Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.mft
File:                     J6gbBcpK9RHHhjK7VblPrvRxyOU.mft (raw, json)
Hash identifier:          MYVZHMFeGhwFdgVvnsdBiDqk8wtQUOeIQGlQGuvm/LI=
Subject key identifier:   21:11:A6:FD:2F:A0:9C:77:50:68:86:01:71:FC:18:02:C5:D6:0D:6D
Authority key identifier: 27:A8:1B:05:CA:4A:F5:11:C7:86:32:BB:55:B9:4F:AE:F4:71:C8:E5
Certificate issuer:       /CN=F369A67FAF/serialNumber=27A81B05CA4AF511C78632BB55B94FAEF471C8E5
Certificate serial:       22
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/J6gbBcpK9RHHhjK7VblPrvRxyOU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.mft
Manifest number:          1F
Signing time:             Fri 25 Apr 2025 05:14:27 +0000
Manifest this update:     Fri 25 Apr 2025 05:14:26 +0000
Manifest next update:     Sun 27 Apr 2025 05:14:26 +0000
Files and hashes:         1: J6gbBcpK9RHHhjK7VblPrvRxyOU.crl (hash: SzUyq95GUSG4vdAgAkJoSFOkKU/y6gSbJxhF+QXrqAE=)
                          2: 34C8DFBC105011F093296B58762E951A.roa (hash: QuatNFiiwr6rSEcJFhngJgion3t9GXDa/1Qg7UY1HPY=)
                          3: F22AD7220FD311F08E64955F762E951A.roa (hash: 1ogyRq61nFkep8Rj3wCMP1Wk+e6p2Z0WHHRkZHEIT+E=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/J6gbBcpK9RHHhjK7VblPrvRxyOU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369A67FAF, serialNumber=27A81B05CA4AF511C78632BB55B94FAEF471C8E5
        Validity
            Not Before: Apr 25 05:14:26 2025 GMT
            Not After : Apr 27 05:14:26 2025 GMT
        Subject: CN=680b1a33-1249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bf:41:65:36:49:e1:20:13:3a:5f:e8:94:92:
                    55:74:a4:4b:40:69:a2:38:2f:6f:3b:9f:46:f4:fa:
                    15:0a:35:07:1a:11:3d:6b:fe:a8:3c:ba:f4:57:42:
                    3f:cb:88:73:79:bb:c9:f9:00:e1:df:24:51:f3:c6:
                    20:5a:57:33:1b:bd:22:1b:46:a1:76:74:c7:53:54:
                    71:28:4c:17:98:71:37:a7:e3:c3:54:dd:6d:77:b9:
                    81:58:7a:d3:bf:3e:6c:22:e0:dd:ad:4e:cb:86:76:
                    d2:fc:19:d2:00:32:b6:d5:67:76:46:26:81:e9:6c:
                    f8:62:f5:b4:45:5b:e2:c4:a6:8c:69:95:09:7f:b6:
                    1e:54:a6:94:e1:74:63:af:c3:e3:03:c9:20:c3:df:
                    3b:43:c3:bb:d2:65:c1:49:4d:2a:d9:6f:08:b6:8c:
                    81:f6:9c:6a:09:74:de:91:dd:dc:be:ad:ca:bc:56:
                    ba:75:f9:4f:a7:e8:6a:5d:60:0d:7a:bb:06:71:4c:
                    3f:f1:5e:d7:69:92:07:a7:68:5a:d1:a8:69:af:cf:
                    2b:4b:72:49:ad:db:a4:10:89:ea:7a:78:2d:b8:24:
                    f7:57:92:d1:ae:8b:80:42:26:42:e4:06:22:0f:12:
                    4f:05:82:a0:38:fb:45:ec:ce:d6:d3:bf:41:2f:25:
                    a3:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:11:A6:FD:2F:A0:9C:77:50:68:86:01:71:FC:18:02:C5:D6:0D:6D
            X509v3 Authority Key Identifier:
