Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.mft
File:                     VacCz2rVFBmN-x1soZywXkltX2U.mft (raw, json)
Hash identifier:          VyL6RQKNNliARMruCCSZX63BBUkrxd31nwy6HFIV7y0=
Subject key identifier:   1E:2A:31:3A:14:1F:5B:3C:FC:B1:25:D1:44:92:42:82:90:71:6B:EB
Authority key identifier: 55:A7:02:CF:6A:D5:14:19:8D:FB:1D:6C:A1:9C:B0:5E:49:6D:5F:65
Certificate issuer:       /CN=F368BC41AR/serialNumber=55A702CF6AD514198DFB1D6CA19CB05E496D5F65
Certificate serial:       013F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VacCz2rVFBmN-x1soZywXkltX2U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.mft
Manifest number:          013F
Signing time:             Fri 25 Apr 2025 04:35:37 +0000
Manifest this update:     Fri 25 Apr 2025 04:35:36 +0000
Manifest next update:     Sun 27 Apr 2025 04:35:36 +0000
Files and hashes:         1: VacCz2rVFBmN-x1soZywXkltX2U.crl (hash: yCh+7m2TzD/DDwVSNF7k+kdhFGUjdUhUv9+EtRdG5wk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.mft
                          rsync://rpki.afrinic.net/repository/arin/VacCz2rVFBmN-x1soZywXkltX2U.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:26:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 319 (0x13f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368BC41AR, serialNumber=55A702CF6AD514198DFB1D6CA19CB05E496D5F65
        Validity
            Not Before: Apr 25 04:35:36 2025 GMT
            Not After : Apr 27 04:35:36 2025 GMT
        Subject: CN=680b1119-d1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:d3:6c:6c:5c:e4:37:a0:61:39:79:4c:e0:
                    b5:06:26:69:c4:68:7f:82:13:b2:f3:54:b0:e3:69:
                    e6:00:57:af:c2:00:92:ac:27:ac:72:6e:68:79:0f:
                    c2:c8:2e:b4:92:d7:06:56:e1:7b:0e:a5:a0:85:af:
                    7d:2e:56:5d:84:f4:69:99:f4:78:a4:ad:9f:c0:b3:
                    a9:0d:9c:44:0c:b8:ee:47:58:24:9d:b6:81:e5:ed:
                    89:a0:93:2f:2d:78:d4:99:14:d9:eb:e8:d7:4f:c2:
                    12:96:3f:b8:31:0e:7b:df:56:e8:b3:94:9b:48:5a:
                    59:1a:25:d6:20:43:09:36:d8:89:b1:48:a1:4a:25:
                    31:a8:8b:ab:7e:91:e3:c4:c3:66:81:ce:c7:7a:93:
                    59:fd:ca:3c:f3:32:53:e4:57:79:ee:38:07:5a:1d:
                    0e:ab:38:8c:fe:99:8d:58:bc:2a:53:e8:09:23:04:
                    5b:c2:48:f0:03:92:4b:2d:89:f5:c2:c5:54:a2:1d:
                    52:24:f1:d3:d8:f7:ff:4b:89:6d:aa:b7:05:9e:d8:
                    96:1d:dc:b9:77:20:e1:fe:c1:22:05:db:af:46:d3:
                    a1:34:dd:ee:15:b4:21:a0:97:c2:8e:0a:35:18:b2:
                    0b:ca:97:0c:3c:c4:85:f5:72:85:dd:44:01:be:f2:
                    53:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:2A:31:3A:14:1F:5B:3C:FC:B1:25:D1:44:92:42:82:90:71:6B:EB
            X509v3 Authority Key Identifier:
                keyid:55:A7:02:CF:6A:D5:14:19:8D:FB:1D:6C:A1:9C:B0:5E:49:6D:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VacCz2rVFBmN-x1soZywXkltX2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/D964FC3A2EE811EF8A4045BB762E951A/VacCz2rVFBmN-x1soZywXkltX2U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:da:5f:80:76:aa:83:16:2c:88:22:81:d5:b8:bb:77:be:58:
         98:4a:69:0e:36:2c:0b:9c:14:60:54:4a:d5:3e:ec:07:65:98:
         ba:c3:5d:f3:27:cd:ce:b1:42:d1:a3:ae:bd:a4:fe:0c:5e:f6:
         a6:90:e0:23:eb:ed:2a:c0:1f:10:6d:8a:bb:d4:aa:ca:e2:95:
         1b:8a:de:e3:ec:b9:0b:bd:fb:92:e1:05:98:6b:5d:3f:84:49:
         6d:c5:2b:7a:ff:0f:13:61:97:5d:cd:2e:57:b1:11:02:81:15:
         dd:7f:a6:03:e1:bb:76:fe:a4:77:85:e4:7b:b9:03:bc:7a:d2:
         f4:44:cc:44:86:de:5b:8d:1e:dd:72:cd:ac:42:51:02:9c:bf:
         87:5a:4f:b2:ec:1e:0f:08:b7:b1:41:d6:90:8d:73:2e:7c:13:
         bc:54:c1:2f:a0:6f:d4:16:cb:60:ca:95:f1:51:3e:b6:5b:df:
         8d:6e:1c:30:81:98:ed:0f:c7:8f:9d:c0:51:20:4c:ec:fd:a6:
         79:0d:06:56:c7:9d:ab:70:99:eb:1e:1d:51:84:f1:15:82:8c:
         8b:2a:6a:48:f8:36:ca:ce:5f:f3:d5:19:bd:9e:0c:ae:76:56:
         18:3e:1d:ef:39:66:4c:59:7b:fa:58:58:30:65:ec:bc:b6:4f:
         30:7d:f2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:28 2025 by rpki-client on console.sobornost.net