Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
File:                     BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft (raw, json)
Hash identifier:          BMbR05rHsoBb32vJVt9fGseWdpj7Ln7sEgsInjg/44c=
Subject key identifier:   4A:1D:BC:7E:5A:87:72:84:90:02:29:D5:CA:EE:55:16:43:30:ED:CA
Authority key identifier: 05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1
Certificate issuer:       /CN=F367678FRI/serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
Certificate serial:       FB
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
Manifest number:          FB
Signing time:             Sun 27 Apr 2025 04:48:23 +0000
Manifest this update:     Sun 27 Apr 2025 04:48:22 +0000
Manifest next update:     Tue 29 Apr 2025 04:48:22 +0000
Files and hashes:         1: BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl (hash: 88ua5IPGwLVwHY1NkF4tF7l9ELd+1cYyaq6M7s2TmFU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
                          rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:45:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FRI, serialNumber=052B9CD10F6AE67B3127ED1237247E8AC44B79A1
        Validity
            Not Before: Apr 27 04:48:22 2025 GMT
            Not After : Apr 29 04:48:22 2025 GMT
        Subject: CN=680db717-7f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:19:a0:20:ba:56:d7:66:8a:7a:6a:7f:53:5c:
                    c5:14:39:03:a3:e3:c5:cb:58:a2:1b:8d:20:8d:f9:
                    bb:de:39:58:ec:16:62:10:77:74:97:0a:51:d3:26:
                    6f:69:d2:8e:d1:94:37:41:09:40:7d:f2:31:9d:35:
                    c1:fc:7b:3e:80:94:66:32:cf:d2:ee:95:99:c8:c7:
                    5c:8c:ff:fd:8c:5e:26:30:00:53:25:2e:5d:dd:51:
                    8d:cb:be:32:28:ba:17:59:a0:76:b7:c3:82:28:10:
                    6a:13:91:ab:f0:09:89:87:9f:15:0b:62:f4:b5:29:
                    44:8d:30:54:94:8c:6e:cd:3c:8a:a7:6c:0f:05:4b:
                    60:a3:2e:b1:b9:7d:6b:ba:41:65:35:5f:c8:cc:34:
                    e0:f5:c6:b1:87:24:cb:ce:00:ee:57:c8:3e:4d:47:
                    6e:58:b4:7a:af:d6:07:1f:6a:17:18:50:d5:e9:2a:
                    1c:cd:6f:2a:70:a8:6e:6e:38:80:1c:68:e8:bf:44:
                    80:8b:46:6f:54:99:3b:0e:4a:33:0f:8e:8b:a3:8d:
                    17:23:40:6e:f6:fe:b0:8c:b4:4c:34:eb:07:f4:ee:
                    01:40:8e:4a:3b:1b:93:69:86:42:07:33:5a:eb:b2:
                    de:ed:ad:ed:ea:83:94:ea:ac:ed:b0:f6:0f:92:c1:
                    d4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:1D:BC:7E:5A:87:72:84:90:02:29:D5:CA:EE:55:16:43:30:ED:CA
            X509v3 Authority Key Identifier:
                keyid:05:2B:9C:D1:0F:6A:E6:7B:31:27:ED:12:37:24:7E:8A:C4:4B:79:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/7C9883E2650B11EFBB96F755762E951A/BSuc0Q9q5nsxJ-0SNyR-isRLeaE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:12:bc:54:96:86:7c:b9:57:c6:6d:f4:3c:38:40:19:2e:9f:
         22:2e:ed:62:80:75:52:e7:2e:41:4d:78:c3:d4:ba:e0:79:d8:
         6e:9e:63:64:13:7e:06:c2:6d:1d:00:a4:05:f1:63:39:26:88:
         f3:4c:39:79:c6:3f:67:a1:aa:37:3a:17:c9:af:5b:ec:27:0b:
         73:20:ba:25:b5:61:27:ef:4b:e3:90:6e:1e:63:71:43:c0:36:
         23:0b:92:32:71:bc:ef:44:00:83:f4:9d:29:7a:1e:bb:bb:15:
         63:49:f3:19:1d:b0:ae:fa:d5:0e:4d:7a:58:52:16:5f:7c:a0:
         c8:ed:7b:4b:16:53:51:66:c0:6d:d8:83:75:de:5a:e3:ea:81:
         5c:c3:a0:56:06:b7:12:3c:11:1e:43:29:9a:3a:24:cf:0c:ec:
         45:dd:fc:c2:e5:a1:c0:9c:61:7e:8a:90:aa:4c:4a:a0:a1:38:
         a0:52:63:92:97:6f:1d:3f:84:cb:ae:25:e2:fb:12:79:36:4b:
         94:58:a4:5f:59:b4:9c:e5:57:c5:9d:ca:b3:bb:45:46:7b:2b:
         ab:04:58:16:44:33:7d:4f:09:a6:91:65:70:cc:95:15:a9:b9:
         df:8f:8e:68:bd:69:3d:9f:d0:b4:df:aa:28:a6:56:33:02:6c:
         e6:0b:f4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:38 2025 by rpki-client on console.sobornost.net