Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
File:                     lUq4iuSUipt1F33uZX-rTm4MV4o.mft (raw, json)
Hash identifier:          Q+2XZ13h/Tn9S8hZ3a3PNBMPm9y5d3b2qagyru2Wyxk=
Subject key identifier:   1D:AA:BF:39:2B:F8:1E:D5:8E:DC:DB:D8:ED:45:4B:DC:6A:3B:5E:12
Authority key identifier: 95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Certificate issuer:       /CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Certificate serial:       089B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
Manifest number:          0897
Signing time:             Fri 25 Apr 2025 01:34:07 +0000
Manifest this update:     Fri 25 Apr 2025 01:34:06 +0000
Manifest next update:     Sun 27 Apr 2025 01:34:06 +0000
Files and hashes:         1: lUq4iuSUipt1F33uZX-rTm4MV4o.crl (hash: TVKg1hvTTUa4ZYtPn7MGqsWKFslbpTXknoaakW5YOLU=)
                          2: F9B4B74223E211EBB3370E5EF8AEA228.roa (hash: iAjclVjr18rb8UzFlzEG7HCKjOKSh2vSHYxUqjnpsFA=)
                          3: BABCAEFE91EF11E9B165E57EF8AEA228.roa (hash: hVKNt8SGYWt1U+/taZzhJep5equgMI82UyG7GvrNAnA=)
                          4: 9D413B06934311E9A21F097CF8AEA228.roa (hash: 6TisgPXDxDhUciEz6ugq9eMaF0xfY5KK7JgLSnZtkTk=)
                          5: 3A036A0023E311EBA7E4515EF8AEA228.roa (hash: 8IUYdHouL/KgAyYJ5ZHIEJY8Ka7R1x0U8rxHyMR+85A=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2203 (0x89b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AF, serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
        Validity
            Not Before: Apr 25 01:34:06 2025 GMT
            Not After : Apr 27 01:34:06 2025 GMT
        Subject: CN=680ae68f-a0a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c0:d1:7d:4c:97:64:71:7b:fb:7b:64:6e:df:
                    36:02:a8:84:a8:40:c9:50:2d:fb:42:ae:23:2e:1d:
                    ed:b0:18:55:c2:34:07:c0:87:ae:69:f9:46:41:4b:
                    d2:7d:00:b4:eb:99:6b:fa:70:05:14:17:87:88:17:
                    ac:ad:61:03:f1:49:10:4f:98:3e:78:75:81:4a:2b:
                    57:04:46:1b:ac:6b:6d:f2:37:82:83:c2:52:2e:9d:
                    b5:36:84:6c:db:48:2e:e2:42:b2:e3:c9:d6:75:3d:
                    9a:e4:33:90:cb:82:29:99:06:45:77:2b:1c:eb:f7:
                    1e:4c:88:ce:69:7b:f1:ad:8c:8d:7b:a4:2e:12:ff:
                    ea:56:5f:af:2c:38:21:17:c5:0f:bc:40:a9:9c:b5:
                    c2:dd:74:5f:3b:51:5f:8d:ae:2e:ee:e4:d9:a9:f9:
                    62:01:e7:ab:2e:8f:36:b8:9e:ca:40:9c:2e:f3:31:
                    e9:7d:12:e1:a4:67:1e:41:20:61:41:bd:ef:4d:3a:
                    eb:20:28:6f:e9:34:65:d3:ee:0f:bb:a5:11:8a:44:
                    5b:43:e2:79:fb:7d:07:2e:06:3b:17:c2:5e:0a:e6:
                    6a:df:61:3a:b9:32:57:87:51:0a:c2:82:d9:49:20:
                    8c:c5:b5:0b:3c:10:db:5f:53:b7:f4:99:2a:0e:4f:
                    79:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AA:BF:39:2B:F8:1E:D5:8E:DC:DB:D8:ED:45:4B:DC:6A:3B:5E:12
            X509v3 Authority Key Identifier:
                keyid:95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:86:5f:d5:35:14:7e:89:77:af:4b:f3:b2:d5:48:1d:e4:f9:
         91:df:cb:c3:69:be:4d:fc:12:1d:50:d5:d9:96:61:8d:5f:f6:
         4a:c0:04:94:e0:8b:3f:28:d6:e2:da:cb:6b:88:1b:2e:ac:f1:
         c5:3d:a5:41:3d:3a:1a:6f:7b:4c:93:dd:e4:25:c6:a2:1b:de:
         42:86:3f:03:2f:0e:bd:5f:73:84:d1:b1:9b:fd:7c:aa:e5:15:
         49:ea:98:1a:2b:c9:d4:fd:49:7d:7a:f5:ec:49:00:73:92:7b:
         73:06:e6:a4:22:37:92:fd:66:6b:90:4a:7e:97:4a:a7:de:7f:
         70:2c:36:51:d1:4c:c5:0c:67:de:85:87:43:47:83:19:65:98:
         c3:a0:99:3d:7c:1a:39:93:1c:fd:21:fb:f7:93:46:1b:22:28:
         e4:e2:a1:26:bf:0f:f0:14:61:d1:66:6f:82:b6:62:d1:08:09:
         1d:ba:ee:57:6d:39:7c:b3:74:04:34:13:67:32:b4:0d:e5:10:
         5d:e2:1b:cb:e1:3b:31:49:bd:90:d2:da:b6:b2:7c:74:bf:14:
         71:21:0d:d1:fe:3b:a9:62:ff:0b:f1:75:e1:b9:57:8b:db:b1:
         1b:b8:61:94:e0:7e:4b:74:fc:77:92:29:ed:77:12:4d:67:43:
         31:41:5e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:13 2025 by rpki-client on console.sobornost.net