Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
File:                     zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft (raw, json)
Hash identifier:          xjNFaKend20h2CBfgSRqag0Om5Oo29HWwQ2JmHd+wKM=
Subject key identifier:   11:CB:C7:63:03:A1:13:DA:0B:69:37:D0:CF:8A:1E:2B:D1:11:D7:35
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Certificate issuer:       /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial:       012A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
Manifest number:          0126
Signing time:             Mon 28 Apr 2025 04:47:28 +0000
Manifest this update:     Mon 28 Apr 2025 04:47:27 +0000
Manifest next update:     Wed 30 Apr 2025 04:47:27 +0000
Files and hashes:         1: zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl (hash: bUe8Tf0MUFDywZ7XFuXuTiviXUZ1h0k+fqz95tStSTs=)
                          2: 0A4A7D2C53E011EF97D46343762E951A.roa (hash: qkXQan1qrLXn2t2IrFjyvM/NvTWvb3OJlxtePnzO678=)
                          3: 7A18E53AE3A511EFB1E8E756762E951A.roa (hash: 2LPC2UkkLzMGcbYCbFGtnfKTTqIGsxGXV0s+CLhea/M=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697E68AF, serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
        Validity
            Not Before: Apr 28 04:47:27 2025 GMT
            Not After : Apr 30 04:47:27 2025 GMT
        Subject: CN=680f0860-ea2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:67:4f:83:2e:49:d6:47:b1:8b:53:99:a9:9f:
                    d8:d8:72:ed:74:c8:33:2d:76:45:03:8a:29:6b:e2:
                    1f:82:45:d5:9a:50:2f:75:e1:01:52:45:1d:6a:59:
                    e2:74:8b:f4:3e:ae:cc:88:72:bd:4e:c4:fc:d8:b2:
                    72:87:f6:03:72:43:7b:18:07:45:36:da:4b:d8:25:
                    d0:db:92:da:8d:d4:6c:c1:e5:44:9b:7b:ba:dc:12:
                    64:f2:52:5f:37:f7:31:9e:f3:ec:94:1f:57:e1:21:
                    b5:9d:b6:22:69:bf:5e:11:0b:7a:ae:10:bd:69:2b:
                    59:40:39:de:90:56:e5:7d:97:5a:73:c1:17:45:59:
                    bb:c3:de:ed:71:98:e5:e1:40:fb:7d:b5:ee:14:44:
                    f2:e7:45:d0:b0:82:2d:20:1a:f6:b2:f1:3c:99:9b:
                    69:b2:bb:c6:d6:64:94:1a:dc:8e:48:e3:f3:30:79:
                    b9:78:77:65:23:52:9f:cc:ab:8f:52:48:81:bb:c0:
                    ab:cc:e0:f8:f0:fa:90:7e:9b:79:25:8c:6c:3a:45:
                    7d:2b:3f:9a:c2:f4:a5:46:49:f3:34:da:0b:c2:f8:
                    67:f7:b8:44:27:e9:1b:8a:86:13:97:1a:90:7e:a2:
                    04:36:c9:c1:9d:ac:1a:1a:9d:04:96:49:df:1e:85:
                    57:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CB:C7:63:03:A1:13:DA:0B:69:37:D0:CF:8A:1E:2B:D1:11:D7:35
            X509v3 Authority Key Identifier:
                keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:89:45:02:85:4b:ca:11:41:cd:eb:1d:a3:7b:f3:bf:bc:15:
         27:27:8e:c8:e4:7a:ee:4e:d6:1d:a7:ec:e5:f0:ab:81:66:43:
         66:14:60:9e:1c:b3:1c:26:e9:ac:78:33:ed:a4:2d:b6:c3:2e:
         40:a6:07:e8:c8:1a:18:3f:69:11:5d:18:7b:44:15:45:a9:bc:
         d0:68:6b:aa:57:bf:87:d7:ab:a2:6e:c9:5f:e1:95:10:39:0c:
         a1:98:ea:4d:68:d1:44:50:75:0b:97:22:91:07:28:9a:cf:59:
         2f:84:d1:85:fb:64:52:65:77:33:0a:95:3a:39:cb:dd:f9:14:
         ff:82:92:ce:0e:bd:97:e6:86:b4:8e:21:91:78:ac:11:e4:16:
         e5:76:97:1e:ec:ae:89:7d:48:33:fa:ae:db:9b:c5:9f:0d:3b:
         86:3c:63:03:23:8a:64:af:aa:6c:03:b4:50:bb:25:0c:3f:d5:
         d9:78:d9:83:ad:f1:de:9b:d7:24:a4:9e:9d:b1:05:63:f4:a4:
         b9:93:5c:ab:58:d8:3c:de:a3:aa:ee:61:01:57:8c:49:62:0a:
         4c:34:65:1a:92:53:60:28:6f:ae:48:35:57:cf:60:fc:6e:d9:
         da:e5:b7:8e:d1:55:fd:55:1f:89:4c:5c:9e:42:34:67:df:60:
         0d:54:2a:22
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICASowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTdFNjhBRjExMC8GA1UEBRMoQ0UxRUNEQTRGMDU2OTY3MEI1ODZFMkNEMzUyQkQ3
MjA2RkQ4NzgwNDAeFw0yNTA0MjgwNDQ3MjdaFw0yNTA0MzAwNDQ3MjdaMBgxFjAU
BgNVBAMTDTY4MGYwODYwLWVhMmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDoZ0+DLknWR7GLU5mpn9jYcu10yDMtdkUDiilr4h+CRdWaUC914QFSRR1q
WeJ0i/Q+rsyIcr1OxPzYsnKH9gNyQ3sYB0U22kvYJdDbktqN1GzB5USbe7rcEmTy
Ul839zGe8+yUH1fhIbWdtiJpv14RC3quEL1pK1lAOd6QVuV9l1pzwRdFWbvD3u1x
mOXhQPt9te4URPLnRdCwgi0gGvay8TyZm2myu8bWZJQa3I5I4/Mwebl4d2UjUp/M
q49SSIG7wKvM4Pjw+pB+m3kljGw6RX0rP5rC9KVGSfM02gvC+Gf3uEQn6RuKhhOX
GpB+ogQ2ycGdrBoanQSWSd8ehVcBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUEcvH
YwOhE9oLaTfQz4oeK9ER1zUwHwYDVR0jBBgwFoAUzh7NpPBWlnC1huLNNSvXIG/Y
eAQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk3RTY4LzVCMzI1QjI2NEE2MDExRUY4NjAxODI4RTc2MkU5NTFBL3poN05w
UEJXbG5DMWh1TE5OU3ZYSUdfWWVBUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3poN05wUEJXbG5DMWh1TE5OU3ZYSUdfWWVBUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTdFNjgvNUIzMjVCMjY0QTYwMTFFRjg2MDE4MjhFNzYy
RTk1MUEvemg3TnBQQldsbkMxaHVMTk5TdlhJR19ZZUFRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjiUUChUvKEUHN6x2je/O/vBUnJ47I
5HruTtYdp+zl8KuBZkNmFGCeHLMcJumseDPtpC22wy5ApgfoyBoYP2kRXRh7RBVF
qbzQaGuqV7+H16uibslf4ZUQOQyhmOpNaNFEUHULlyKRByiaz1kvhNGF+2RSZXcz
CpU6Ocvd+RT/gpLODr2X5oa0jiGReKwR5Bbldpce7K6JfUgz+q7bm8WfDTuGPGMD
I4pkr6psA7RQuyUMP9XZeNmDrfHem9ckpJ6dsQVj9KS5k1yrWNg83qOq7mEBV4xJ
YgpMNGUaklNgKG+uSDVXz2D8btna5beO0VX9VR+JTFyeQjRn32ANVCoi
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:25:17 2025 by rpki-client on console.sobornost.net