Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
File:                     9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft (raw, json)
Hash identifier:          0Ikvevh9r2BUTOUtYXSbqFK3DVbcnOlSMNserVq8hxY=
Subject key identifier:   50:A1:02:07:36:7F:28:4F:2A:93:BD:A6:F8:4D:B2:A6:83:8A:AB:6A
Authority key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
Certificate issuer:       /CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Certificate serial:       0803
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
Manifest number:          07FE
Signing time:             Fri 25 Apr 2025 01:43:03 +0000
Manifest this update:     Fri 25 Apr 2025 01:43:03 +0000
Manifest next update:     Sun 27 Apr 2025 01:43:03 +0000
Files and hashes:         1: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl (hash: JwMp65AS8zJPWM50vXIYTwhkmamkK+VkFg5cAhq8TmY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2051 (0x803)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671BB4AF, serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
        Validity
            Not Before: Apr 25 01:43:03 2025 GMT
            Not After : Apr 27 01:43:03 2025 GMT
        Subject: CN=680ae8a7-123e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:32:f5:ee:71:16:92:03:81:ed:10:5a:1a:d6:
                    c1:ea:4e:b4:9d:bd:3e:1d:49:d8:e2:ff:cd:b5:4a:
                    e9:09:22:cb:a6:1d:af:5b:94:37:57:62:56:64:3b:
                    d7:da:ad:7e:cc:20:75:6f:df:b6:5b:05:72:10:d2:
                    66:ae:fc:7f:8c:9b:36:cc:ee:fc:dd:90:c7:38:a8:
                    4c:d5:0a:8e:8a:2f:96:4a:14:e8:8b:05:57:d0:b0:
                    eb:9f:f2:a7:e2:e6:a8:0f:e5:55:38:a9:a8:ba:e5:
                    fc:5b:35:08:4c:d2:7b:86:b7:ca:5b:8b:a0:3c:de:
                    87:68:58:6f:ce:bc:78:79:93:c8:6c:af:eb:e2:3f:
                    23:86:4f:13:87:56:2d:16:63:3d:2e:5e:98:ca:b3:
                    05:44:8f:94:a4:ac:82:bb:c9:b7:ad:2d:99:dd:d4:
                    a2:fb:58:5d:5d:bc:5f:2a:f0:f4:19:84:3b:d8:70:
                    b3:83:47:46:dd:f0:11:f1:a8:54:db:e2:b8:aa:06:
                    5b:bc:ab:0e:34:79:4b:02:a6:fa:3c:13:73:0f:2e:
                    e1:3b:c6:ee:17:e8:d5:d3:16:5b:1f:30:8c:e5:87:
                    88:62:fc:b3:60:41:26:9c:28:6d:3e:40:4f:be:da:
                    96:99:5b:a7:40:51:d2:f7:b0:c6:cd:73:28:1b:79:
                    d9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A1:02:07:36:7F:28:4F:2A:93:BD:A6:F8:4D:B2:A6:83:8A:AB:6A
            X509v3 Authority Key Identifier:
                keyid:F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:47:f6:ee:e5:10:a2:6e:ca:52:fc:e6:3d:35:01:0a:59:1f:
         a1:b5:16:f6:4c:7b:ab:12:bf:13:ec:d2:0c:bc:b9:75:f1:cc:
         18:a5:32:80:ba:03:92:f4:22:67:d9:b3:cf:c1:24:00:ba:a2:
         65:d0:e5:b9:d0:75:c2:1f:bd:a9:b5:4e:60:f5:92:a3:9d:72:
         8f:b4:9d:d0:70:89:90:fb:d7:d9:e3:2d:0a:cf:1d:8f:59:a1:
         1e:cf:e4:5c:c4:67:06:20:c0:0c:44:da:e6:a1:92:90:7b:c6:
         6e:aa:90:0d:bf:27:fd:00:47:b9:2f:f3:eb:15:2d:ed:42:b2:
         93:e6:81:5b:bd:1a:6b:50:51:92:ae:f5:25:75:54:30:62:48:
         a0:61:71:bc:7e:7c:84:25:d9:81:3d:79:e2:a9:61:dc:9c:00:
         88:d7:5d:93:0e:65:af:c6:1c:25:50:a9:a0:7a:a3:63:5d:88:
         1c:8d:17:30:ef:dd:77:00:b7:4b:dc:98:be:fe:1f:6e:cb:7e:
         b3:8f:82:82:79:fa:a7:e1:89:3e:ca:32:44:0f:4e:dd:dd:a1:
         df:4b:f3:69:64:26:cd:05:dc:56:e1:72:2d:0f:8d:c5:d9:b5:
         08:13:74:d1:82:33:97:8e:10:5d:c2:c6:9e:13:bf:bc:81:c1:
         99:b3:b4:1a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCAMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzFCQjRBRjExMC8GA1UEBRMoRjcyQUM3NkJCMDdFNDREREM3QUM2MEU2NjMxRjFD
RDJFREYwMzVERDAeFw0yNTA0MjUwMTQzMDNaFw0yNTA0MjcwMTQzMDNaMBgxFjAU
BgNVBAMTDTY4MGFlOGE3LTEyM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCzMvXucRaSA4HtEFoa1sHqTrSdvT4dSdji/821SukJIsumHa9blDdXYlZk
O9farX7MIHVv37ZbBXIQ0mau/H+MmzbM7vzdkMc4qEzVCo6KL5ZKFOiLBVfQsOuf
8qfi5qgP5VU4qai65fxbNQhM0nuGt8pbi6A83odoWG/OvHh5k8hsr+viPyOGTxOH
Vi0WYz0uXpjKswVEj5SkrIK7ybetLZnd1KL7WF1dvF8q8PQZhDvYcLODR0bd8BHx
qFTb4riqBlu8qw40eUsCpvo8E3MPLuE7xu4X6NXTFlsfMIzlh4hi/LNgQSacKG0+
QE++2paZW6dAUdL3sMbNcygbednRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUUKEC
BzZ/KE8qk72m+E2ypoOKq2owHwYDVR0jBBgwFoAU9yrHa7B+RN3HrGDmYx8c0u3w
Nd0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcxQkI0LzAyRTY0NkY4MDYxRDExRUFCQzM4NjI1NkY4QUVBMjI4Lzl5ckhh
N0ItUk4zSHJHRG1ZeDhjMHUzd05kMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzl5ckhhN0ItUk4zSHJHRG1ZeDhjMHUzd05kMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzFCQjQvMDJFNjQ2RjgwNjFEMTFFQUJDMzg2MjU2RjhB
RUEyMjgvOXlySGE3Qi1STjNIckdEbVl4OGMwdTN3TmQwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFR/bu5RCibspS/OY9NQEKWR+htRb2
THurEr8T7NIMvLl18cwYpTKAugOS9CJn2bPPwSQAuqJl0OW50HXCH72ptU5g9ZKj
nXKPtJ3QcImQ+9fZ4y0Kzx2PWaEez+RcxGcGIMAMRNrmoZKQe8ZuqpANvyf9AEe5
L/PrFS3tQrKT5oFbvRprUFGSrvUldVQwYkigYXG8fnyEJdmBPXniqWHcnACI112T
DmWvxhwlUKmgeqNjXYgcjRcw7913ALdL3Ji+/h9uy36zj4KCefqn4Yk+yjJED07d
3aHfS/NpZCbNBdxW4XItD43F2bUIE3TRgjOXjhBdwsaeE7+8gcGZs7Qa
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:13 2025 by rpki-client on console.sobornost.net