Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
File:                     S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft (raw, json)
Hash identifier:          a3LMvYMGIipntQyykOHe8OB30SaubpLdBHER9/yOs9A=
Subject key identifier:   4C:83:CD:1D:B1:8F:3B:09:D9:CA:B0:29:04:00:EA:2C:05:09:6F:19
Authority key identifier: 4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD
Certificate issuer:       /CN=F369E115AF/serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
Certificate serial:       0182
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
Manifest number:          0180
Signing time:             Mon 28 Apr 2025 04:35:31 +0000
Manifest this update:     Mon 28 Apr 2025 04:35:30 +0000
Manifest next update:     Wed 30 Apr 2025 04:35:30 +0000
Files and hashes:         1: S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl (hash: 76toc3WdOn2v8ENoRmKPrHUQrKakzVXeD6YTvZmwoA4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 386 (0x182)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369E115AF, serialNumber=4BD1270B700FF29D18423F183B9F92B36887D6DD
        Validity
            Not Before: Apr 28 04:35:30 2025 GMT
            Not After : Apr 30 04:35:30 2025 GMT
        Subject: CN=680f0592-ee82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:16:e4:28:96:d4:1c:30:bd:40:5d:a4:2c:dd:
                    80:39:20:50:c3:fe:3e:82:87:5e:fc:5e:50:bd:b1:
                    94:e5:42:67:04:13:f0:e2:19:b5:6e:26:cb:43:4e:
                    8d:26:c1:30:d4:80:fc:60:15:4a:73:c4:33:8d:67:
                    34:4d:44:6d:f0:5c:38:35:a6:58:5d:d6:ec:09:c2:
                    21:4f:eb:45:0a:00:21:8a:2d:f0:8d:e2:7a:83:84:
                    17:ce:5b:eb:1b:f1:67:62:49:53:7e:0e:eb:ca:ca:
                    2f:71:dc:e8:0d:dd:92:1b:3e:e0:9f:fb:1d:4d:fc:
                    d1:28:c1:18:a1:49:f1:38:27:ca:0a:c3:ef:97:bd:
                    c3:ee:f3:10:04:86:c8:a5:c7:58:57:d1:01:3a:d4:
                    a7:98:86:26:a6:e4:57:de:d5:c0:ec:fd:67:42:6c:
                    ed:91:c7:a0:82:30:4c:4e:27:08:d5:2a:9e:0b:18:
                    6d:3b:74:9b:ed:a8:e8:d7:52:36:ef:c2:bc:21:5d:
                    64:1b:6c:d8:ba:f0:63:0a:d3:35:31:82:77:dd:d1:
                    ad:aa:e3:c0:27:cc:2a:d6:20:50:ab:34:7c:8f:d4:
                    f0:f1:36:ec:d0:5a:fd:52:e4:15:f0:2f:18:63:44:
                    b5:76:51:17:9c:37:28:ff:b5:f3:ef:26:5e:ef:d5:
                    f8:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:83:CD:1D:B1:8F:3B:09:D9:CA:B0:29:04:00:EA:2C:05:09:6F:19
            X509v3 Authority Key Identifier:
                keyid:4B:D1:27:0B:70:0F:F2:9D:18:42:3F:18:3B:9F:92:B3:68:87:D6:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369E115/FBFEB76403C211EF9713C10C017001B1/S9EnC3AP8p0YQj8YO5-Ss2iH1t0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:ab:09:40:23:cb:d0:f1:36:49:f2:40:b3:70:b1:06:8f:6c:
         c3:16:52:7e:81:d3:c7:7c:49:72:69:e1:7e:10:26:a1:5f:52:
         9f:7e:10:e6:27:70:6e:0f:65:c4:a3:65:04:a6:e0:91:e0:7c:
         3a:ff:d5:01:25:b9:92:31:7c:03:d1:ee:e1:bd:a8:6e:e9:eb:
         fc:ad:2c:28:05:b1:28:21:1b:4a:78:2c:7e:59:ab:36:08:95:
         a1:85:dc:01:80:64:ce:25:77:28:7f:08:0e:a9:4c:0a:7e:10:
         68:6b:e0:97:d2:ea:b7:4e:a8:ce:02:9f:ad:4e:40:37:ac:48:
         c8:f6:93:f7:c6:a2:61:cf:27:4c:94:c6:c1:d0:db:ba:46:e6:
         33:d5:41:9e:80:53:81:53:30:cd:b5:fe:1d:54:f0:a1:a3:f0:
         3e:da:5a:d1:a4:e6:25:8c:cc:bb:86:d3:04:e0:ce:6c:4e:73:
         bb:50:69:d5:9f:71:1f:54:df:98:52:9e:76:51:3c:bd:6d:7b:
         2f:bf:b0:00:97:e0:97:81:0d:36:82:32:98:dd:9e:a4:46:41:
         06:ed:3d:8f:c8:60:61:14:a6:f6:09:c5:40:e7:aa:75:43:5d:
         68:36:64:02:9b:ec:f4:5b:bd:19:23:ef:2e:42:a0:56:2d:62:
         33:ea:1d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:25:18 2025 by rpki-client on console.sobornost.net