                keyid:27:A8:1B:05:CA:4A:F5:11:C7:86:32:BB:55:B9:4F:AE:F4:71:C8:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J6gbBcpK9RHHhjK7VblPrvRxyOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A67F/DABFABF60FC111F09ECD7C73762E951A/J6gbBcpK9RHHhjK7VblPrvRxyOU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:ea:9d:0c:64:a7:3a:cb:29:70:ef:d9:a9:ea:55:b6:31:7b:
         3f:92:46:31:5d:07:86:d0:d2:7c:9d:41:33:b3:0f:d7:91:4d:
         35:c0:49:b2:59:b3:fa:6c:bd:5f:3d:7a:01:8f:84:08:35:d9:
         3f:18:71:33:be:d8:3e:0e:09:7d:6f:bf:42:25:97:b6:93:e7:
         80:0f:2f:4d:69:49:ea:14:c2:36:05:80:f6:76:9b:73:fa:03:
         2c:46:b0:92:ce:52:c9:56:f3:6f:77:43:3e:9b:c5:e5:09:02:
         8d:d8:9c:54:db:53:1e:8b:0f:e7:4a:79:b3:b9:af:86:6e:f9:
         d6:a2:f9:ff:c4:15:69:5a:05:51:06:b0:82:fa:a5:a8:ef:8e:
         4f:02:53:df:f5:63:32:c8:64:23:83:7b:47:f9:c7:b2:8e:5d:
         f7:dd:93:95:39:bd:e7:aa:f9:92:b8:0c:7c:67:a9:6e:b3:56:
         f8:ea:ff:eb:63:f6:25:f5:5a:50:3a:c5:03:8e:27:a3:c1:98:
         53:7d:80:06:de:11:fc:d6:22:cc:e2:e2:6c:7b:95:55:d1:ac:
         e7:1a:d7:d2:6d:93:d8:04:a7:79:86:73:60:a6:2e:aa:11:38:
         32:76:4f:10:5e:cb:f8:e8:5d:04:9b:64:67:bb:37:82:70:00:
         b5:38:80:66
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBIjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY5
QTY3RkFGMTEwLwYDVQQFEygyN0E4MUIwNUNBNEFGNTExQzc4NjMyQkI1NUI5NEZB
RUY0NzFDOEU1MB4XDTI1MDQyNTA1MTQyNloXDTI1MDQyNzA1MTQyNlowGDEWMBQG
A1UEAxMNNjgwYjFhMzMtMTI0OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKy/QWU2SeEgEzpf6JSSVXSkS0BpojgvbzufRvT6FQo1BxoRPWv+qDy69FdC
P8uIc3m7yfkA4d8kUfPGIFpXMxu9IhtGoXZ0x1NUcShMF5hxN6fjw1TdbXe5gVh6
078+bCLg3a1Oy4Z20vwZ0gAyttVndkYmgels+GL1tEVb4sSmjGmVCX+2HlSmlOF0
Y6/D4wPJIMPfO0PDu9JlwUlNKtlvCLaMgfacagl03pHd3L6tyrxWunX5T6foal1g
DXq7BnFMP/Fe12mSB6doWtGoaa/PK0tySa3bpBCJ6np4Lbgk91eS0a6LgEImQuQG
Ig8STwWCoDj7RezO1tO/QS8lo6ECAwEAAaOCArgwggK0MB0GA1UdDgQWBBQhEab9
L6Ccd1BohgFx/BgCxdYNbTAfBgNVHSMEGDAWgBQnqBsFykr1EceGMrtVuU+u9HHI
5TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2OUE2N0YvREFCRkFCRjYwRkMxMTFGMDlFQ0Q3QzczNzYyRTk1MUEvSjZnYkJj
cEs5UkhIaGpLN1ZibFBydlJ4eU9VLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSjZnYkJjcEs5UkhIaGpLN1ZibFBydlJ4eU9VLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY5QTY3Ri9EQUJGQUJGNjBGQzExMUYwOUVDRDdDNzM3NjJF
OTUxQS9KNmdiQmNwSzlSSEhoaks3VmJsUHJ2Unh5T1UubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAKXqnQxkpzrLKXDv2anqVbYxez+SRjFd
B4bQ0nydQTOzD9eRTTXASbJZs/psvV89egGPhAg12T8YcTO+2D4OCX1vv0Ill7aT
54APL01pSeoUwjYFgPZ2m3P6AyxGsJLOUslW8293Qz6bxeUJAo3YnFTbUx6LD+dK
ebO5r4Zu+dai+f/EFWlaBVEGsIL6pajvjk8CU9/1YzLIZCODe0f5x7KOXffdk5U5
veeq+ZK4DHxnqW6zVvjq/+tj9iX1WlA6xQOOJ6PBmFN9gAbeEfzWIszi4mx7lVXR
rOca19Jtk9gEp3mGc2CmLqoRODJ2TxBey/joXQSbZGe7N4JwALU4gGY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:28 2025 by rpki-client on console.sobornost.net