Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.mft
File:                     nWdNqh0x5rcSPGSUgdEU-pO97R8.mft (raw, json)
Hash identifier:          VIK0waUubxARAp8q6orVq6viaiSX+miPeEM1oDDBorY=
Subject key identifier:   13:4D:AF:96:DD:B5:CF:0F:74:FF:98:5F:76:07:6E:E6:C2:41:EA:83
Authority key identifier: 9D:67:4D:AA:1D:31:E6:B7:12:3C:64:94:81:D1:14:FA:93:BD:ED:1F
Certificate issuer:       /CN=F36A05ABAF/serialNumber=9D674DAA1D31E6B7123C649481D114FA93BDED1F
Certificate serial:       059A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nWdNqh0x5rcSPGSUgdEU-pO97R8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.mft
Manifest number:          0599
Signing time:             Fri 25 Apr 2025 02:23:19 +0000
Manifest this update:     Fri 25 Apr 2025 02:23:18 +0000
Manifest next update:     Sun 27 Apr 2025 02:23:18 +0000
Files and hashes:         1: nWdNqh0x5rcSPGSUgdEU-pO97R8.crl (hash: TGjZVnUIUBU9yj9E4dI74+aqN7WkDnSLgcfkyjfl9T4=)
                          2: 4E6BBD02DBF411EBBD1CB334F8AEA228.roa (hash: /m66F8lyHu8eSfVoSMkwDMFHVEqCkE2FHy0314I43Lc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nWdNqh0x5rcSPGSUgdEU-pO97R8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1434 (0x59a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A05ABAF, serialNumber=9D674DAA1D31E6B7123C649481D114FA93BDED1F
        Validity
            Not Before: Apr 25 02:23:18 2025 GMT
            Not After : Apr 27 02:23:18 2025 GMT
        Subject: CN=680af216-300c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:58:f9:64:2a:d8:16:0e:e2:60:82:84:40:1c:
                    e9:ef:f6:2a:4f:a4:44:c5:e5:76:79:60:6f:37:e4:
                    bf:bd:ce:3d:4c:1c:49:0c:9f:a6:fe:3b:14:70:ea:
                    7a:f7:74:15:dc:7a:72:a8:79:e6:eb:94:71:63:06:
                    8d:a4:b8:74:f5:04:5d:64:de:01:f2:83:4c:00:3b:
                    f6:67:3c:46:b7:35:89:df:4b:f1:10:5b:8f:ba:f7:
                    8e:04:82:28:2f:c2:e4:19:ae:11:99:36:5d:32:b6:
                    76:30:11:a7:76:cc:1d:59:31:3e:45:6f:40:68:80:
                    3b:40:f9:89:8c:5f:35:d4:38:66:58:1f:8e:d8:2b:
                    82:79:ae:9d:6b:17:70:44:47:d5:e5:77:82:91:e4:
                    e5:22:30:10:6a:fe:43:da:fe:24:e5:bb:b9:3a:a9:
                    d8:71:98:e7:a3:9e:e7:86:16:23:13:d6:99:d1:7e:
                    19:d8:8c:75:64:ac:88:8d:0e:fd:68:59:58:43:53:
                    70:38:76:7b:6c:4e:cf:90:09:54:5e:03:19:18:9c:
                    66:70:04:56:a3:7b:2b:58:c7:25:e1:c1:8c:55:40:
                    ce:07:ac:71:e1:d2:d4:6a:e9:31:d4:eb:61:2a:30:
                    21:b1:5d:76:8b:60:50:17:9d:2e:3c:a5:dc:b1:b6:
                    98:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:4D:AF:96:DD:B5:CF:0F:74:FF:98:5F:76:07:6E:E6:C2:41:EA:83
            X509v3 Authority Key Identifier:
