2:7a:f0:4f:d6:1d:80:ac:af:f4:8a:03:
         7a:12:d8:10:8d:a8:07:9a:44:b1:6b:63:c5:01:0c:40:f7:f2:
         5f:b1:8e:3c:b5:f9:8c:33:c5:54:f8:9c:05:8d:3b:fa:c6:41:
         a1:bb:7f:28:f0:70:9b:6d:50:5c:e2:62:a2:9e:e6:9e:24:b5:
         26:1d:98:9c:1d:f0:86:49:31:5a:6c:8c:ae:2d:ae:43:81:f0:
         46:a4:23:90:68:7c:ed:ab:de:05:50:c1:f0:20:06:bc:be:fd:
         eb:b2:58:73:69:7c:44:22:22:a8:2d:75:ae:03:fb:d5:57:41:
         20:89:49:51:23:6a:ae:4a:93:95:8d:af:b7:cb:b3:90:c0:ee:
         94:f9:48:71:f0:38:b4:77:70:e5:a9:4b:05:51:ca:04:55:01:
         2b:ab:4d:5a:66:c4:33:80:e6:ff:10:9d:68:a5:dc:c5:0c:e8:
         08:68:1d:9c:19:40:0e:f4:8b:28:64:a9:37:8e:f9:89:4e:5f:
         93:2a:af:d8:97:26:40:15:52:c4:11:61:62:12:8a:2c:86:55:
         10:5e:03:5c:66:a2:45:2f:b1:e0:9a:ce:7a:15:df:9c:86:90:
         54:99:d1:c1:d7:b8:0d:f9:2a:ff:fd:20:3f:30:41:01:4e:b5:
         17:9d:a3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:33:57 2025 by rpki-client on console.sobornost.net