Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
File:                     cfbjXgELx4fYmgtLqTPZlvrU2tI.mft (raw, json)
Hash identifier:          KWR3HzieXVawuZRro3XBUYDT/kKPBMdvzDpkncfv+SU=
Subject key identifier:   99:7D:6C:E0:9B:CE:93:65:BE:EF:7A:FB:9F:A3:5E:4E:3E:11:05:3C
Authority key identifier: 71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
Certificate issuer:       /CN=F36882A1AF/serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Certificate serial:       05B9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
Manifest number:          05B9
Signing time:             Mon 28 Apr 2025 02:22:35 +0000
Manifest this update:     Mon 28 Apr 2025 02:22:34 +0000
Manifest next update:     Wed 30 Apr 2025 02:22:34 +0000
Files and hashes:         1: cfbjXgELx4fYmgtLqTPZlvrU2tI.crl (hash: EGAFzfaVbjA75lsgDgjubeijSe5FuK/JCI0Gjpo2skQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1465 (0x5b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36882A1AF, serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
        Validity
            Not Before: Apr 28 02:22:34 2025 GMT
            Not After : Apr 30 02:22:34 2025 GMT
        Subject: CN=680ee66b-c382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:c0:27:a1:a5:52:f6:a4:66:9c:5a:57:f5:
                    96:21:4c:15:f9:e1:9a:76:2d:84:49:90:ac:1e:7e:
                    5d:a0:8d:51:57:1e:10:39:63:4c:e3:89:b1:68:22:
                    f4:27:c2:d4:d5:ba:7b:08:29:1a:d7:63:0a:d4:42:
                    b0:0a:7f:17:d7:bb:c0:e2:c3:78:fe:f7:20:2b:8c:
                    9b:33:15:7b:1d:df:29:76:8f:59:7e:01:93:88:f1:
                    bf:71:c2:bd:4d:4d:cb:25:8b:a9:2e:bf:64:66:bf:
                    67:6d:39:23:93:7b:a3:14:82:2c:93:69:0f:11:f8:
                    8e:f3:a0:0a:16:35:51:c0:50:72:33:94:fd:4a:01:
                    52:31:7a:d1:a6:4a:93:db:81:94:41:b8:00:ab:09:
                    06:3c:4a:9d:b8:0b:b3:30:91:a9:73:e5:d5:c6:a1:
                    02:5f:00:83:e6:0e:7a:21:d9:ea:0c:95:fd:e6:f9:
                    37:0b:87:02:22:3b:83:72:ea:a7:4c:e9:19:e7:6c:
                    e0:c9:67:77:ca:dc:fb:75:ec:c1:bf:c1:49:40:56:
                    6e:21:30:d1:ab:ed:94:2f:35:1d:fc:e0:c5:4d:80:
                    96:cf:9b:61:30:28:c7:34:41:fb:ac:bc:14:3d:18:
                    c5:95:2f:f7:cc:65:5a:a4:33:92:4a:2a:f7:4d:ed:
                    9e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7D:6C:E0:9B:CE:93:65:BE:EF:7A:FB:9F:A3:5E:4E:3E:11:05:3C
            X509v3 Authority Key Identifier:
                keyid:71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:90:c0:ac:d1:4d:f8:d0:6c:cc:9d:2c:89:30:c0:17:97:d9:
         38:40:0b:68:d0:03:6c:25:c5:c1:99:20:36:22:6b:5f:a7:78:
         d7:30:c4:5c:81:e1:2a:ef:f4:9c:0e:1d:51:aa:0f:75:17:ff:
         cb:b0:da:f0:6f:cb:ed:04:08:24:94:7e:2f:f5:f5:4f:ba:41:
         f8:7e:79:e9:59:20:a8:29:13:5f:b3:1c:de:5d:16:15:66:b5:
         a4:c6:4a:39:00:c9:87:71:c3:87:ea:66:f3:b7:b6:ad:10:1c:
         8f:57:d5:a9:04:26:b2:56:f4:31:b0:8b:89:82:e1:7c:4b:1a:
         fe:4e:f8:bf:c2:c0:51:1c:6e:ce:d4:67:dc:b1:41:cd:a9:94:
         7c:3d:2e:b0:9e:bf:f8:1f:d0:47:40:20:c8:e9:4c:09:52:c0:
         30:f6:b5:f6:8c:a3:e3:d6:02:dd:86:7b:b3:14:1a:e0:ec:8d:
         5c:e0:0b:76:79:2a:be:c4:45:b5:96:95:c4:16:fc:a8:02:e3:
         0a:2a:27:6c:20:de:f8:8d:ce:2b:33:df:c1:23:c3:b6:54:5a:
         e7:cf:fb:bb:20:33:40:7c:40:3d:d9:80:13:fc:06:6e:98:16:
         59:63:64:7d:b3:1d:d7:ae:f3:b1:e2:7e:a1:ed:46:a7:e4:e6:
         9c:82:6a:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:02:36 2025 by rpki-client on console.sobornost.net