Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
File:                     XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft (raw, json)
Hash identifier:          CT5hLMaVji6gWpifgcA5ixKwxc4/ylNe0XcyZoSMYoc=
Subject key identifier:   15:84:7D:9B:E6:79:B8:51:DE:BF:8C:8A:06:7E:70:D1:59:FB:7A:E4
Authority key identifier: 5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14
Certificate issuer:       /CN=F36795C4AR/serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
Certificate serial:       0896
Authority info access:    rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
Manifest number:          0895
Signing time:             Sun 27 Apr 2025 01:34:35 +0000
Manifest this update:     Sun 27 Apr 2025 01:34:34 +0000
Manifest next update:     Tue 29 Apr 2025 01:34:34 +0000
Files and hashes:         1: XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl (hash: BdSDj5eyjS0XYFiN9giNxvt1Vsx4Gj/Oai9ifxVfuJI=)
                          2: 85DEE92291EF11E9ABCCB07EF8AEA228.roa (hash: 3K2tDuP6LQooSlB5SsHZUahCN8ylMLHTNlp/RyDYHoc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
                          rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2198 (0x896)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AR, serialNumber=5DD19C67F13E63D7ADA1AEAC8B77ACC063E9E514
        Validity
            Not Before: Apr 27 01:34:34 2025 GMT
            Not After : Apr 29 01:34:34 2025 GMT
        Subject: CN=680d89aa-2eb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:66:0e:2e:04:dc:bf:f0:e1:7e:5b:51:01:c4:
                    d0:3a:3f:dc:df:bf:71:44:b3:88:eb:4c:89:11:ee:
                    f4:c5:36:e1:81:b5:35:9c:0b:ae:b5:f3:93:51:71:
                    bf:50:9a:08:eb:e8:3a:61:75:66:29:61:f8:ff:d0:
                    fb:da:79:19:28:b4:ae:e2:7c:65:3f:5b:c6:32:17:
                    e7:57:2f:52:b1:0b:ec:c0:26:30:49:92:f4:5e:4c:
                    49:09:3b:dc:ca:d9:5f:ff:b3:c5:f5:90:96:61:10:
                    e8:9e:5e:b5:c3:6d:26:b6:d8:84:cc:ec:40:25:50:
                    8c:7d:dd:85:b8:f9:dc:82:72:fc:48:e1:01:92:f7:
                    2c:6a:d0:9c:33:24:09:77:5a:ff:01:e0:a7:40:30:
                    57:60:bd:77:3f:70:32:4b:fb:03:70:2a:b3:f5:d6:
                    fa:b0:4a:88:28:11:fc:06:8d:9d:b0:cb:31:ad:76:
                    ae:3a:cd:fa:1f:c5:80:fd:fb:46:53:6f:45:2d:56:
                    69:98:93:b9:9a:b7:c6:d5:5d:0f:54:ae:1e:b1:46:
                    b7:fe:26:9c:ff:06:e8:68:d8:42:71:c6:e6:aa:6c:
                    69:da:cc:cc:f7:72:33:a9:67:09:b5:f1:a7:b5:a7:
                    32:ce:dd:f5:9d:6e:39:68:3e:85:50:68:cc:9b:c7:
                    41:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:84:7D:9B:E6:79:B8:51:DE:BF:8C:8A:06:7E:70:D1:59:FB:7A:E4
            X509v3 Authority Key Identifier:
