Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
File:                     bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft (raw, json)
Hash identifier:          0zM3U/D8pvhb42ay4vuQOz/5FC+AdzqrZx6uu24a6N8=
Subject key identifier:   9B:A1:CD:A1:5D:EA:48:E9:E4:79:40:AA:B0:3B:BC:F5:E2:2E:B2:6F
Authority key identifier: 6C:F6:DE:51:59:C7:D1:8F:33:E0:81:B6:6F:52:96:8B:B1:86:38:0A
Certificate issuer:       /CN=F369B918AF/serialNumber=6CF6DE5159C7D18F33E081B66F52968BB186380A
Certificate serial:       0654
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
Manifest number:          0653
Signing time:             Fri 25 Apr 2025 02:04:50 +0000
Manifest this update:     Fri 25 Apr 2025 02:04:49 +0000
Manifest next update:     Sun 27 Apr 2025 02:04:49 +0000
Files and hashes:         1: bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl (hash: PlnRwzpmpfpGa0br1fnS//Mt44zknumYnCQzMCLmMm0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1620 (0x654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B918AF, serialNumber=6CF6DE5159C7D18F33E081B66F52968BB186380A
        Validity
            Not Before: Apr 25 02:04:49 2025 GMT
            Not After : Apr 27 02:04:49 2025 GMT
        Subject: CN=680aedc2-0c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ba:65:88:65:c4:63:4c:24:08:e5:ad:6f:70:
                    73:82:de:29:cf:3c:b0:7f:ef:45:38:c0:a0:86:e8:
                    15:2c:76:06:05:dc:e1:32:0f:6b:6b:e0:6a:60:d8:
                    27:fd:5d:7a:e9:ca:a2:f3:08:08:cc:04:93:52:4e:
                    67:04:d9:0a:f4:64:91:cf:0d:87:01:0b:3d:2b:d8:
                    d6:6e:06:69:b9:10:eb:86:b7:bf:e3:c4:cc:3e:f4:
                    65:4e:c4:17:90:11:7e:a2:93:8c:f4:33:62:6d:61:
                    d8:da:b5:0c:20:87:68:ae:a4:03:83:f5:76:37:27:
                    fd:7b:0a:a1:7f:8f:47:8b:2c:af:15:40:99:d6:28:
                    f6:fd:a2:8a:69:ca:28:cb:70:56:0a:7f:05:f8:6f:
                    dc:60:fd:02:f1:5a:bb:07:52:33:0e:38:f1:cc:0e:
                    88:27:33:b4:14:9f:2f:1c:d6:1e:04:4e:ba:ce:4a:
                    7e:f1:34:c2:a1:16:78:c0:fe:bb:bb:d5:7d:eb:ec:
                    5a:03:29:6f:72:e0:2f:21:b3:bb:fc:b8:02:cb:af:
                    22:97:2f:1a:92:ff:5d:ad:4e:9e:53:48:8f:54:ed:
                    36:b4:c6:15:6b:6e:67:58:06:d6:0f:94:45:b9:64:
                    71:25:da:95:7f:49:6f:a9:81:5e:17:7e:81:4d:98:
                    09:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A1:CD:A1:5D:EA:48:E9:E4:79:40:AA:B0:3B:BC:F5:E2:2E:B2:6F
            X509v3 Authority Key Identifier:
                keyid:6C:F6:DE:51:59:C7:D1:8F:33:E0:81:B6:6F:52:96:8B:B1:86:38:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:1b:53:6d:b4:a7:d7:1e:69:40:da:96:1c:ef:97:87:bd:69:
         1a:df:92:43:66:ff:4f:20:82:9d:66:8e:ef:09:d0:fc:1f:3b:
         b0:67:1f:41:0d:b9:82:84:d9:91:6c:f6:d0:a9:d1:1a:ee:5b:
         d8:a0:a6:51:b9:b3:a1:6f:d9:9a:f7:10:e5:48:14:c5:06:34:
         0a:70:fb:d3:af:68:1c:a3:52:99:6a:62:72:36:74:ad:ce:fe:
         57:3c:14:0a:42:b1:13:8a:68:8f:0b:19:8e:8d:4d:ab:10:ee:
         b6:0d:0f:bc:ed:c6:c0:6b:e9:80:7b:19:6f:fc:e9:fb:4d:c8:
         34:fa:e2:55:80:8f:ae:12:d2:6f:a3:17:9f:59:56:c9:ad:ea:
         1d:70:cf:6c:d2:e2:b0:93:6d:b2:80:e0:02:c1:be:5e:30:1a:
         f5:32:45:07:da:02:96:d3:56:f6:02:9e:72:a9:f1:96:5c:8d:
         ba:90:2d:1e:a1:82:05:c4:2d:62:57:d1:93:23:14:8f:dc:e1:
         3f:93:8f:78:2c:47:a8:d6:05:0f:6a:a5:2b:3d:11:2d:5d:ad:
         03:81:a3:39:6c:a8:ae:44:b9:38:65:18:32:15:a9:d1:5d:12:
         83:25:8e:8e:b0:40:ff:c0:da:5e:6d:40:ac:26:d1:a1:5c:3e:
         ab:5a:52:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:00 2025 by rpki-client on console.sobornost.net