Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
File:                     On6mEjuyi5myrc0qWftjiY7momU.mft (raw, json)
Hash identifier:          Gcb52VIviCDJdmYkPYsTEvKsuFyHSHd0u+AY8UeWjac=
Subject key identifier:   14:BB:CD:37:78:14:B0:BF:C9:F0:E7:6A:A2:11:B3:08:BC:92:B0:35
Authority key identifier: 3A:7E:A6:12:3B:B2:8B:99:B2:AD:CD:2A:59:FB:63:89:8E:E6:A2:65
Certificate issuer:       /CN=F36A0B3BAF/serialNumber=3A7EA6123BB28B99B2ADCD2A59FB63898EE6A265
Certificate serial:       5B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
Manifest number:          5A
Signing time:             Mon 28 Apr 2025 05:16:39 +0000
Manifest this update:     Mon 28 Apr 2025 05:16:38 +0000
Manifest next update:     Wed 30 Apr 2025 05:16:38 +0000
Files and hashes:         1: On6mEjuyi5myrc0qWftjiY7momU.crl (hash: vXrk+9Wun5P5QKIl3VSuKxZDH9gMsh2+t+d7jDSehHY=)
                          2: 8500AAA4DFA511EFA4A0995A762E951A.roa (hash: vzRjRuX2GZhGU/X4T8gnBdvjxS1YirPqGZKLuKJg1+Q=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A0B3BAF, serialNumber=3A7EA6123BB28B99B2ADCD2A59FB63898EE6A265
        Validity
            Not Before: Apr 28 05:16:38 2025 GMT
            Not After : Apr 30 05:16:38 2025 GMT
        Subject: CN=680f0f37-8f21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:31:a4:90:a3:41:f5:55:77:00:c4:d4:ab:3c:
                    4e:8b:ec:27:fb:5d:d8:7d:c8:90:5c:1d:48:27:2d:
                    7a:cd:c7:b3:9d:cd:cc:85:11:f3:fa:d5:b7:f5:ea:
                    5b:7f:2b:12:0b:fe:9f:18:96:66:d8:f0:79:59:c9:
                    55:d7:49:c3:f5:6d:c4:e7:af:a3:a6:dd:10:59:df:
                    e4:50:9a:13:55:3e:7c:4d:16:0f:a6:b9:2b:87:1d:
                    0b:60:0d:17:11:03:16:50:cc:0a:39:7a:0f:25:c1:
                    0e:8e:d7:72:c4:17:de:2b:0c:71:65:78:14:8e:9a:
                    e5:56:6a:9c:38:f9:09:f7:0a:fe:83:24:40:19:74:
                    bf:fe:f9:54:00:2c:a6:4c:5b:80:e4:9f:41:83:58:
                    4f:0d:d8:8d:37:0e:5e:b1:fd:15:2f:db:0b:d8:79:
                    94:22:52:ff:d4:cf:50:c4:ea:e3:a7:77:b6:be:57:
                    70:dc:52:8a:56:b7:4e:b4:c3:b4:72:bd:c0:c4:36:
                    88:85:8a:0b:b7:6b:7f:5f:02:6d:8f:cb:8c:cd:51:
                    de:ae:9d:36:be:44:8b:0f:4a:2b:85:99:a4:87:00:
                    87:05:75:75:87:74:47:94:c8:af:d8:45:ad:6b:dd:
                    bd:77:a4:05:ba:60:5e:4a:d0:71:70:78:f9:a2:6c:
                    84:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:BB:CD:37:78:14:B0:BF:C9:F0:E7:6A:A2:11:B3:08:BC:92:B0:35
            X509v3 Authority Key Identifier:
                keyid:3A:7E:A6:12:3B:B2:8B:99:B2:AD:CD:2A:59:FB:63:89:8E:E6:A2:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/On6mEjuyi5myrc0qWftjiY7momU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A0B3B/EC692812DFA311EFA7A90C4E762E951A/On6mEjuyi5myrc0qWftjiY7momU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:94:72:fb:b5:30:67:50:c1:f0:fd:2a:a7:b6:84:c4:9c:42:
         df:27:8f:74:a5:98:52:0c:00:6f:16:10:7f:34:80:9b:17:3e:
         e2:b0:47:1d:32:f3:bc:7a:9c:15:5c:87:81:4b:7e:67:5c:5a:
         29:ad:73:2a:72:cb:57:f2:3e:81:4f:fe:52:d7:1e:14:75:3e:
         6c:e2:65:45:90:ef:42:4e:d5:42:90:87:03:1b:36:21:f9:2b:
         2e:c9:10:0d:89:53:c3:a3:13:ed:4f:93:91:9e:f5:65:d1:0d:
         8d:6d:f3:54:2e:ea:1b:65:c4:ae:47:2f:e8:4a:12:1d:92:fc:
         30:ce:62:14:5a:2f:66:f3:8d:5c:13:7f:e6:f3:d6:5d:70:9d:
         69:f6:17:21:62:fb:29:58:4b:3b:3e:21:38:31:d6:9e:0f:b1:
         23:aa:3b:08:06:34:2c:89:1f:1a:60:29:f2:15:6f:7b:ff:20:
         12:79:98:86:cb:00:6d:a6:cb:86:28:bc:74:a2:a3:e1:99:da:
         54:12:db:23:87:2f:0e:a4:df:74:18:c6:a0:95:18:5c:6e:8e:
         d3:a6:91:04:f9:cf:a2:1c:23:a8:79:c0:fc:cc:24:af:e7:50:
         e8:45:97:47:58:16:29:b8:5e:68:d9:39:37:42:6c:f3:de:ab:
         38:4c:91:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:25:18 2025 by rpki-client on console.sobornost.net