                keyid:9D:67:4D:AA:1D:31:E6:B7:12:3C:64:94:81:D1:14:FA:93:BD:ED:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nWdNqh0x5rcSPGSUgdEU-pO97R8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A05AB/98015F36DBF311EBAE6FAD33F8AEA228/nWdNqh0x5rcSPGSUgdEU-pO97R8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:2d:37:fb:72:ce:e7:50:e1:38:c5:51:89:89:98:16:44:80:
         20:88:11:8e:37:13:9e:e8:57:35:25:84:83:30:82:6e:69:02:
         7d:86:e9:38:fc:81:93:93:d5:70:89:36:ae:e0:b5:08:0d:00:
         59:10:f4:69:eb:e5:a1:f1:48:13:f1:d5:16:6a:a9:66:1d:ee:
         1e:8b:92:9a:1e:f1:37:6d:bb:02:03:e2:87:2b:54:13:72:dd:
         d5:be:4d:df:7d:d7:34:e2:82:0f:bb:6e:f2:10:00:e6:a0:a2:
         1a:f4:f5:b4:01:be:c6:a8:e0:05:d2:c5:f2:9d:54:c3:d3:5e:
         0e:3d:56:c2:fc:ff:a8:b1:78:4c:89:93:34:5e:b2:a5:33:28:
         5d:bf:09:6e:5a:97:6d:79:aa:b0:1d:46:d8:34:d4:9b:cb:2c:
         24:bb:f2:3c:6f:b4:f4:df:ea:62:db:a3:fb:da:5f:4e:47:55:
         64:af:e3:44:83:fb:64:a3:12:26:3a:e1:1d:8e:ce:34:cb:19:
         23:78:11:fa:64:f2:50:3d:c4:b5:fb:e7:67:ff:15:bc:75:eb:
         56:7c:9e:43:5d:f1:2f:e7:00:04:e1:32:94:cf:4d:45:22:fe:
         73:a7:0e:57:fb:99:51:76:1f:33:91:13:d4:fc:8e:4e:4c:31:
         57:82:d3:80
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBZowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTA1QUJBRjExMC8GA1UEBRMoOUQ2NzREQUExRDMxRTZCNzEyM0M2NDk0ODFEMTE0
RkE5M0JERUQxRjAeFw0yNTA0MjUwMjIzMThaFw0yNTA0MjcwMjIzMThaMBgxFjAU
BgNVBAMTDTY4MGFmMjE2LTMwMGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCdWPlkKtgWDuJggoRAHOnv9ipPpETF5XZ5YG835L+9zj1MHEkMn6b+OxRw
6nr3dBXcenKoeebrlHFjBo2kuHT1BF1k3gHyg0wAO/ZnPEa3NYnfS/EQW4+6944E
gigvwuQZrhGZNl0ytnYwEad2zB1ZMT5Fb0BogDtA+YmMXzXUOGZYH47YK4J5rp1r
F3BER9Xld4KR5OUiMBBq/kPa/iTlu7k6qdhxmOejnueGFiMT1pnRfhnYjHVkrIiN
Dv1oWVhDU3A4dntsTs+QCVReAxkYnGZwBFajeytYxyXhwYxVQM4HrHHh0tRq6THU
62EqMCGxXXaLYFAXnS48pdyxtpgjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUE02v
lt21zw90/5hfdgdu5sJB6oMwHwYDVR0jBBgwFoAUnWdNqh0x5rcSPGSUgdEU+pO9
7R8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEwNUFCLzk4MDE1RjM2REJGMzExRUJBRTZGQUQzM0Y4QUVBMjI4L25XZE5x
aDB4NXJjU1BHU1VnZEVVLXBPOTdSOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL25XZE5xaDB4NXJjU1BHU1VnZEVVLXBPOTdSOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTA1QUIvOTgwMTVGMzZEQkYzMTFFQkFFNkZBRDMzRjhB
RUEyMjgvbldkTnFoMHg1cmNTUEdTVWdkRVUtcE85N1I4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCmLTf7cs7nUOE4xVGJiZgWRIAgiBGO
NxOe6Fc1JYSDMIJuaQJ9huk4/IGTk9VwiTau4LUIDQBZEPRp6+Wh8UgT8dUWaqlm
He4ei5KaHvE3bbsCA+KHK1QTct3Vvk3ffdc04oIPu27yEADmoKIa9PW0Ab7GqOAF
0sXynVTD014OPVbC/P+osXhMiZM0XrKlMyhdvwluWpdteaqwHUbYNNSbyywku/I8
b7T03+pi26P72l9OR1Vkr+NEg/tkoxImOuEdjs40yxkjeBH6ZPJQPcS1++dn/xW8
detWfJ5DXfEv5wAE4TKUz01FIv5zpw5X+5lRdh8zkRPU/I5OTDFXgtOA
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:01 2025 by rpki-client on console.sobornost.net