Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
File:                     kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft (raw, json)
Hash identifier:          0zz7wqGU5FBLTNP+SbwWN9WHxKwv7wQFvnPTthUoSvI=
Subject key identifier:   89:96:58:D3:62:3A:E3:A8:87:8C:C0:A9:7D:8F:6A:33:6C:5F:9E:87
Authority key identifier: 90:93:64:5F:56:18:72:61:E6:5B:70:82:74:DB:D5:2C:00:DF:25:0D
Certificate issuer:       /CN=F366F2B5AF/serialNumber=9093645F56187261E65B708274DBD52C00DF250D
Certificate serial:       EC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
Manifest number:          EA
Signing time:             Fri 25 Apr 2025 04:51:34 +0000
Manifest this update:     Fri 25 Apr 2025 04:51:33 +0000
Manifest next update:     Sun 27 Apr 2025 04:51:33 +0000
Files and hashes:         1: kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl (hash: 7yLGZxQgPGJudzYkYucoFJc2vU2z7pAO6/R04swHWKo=)
                          2: 6217C884742E11EFA821E659762E951A.roa (hash: DqF+PQ0X8r1rRPiZ8RZ4fS3gA5sEXR5BPLyS3G+8cdE=)
                          3: 132CDF5C741511EFA9C5BABD762E951A.roa (hash: 02xv9vPnDrOOLcJupKl7YdL1bTFmoSlfefstM9Glp04=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366F2B5AF, serialNumber=9093645F56187261E65B708274DBD52C00DF250D
        Validity
            Not Before: Apr 25 04:51:33 2025 GMT
            Not After : Apr 27 04:51:33 2025 GMT
        Subject: CN=680b14d6-4465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:7b:30:9c:3a:e8:41:05:02:b4:80:82:a6:
                    25:32:1e:ad:69:73:8c:7b:8d:04:65:b7:6f:01:c5:
                    62:88:e2:10:0a:9c:3c:04:e4:1a:e8:3f:1d:d5:35:
                    4d:07:ad:0f:e3:1a:25:2f:a1:8a:6c:09:71:6d:71:
                    5d:4b:b6:84:dd:a7:c7:ab:16:53:f8:de:dc:3b:ff:
                    47:72:ba:21:1d:6a:f9:ea:bc:61:a0:56:5c:ed:36:
                    72:d2:c1:be:4d:35:5e:9b:4b:31:08:ca:01:44:1e:
                    17:f5:4f:10:47:2b:a2:55:43:b8:57:21:4a:2d:b0:
                    a6:c9:9e:3e:d9:50:11:2e:b1:ce:68:a2:cb:b7:db:
                    ae:7d:0c:71:57:89:5b:29:06:5e:56:5b:9c:e7:6e:
                    1b:ac:ab:51:1d:68:85:24:08:c4:8b:ec:77:fb:1e:
                    73:9e:59:28:fb:e8:10:6d:2c:37:34:7c:91:80:1b:
                    f0:37:22:7a:a7:40:e4:67:8b:42:7f:ca:e6:38:33:
                    05:da:6c:00:85:30:b1:3c:9a:7b:f6:2f:c2:fc:ec:
                    e4:8a:b9:1b:01:5a:39:c4:ea:f0:08:ef:ff:9c:e5:
                    3a:bb:9c:31:da:94:25:13:f2:16:ab:06:cf:30:cd:
                    70:5b:b9:ee:a8:74:b9:a3:d2:44:c3:89:bf:ac:34:
                    1d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:96:58:D3:62:3A:E3:A8:87:8C:C0:A9:7D:8F:6A:33:6C:5F:9E:87
            X509v3 Authority Key Identifier:
