Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
File:                     hHYz30sJnBpSITpyTYxq0rIkb1U.mft (raw, json)
Hash identifier:          sbSMXUPEaV67VMPnmU41Bewl9+75LikghFTXZ386HQ4=
Subject key identifier:   6F:C2:D0:B1:E5:D8:79:16:53:07:7F:78:C1:1C:49:8E:43:5A:15:98
Authority key identifier: 84:76:33:DF:4B:09:9C:1A:52:21:3A:72:4D:8C:6A:D2:B2:24:6F:55
Certificate issuer:       /CN=F369A086AF/serialNumber=847633DF4B099C1A52213A724D8C6AD2B2246F55
Certificate serial:       030F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
Manifest number:          030E
Signing time:             Sun 27 Apr 2025 03:37:32 +0000
Manifest this update:     Sun 27 Apr 2025 03:37:31 +0000
Manifest next update:     Tue 29 Apr 2025 03:37:31 +0000
Files and hashes:         1: hHYz30sJnBpSITpyTYxq0rIkb1U.crl (hash: YJq+qX6SYg1exFp3KkAJVbE9MQka3IvquZhBoNjkqKY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 783 (0x30f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369A086AF, serialNumber=847633DF4B099C1A52213A724D8C6AD2B2246F55
        Validity
            Not Before: Apr 27 03:37:31 2025 GMT
            Not After : Apr 29 03:37:31 2025 GMT
        Subject: CN=680da67c-eb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:00:55:b5:73:83:47:4b:19:92:1d:bd:30:d8:
                    63:97:f3:2c:88:76:49:43:49:73:f5:ad:f3:da:7c:
                    20:9f:2a:31:83:99:75:ef:4b:9c:88:1e:a8:19:bd:
                    ea:1e:ad:a6:b9:51:c5:d6:c8:86:f3:80:14:58:78:
                    07:26:65:f2:70:30:a8:23:82:67:5f:1e:df:df:5f:
                    bf:1d:ad:49:f2:74:8a:57:3a:99:4c:01:c5:2e:93:
                    c9:16:71:d1:f5:56:d7:1b:66:b6:a3:60:a7:4b:32:
                    ee:d1:4d:32:5f:16:85:36:ab:d6:0c:06:65:5f:7b:
                    4b:7d:6e:ad:bf:5d:5e:ee:34:25:92:b0:d7:d1:9e:
                    ff:7b:f6:e7:8b:2d:f0:80:4c:e0:63:2a:23:49:ad:
                    c0:09:b3:5f:af:ea:eb:6a:78:26:83:11:07:45:57:
                    a9:d0:c8:5d:e7:0c:65:a0:0f:65:79:c0:ae:0d:3b:
                    d9:8a:3a:9e:be:c2:ff:3e:2a:5a:f8:5a:87:42:68:
                    92:68:84:11:ab:00:38:08:29:b0:7d:54:78:82:f2:
                    22:c6:06:c6:35:83:a2:e8:6a:a9:e4:d9:6e:7c:04:
                    d3:72:96:b2:93:96:2b:5c:ed:ee:80:32:fb:28:7b:
                    ea:41:7a:73:9f:98:64:f1:b9:26:f0:4b:1a:07:d8:
                    49:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C2:D0:B1:E5:D8:79:16:53:07:7F:78:C1:1C:49:8E:43:5A:15:98
            X509v3 Authority Key Identifier:
                keyid:84:76:33:DF:4B:09:9C:1A:52:21:3A:72:4D:8C:6A:D2:B2:24:6F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a2:e0:f8:f3:29:b9:2c:d3:25:6d:35:21:06:70:d9:42:7c:
         45:67:e1:b7:5e:9e:be:a6:fe:9e:24:5f:7f:28:3d:a4:10:91:
         6f:fa:16:84:18:9f:d1:44:69:dc:da:91:4c:f0:23:88:e8:87:
         89:13:c5:98:3c:1c:89:e1:6c:41:46:0d:ee:27:58:b3:2f:2a:
         56:39:e7:0c:40:2d:7c:4e:1d:e3:82:31:86:d4:31:bc:ef:f5:
         36:f1:07:80:88:fe:a2:85:9b:d5:dd:8a:1b:44:67:ff:46:b6:
         67:58:18:48:ce:c9:51:f8:fd:41:60:34:b8:d3:08:5f:73:cd:
         4b:73:29:98:4f:0c:fb:c8:73:02:38:0f:49:43:0b:d4:19:0e:
         65:32:fc:ac:52:c4:11:8d:df:5d:d2:90:4b:e0:7e:42:3c:1a:
         b0:3f:0a:81:a8:db:9c:cc:6b:73:20:2d:6d:4b:ea:07:c9:c6:
         a3:89:39:9b:c0:8b:a9:cc:97:4f:df:15:d5:91:18:2e:43:71:
         0e:ae:c7:b7:cf:49:d8:02:bf:b6:14:b4:4c:c0:1e:15:42:5e:
         24:c1:43:14:5a:00:fb:82:4d:c6:73:ed:d1:52:5a:87:4b:2e:
         6f:e3:3c:f4:4c:aa:23:ce:ff:14:8a:e1:f0:49:fe:ee:45:31:
         79:f0:92:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:44 2025 by rpki-client on console.sobornost.net