                keyid:5D:D1:9C:67:F1:3E:63:D7:AD:A1:AE:AC:8B:77:AC:C0:63:E9:E5:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/XdGcZ_E-Y9etoa6si3eswGPp5RQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/E84703BC91ED11E9B09E747DF8AEA228/XdGcZ_E-Y9etoa6si3eswGPp5RQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:be:c5:8e:72:fe:ae:69:6b:c0:73:e7:98:d3:b7:ff:fc:e1:
         84:83:21:7e:9c:43:57:43:d0:8d:d8:57:d6:d5:16:5d:34:20:
         fe:f2:c3:a7:ec:6c:8e:98:d4:21:cf:17:d8:21:09:96:95:da:
         3e:dd:b3:40:be:77:cd:25:92:69:af:70:0a:9f:e9:96:a1:62:
         f9:99:9c:19:6b:0a:6e:8c:63:91:be:86:ad:f7:10:92:01:f4:
         bd:ef:aa:45:44:98:26:6c:a0:94:27:9b:b2:e7:4b:d9:32:ac:
         cc:dc:c6:9e:d2:25:57:00:aa:7d:e4:6b:d6:91:d0:4d:5e:fb:
         34:9f:00:45:93:c4:50:7d:f0:dd:f1:de:c7:d8:ec:a2:63:f9:
         85:bd:3f:08:90:04:50:c8:c2:0d:81:c4:c2:c0:95:b9:7d:de:
         6b:ae:ff:df:dc:d9:8f:07:c8:72:c8:67:f4:4c:26:ac:3f:c6:
         86:bb:7c:38:ba:c5:7a:68:36:a5:16:da:e7:01:fc:fc:74:07:
         bc:8c:71:50:35:9d:26:39:b0:6c:6a:49:ce:0b:7e:ce:91:d0:
         c1:79:3b:ed:53:a5:b1:ec:bf:de:7e:b1:77:78:2c:12:77:48:
         63:cc:3a:aa:88:ea:cf:35:de:a1:83:33:59:d6:eb:62:bc:8b:
         d0:f7:13:ba
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCJYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzk1QzRBUjExMC8GA1UEBRMoNUREMTlDNjdGMTNFNjNEN0FEQTFBRUFDOEI3N0FD
QzA2M0U5RTUxNDAeFw0yNTA0MjcwMTM0MzRaFw0yNTA0MjkwMTM0MzRaMBgxFjAU
BgNVBAMTDTY4MGQ4OWFhLTJlYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5Zg4uBNy/8OF+W1EBxNA6P9zfv3FEs4jrTIkR7vTFNuGBtTWcC66185NR
cb9Qmgjr6DphdWYpYfj/0PvaeRkotK7ifGU/W8YyF+dXL1KxC+zAJjBJkvReTEkJ
O9zK2V//s8X1kJZhEOieXrXDbSa22ITM7EAlUIx93YW4+dyCcvxI4QGS9yxq0Jwz
JAl3Wv8B4KdAMFdgvXc/cDJL+wNwKrP11vqwSogoEfwGjZ2wyzGtdq46zfofxYD9
+0ZTb0UtVmmYk7mat8bVXQ9Urh6xRrf+Jpz/Buho2EJxxuaqbGnazMz3cjOpZwm1
8ae1pzLO3fWdbjloPoVQaMybx0FPAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUFYR9
m+Z5uFHev4yKBn5w0Vn7euQwHwYDVR0jBBgwFoAUXdGcZ/E+Y9etoa6si3eswGPp
5RQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc5NUM0L0U4NDcwM0JDOTFFRDExRTlCMDlFNzQ3REY4QUVBMjI4L1hkR2Na
X0UtWTlldG9hNnNpM2Vzd0dQcDVSUS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1hkR2NaX0UtWTlldG9hNnNpM2Vzd0dQcDVSUS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2Nzk1QzQvRTg0NzAzQkM5MUVEMTFFOUIwOUU3NDdERjhBRUEy
MjgvWGRHY1pfRS1ZOWV0b2E2c2kzZXN3R1BwNVJRLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBXvsWOcv6uaWvAc+eY07f//OGEgyF+nENX
Q9CN2FfW1RZdNCD+8sOn7GyOmNQhzxfYIQmWldo+3bNAvnfNJZJpr3AKn+mWoWL5
mZwZawpujGORvoat9xCSAfS976pFRJgmbKCUJ5uy50vZMqzM3Mae0iVXAKp95GvW
kdBNXvs0nwBFk8RQffDd8d7H2OyiY/mFvT8IkARQyMINgcTCwJW5fd5rrv/f3NmP
B8hyyGf0TCasP8aGu3w4usV6aDalFtrnAfz8dAe8jHFQNZ0mObBsaknOC37OkdDB
eTvtU6Wx7L/efrF3eCwSd0hjzDqqiOrPNd6hgzNZ1utivIvQ9xO6
-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:43 2025 by rpki-client on console.sobornost.net