                keyid:90:93:64:5F:56:18:72:61:E6:5B:70:82:74:DB:D5:2C:00:DF:25:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kJNkX1YYcmHmW3CCdNvVLADfJQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F2B5/A9C06A8C741111EF8B0A9DA8762E951A/kJNkX1YYcmHmW3CCdNvVLADfJQ0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:52:27:88:ce:71:a4:75:26:e1:fe:87:20:50:a3:31:bf:c4:
         10:2e:4d:83:5c:af:bb:f3:31:dd:15:52:77:e6:ac:6e:69:b4:
         76:3f:ae:bb:7f:07:7c:f1:ba:fb:8a:3d:61:5c:b1:1f:8b:12:
         ee:10:4e:9e:c3:bd:c8:32:c3:d4:61:6c:08:01:c0:c3:6a:52:
         2a:c2:fe:a2:02:d7:65:a9:7a:c6:5e:d1:ed:03:ea:5a:95:98:
         b5:96:7f:8b:e9:01:ac:ff:b3:f9:63:69:0b:4b:c0:ba:e6:05:
         82:aa:4b:25:37:71:54:f0:44:e6:08:da:a2:77:48:0d:56:90:
         13:d2:c6:2c:a4:3d:53:76:9f:0c:9e:79:c4:8d:08:de:79:47:
         79:ce:8a:f9:e9:44:b4:ad:15:99:30:4e:ef:bc:c6:80:38:8c:
         3b:a1:04:d6:f3:ca:0d:40:e8:3f:b0:b8:ab:87:93:21:c6:4b:
         e4:67:a3:99:19:19:c9:3a:d3:0e:ae:7d:73:ac:9b:70:b0:8e:
         e6:ae:e1:83:b1:36:08:b1:97:5f:c6:54:5f:f9:39:d4:79:13:
         98:d6:4c:57:95:55:b2:f5:f2:a0:d2:3e:ae:31:d8:8f:63:09:
         cb:18:8b:06:05:ef:e6:81:37:b2:ac:ff:f1:2e:06:3a:74:57:
         53:9c:63:bc
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAOwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkYyQjVBRjExMC8GA1UEBRMoOTA5MzY0NUY1NjE4NzI2MUU2NUI3MDgyNzREQkQ1
MkMwMERGMjUwRDAeFw0yNTA0MjUwNDUxMzNaFw0yNTA0MjcwNDUxMzNaMBgxFjAU
BgNVBAMTDTY4MGIxNGQ2LTQ0NjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHYnswnDroQQUCtICCpiUyHq1pc4x7jQRlt28BxWKI4hAKnDwE5BroPx3V
NU0HrQ/jGiUvoYpsCXFtcV1LtoTdp8erFlP43tw7/0dyuiEdavnqvGGgVlztNnLS
wb5NNV6bSzEIygFEHhf1TxBHK6JVQ7hXIUotsKbJnj7ZUBEusc5oosu32659DHFX
iVspBl5WW5znbhusq1EdaIUkCMSL7Hf7HnOeWSj76BBtLDc0fJGAG/A3InqnQORn
i0J/yuY4MwXabACFMLE8mnv2L8L87OSKuRsBWjnE6vAI7/+c5Tq7nDHalCUT8har
Bs8wzXBbue6odLmj0kTDib+sNB3jAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiZZY
02I646iHjMCpfY9qM2xfnocwHwYDVR0jBBgwFoAUkJNkX1YYcmHmW3CCdNvVLADf
JQ0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZGMkI1L0E5QzA2QThDNzQxMTExRUY4QjBBOURBODc2MkU5NTFBL2tKTmtY
MVlZY21IbVczQ0NkTnZWTEFEZkpRMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tKTmtYMVlZY21IbVczQ0NkTnZWTEFEZkpRMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkYyQjUvQTlDMDZBOEM3NDExMTFFRjhCMEE5REE4NzYy
RTk1MUEva0pOa1gxWVljbUhtVzNDQ2ROdlZMQURmSlEwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDQUieIznGkdSbh/ocgUKMxv8QQLk2D
XK+78zHdFVJ35qxuabR2P667fwd88br7ij1hXLEfixLuEE6ew73IMsPUYWwIAcDD
alIqwv6iAtdlqXrGXtHtA+palZi1ln+L6QGs/7P5Y2kLS8C65gWCqkslN3FU8ETm
CNqid0gNVpAT0sYspD1Tdp8MnnnEjQjeeUd5zor56US0rRWZME7vvMaAOIw7oQTW
88oNQOg/sLirh5MhxkvkZ6OZGRnJOtMOrn1zrJtwsI7mruGDsTYIsZdfxlRf+TnU
eROY1kxXlVWy9fKg0j6uMdiPYwnLGIsGBe/mgTeyrP/xLgY6dFdTnGO8
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:27 2025 by rpki-client on console.sobornost.net