Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
File:                     dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft (raw, json)
Hash identifier:          MKfqpGSxB3fLhmsw0KXAH8XW+SsTCsqvetuzexz/5MQ=
Subject key identifier:   FF:62:B0:3C:78:99:EF:15:A6:A6:97:E5:03:29:63:FC:F1:64:9B:00
Authority key identifier: 75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4
Certificate issuer:       /CN=F36836B1AF/serialNumber=751D107F059938664384A37078E3859790BA28D4
Certificate serial:       012F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
Manifest number:          012E
Signing time:             Mon 28 Apr 2025 04:45:16 +0000
Manifest this update:     Mon 28 Apr 2025 04:45:15 +0000
Manifest next update:     Wed 30 Apr 2025 04:45:15 +0000
Files and hashes:         1: dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl (hash: BKBRcBLpbDbvNYsvmDkrMLzHu0Avz9gTVeMFcnvfWC4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36836B1AF, serialNumber=751D107F059938664384A37078E3859790BA28D4
        Validity
            Not Before: Apr 28 04:45:15 2025 GMT
            Not After : Apr 30 04:45:15 2025 GMT
        Subject: CN=680f07dc-207a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:05:b4:70:e8:e1:6d:71:31:5e:aa:6b:b6:75:
                    24:2c:81:b6:a3:d9:37:fe:e3:d6:8f:48:80:92:3a:
                    3c:d2:7e:23:49:ce:fb:8e:29:da:a8:57:5a:3c:5d:
                    dc:f2:ed:a8:9f:74:0d:ec:1d:87:9a:c5:9b:b7:36:
                    54:6e:f0:98:a9:84:72:70:71:d2:39:b0:e7:32:71:
                    2e:4a:96:4e:ff:72:06:1e:ad:7c:02:c9:37:d8:75:
                    73:91:51:2c:89:c9:f8:38:be:8b:78:3b:9f:ba:c9:
                    90:61:18:2c:b3:2c:4c:e2:ef:73:e7:a7:e8:c5:5c:
                    85:15:ea:28:96:ee:08:aa:6e:43:3a:88:b3:a3:88:
                    25:a9:6c:23:38:e0:98:72:67:18:54:3d:f2:f1:a0:
                    84:a2:d1:c5:eb:aa:d2:56:03:f8:d0:50:61:81:e0:
                    36:2e:a9:52:9a:48:ff:e5:e2:01:96:e4:3a:c7:34:
                    c1:52:1c:11:18:bc:6f:91:79:3e:6b:ad:2a:8e:42:
                    a4:15:95:cf:35:84:d9:62:e8:59:fc:0f:5a:48:88:
                    c0:f1:bc:60:c9:f6:7e:17:10:66:b9:7d:af:58:6a:
                    0c:35:e7:ae:8b:f8:88:6a:d8:17:e9:fe:5b:00:b6:
                    c4:53:16:50:d3:a0:5e:1a:ec:20:6f:96:0c:94:e4:
                    1a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:62:B0:3C:78:99:EF:15:A6:A6:97:E5:03:29:63:FC:F1:64:9B:00
            X509v3 Authority Key Identifier:
                keyid:75:1D:10:7F:05:99:38:66:43:84:A3:70:78:E3:85:97:90:BA:28:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/dR0QfwWZOGZDhKNweOOFl5C6KNQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36836B1/450D8348404211EF9B82A592762E951A/dR0QfwWZOGZDhKNweOOFl5C6KNQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:60:08:db:93:6a:87:d6:94:45:73:8e:35:0a:17:d2:38:99:
         ab:97:64:af:24:d3:44:f3:6e:29:ab:22:5f:fd:39:5f:e7:48:
         fc:e8:75:90:04:63:76:5a:d4:44:40:35:ba:37:9a:16:46:f7:
         ca:5c:0d:21:52:e0:3a:d6:ac:fe:2e:1f:03:31:06:fc:12:dd:
         6f:31:2e:5b:d8:44:84:37:bf:50:56:61:a1:4e:35:0a:1b:32:
         db:c1:3b:99:70:2d:0a:53:10:24:51:f5:ff:e1:40:42:ee:de:
         a3:80:43:c3:da:df:46:79:63:6b:e6:eb:ea:ec:fe:be:0a:41:
         e9:b1:f0:ff:d0:19:09:44:6c:17:09:f7:a9:b0:82:82:5b:8a:
         4f:49:f5:48:44:7d:5f:bc:e4:20:eb:ff:15:60:1d:47:75:72:
         3c:08:9c:a1:53:83:8f:b7:ce:ba:18:5a:d8:68:9d:95:41:35:
         1d:6f:8f:b2:a7:42:84:91:7e:c1:d4:c3:49:6c:4a:9d:18:16:
         d7:26:40:42:03:14:ea:dd:f8:83:7d:24:fd:fd:62:0d:4d:3b:
         da:b9:4f:45:0b:e7:41:fd:d2:6a:20:62:f8:bc:50:26:ff:77:
         1e:e3:3c:f1:76:1b:20:0a:0c:30:ef:10:e9:8c:ac:13:a4:83:
         78:68:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:23:03 2025 by rpki-client on console.sobornost.net