Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
File:                     xE7ima9Yscv0a9HSD8fc2XxqV2g.mft (raw, json)
Hash identifier:          D7+QY3lK+xCJAFr88uUfTKKQy/AtCMB/fsGlNOd3rFA=
Subject key identifier:   46:05:DF:0A:DC:A1:6F:10:98:33:32:97:DD:60:2F:8E:E4:72:7A:E9
Authority key identifier: C4:4E:E2:99:AF:58:B1:CB:F4:6B:D1:D2:0F:C7:DC:D9:7C:6A:57:68
Certificate issuer:       /CN=F36A413FAF/serialNumber=C44EE299AF58B1CBF46BD1D20FC7DCD97C6A5768
Certificate serial:       67
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
Manifest number:          67
Signing time:             Fri 25 Apr 2025 05:07:25 +0000
Manifest this update:     Fri 25 Apr 2025 05:07:24 +0000
Manifest next update:     Sun 27 Apr 2025 05:07:24 +0000
Files and hashes:         1: xE7ima9Yscv0a9HSD8fc2XxqV2g.crl (hash: 1/nnNpUisxAiL3HisClpoMwTpC35URHvnMMK+7118kE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A413FAF, serialNumber=C44EE299AF58B1CBF46BD1D20FC7DCD97C6A5768
        Validity
            Not Before: Apr 25 05:07:24 2025 GMT
            Not After : Apr 27 05:07:24 2025 GMT
        Subject: CN=680b188d-dd31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ff:f5:3a:63:31:38:0a:12:2a:c2:de:a5:07:
                    cd:43:d7:ba:d6:50:f0:5e:a1:3b:d7:f4:e7:d3:13:
                    e5:37:56:6f:c3:3c:fe:04:1e:95:d0:2b:a1:15:3c:
                    ca:09:cb:6f:da:ac:08:c5:ce:ed:cd:c7:c0:0c:9c:
                    6d:51:6b:1a:1a:28:01:33:35:a5:6f:a5:da:6e:43:
                    d6:18:59:9a:88:27:ea:3a:05:72:b7:f8:67:05:d2:
                    01:0a:62:1e:92:58:14:7d:8a:94:f5:3b:2e:24:af:
                    29:1e:4d:e1:b6:40:05:f4:55:3e:a8:4d:cc:d6:ee:
                    a5:f1:2e:ec:1c:0b:ad:7e:ad:e8:43:5e:e0:2a:c2:
                    fa:9c:2a:b3:bc:40:14:d9:29:fa:50:16:12:cf:9f:
                    3c:ac:ca:32:3f:54:73:8d:90:b0:13:9a:52:23:d9:
                    de:78:e6:89:5a:e3:3c:5c:dd:d4:b3:c5:c4:b8:ef:
                    a3:b3:c0:4e:b0:9d:b6:17:c9:81:e0:61:13:b3:01:
                    42:32:d6:88:c0:71:7a:fb:82:83:b0:74:06:31:63:
                    d9:a4:04:b8:78:a8:94:6a:34:3f:a4:46:ac:76:44:
                    80:82:b7:32:a2:16:3f:1b:96:13:2f:12:94:97:55:
                    d1:03:90:21:06:24:d8:9a:25:f0:b1:5f:83:50:0a:
                    7c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:05:DF:0A:DC:A1:6F:10:98:33:32:97:DD:60:2F:8E:E4:72:7A:E9
            X509v3 Authority Key Identifier:
                keyid:C4:4E:E2:99:AF:58:B1:CB:F4:6B:D1:D2:0F:C7:DC:D9:7C:6A:57:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xE7ima9Yscv0a9HSD8fc2XxqV2g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A413F/EFD79ED2D33911EFB26AD7B3762E951A/xE7ima9Yscv0a9HSD8fc2XxqV2g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:22:a3:49:65:7b:65:09:16:22:8a:45:5d:a6:9c:9a:b0:83:
         65:c2:a2:24:e6:12:2d:08:fc:07:ff:fd:f3:82:00:16:30:61:
         fb:29:a9:19:d7:30:e0:57:68:f3:b9:ad:c6:50:cb:a1:c8:cd:
         ca:cf:bc:9f:1c:87:56:d4:e5:df:f4:bb:9d:28:19:b3:7b:80:
         5b:dd:74:88:ee:a5:a9:c3:ec:16:75:c6:c0:c4:85:0f:c7:0a:
         51:e9:a5:14:af:9c:4a:35:94:06:69:49:0c:68:bf:f2:2a:4c:
         bf:45:7b:c9:07:d5:03:d9:a6:c7:f9:67:03:de:8d:4f:5a:75:
         81:be:e0:82:c3:1b:a9:6d:e3:a1:45:e8:9e:9e:54:73:8e:d6:
         60:de:a1:4e:38:78:a0:90:a2:3b:2a:a8:ca:ad:3e:b3:3e:30:
         a3:0d:cf:d6:14:2c:df:9d:d6:6c:4d:c7:57:18:b6:f4:a6:d8:
         ae:2a:25:11:f3:81:34:bb:c5:d8:5e:ca:9d:44:4b:ff:c8:25:
         92:6c:09:b1:23:d7:de:48:23:ad:7e:86:99:25:f0:e9:24:36:
         18:c1:aa:d6:53:73:18:b8:08:31:4b:a8:07:6b:88:81:9a:f5:
         36:aa:cd:f2:8a:1f:8e:92:cd:24:45:9c:d4:16:c9:1e:7c:1c:
         65:98:eb:57
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBZzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZB
NDEzRkFGMTEwLwYDVQQFEyhDNDRFRTI5OUFGNThCMUNCRjQ2QkQxRDIwRkM3RENE
OTdDNkE1NzY4MB4XDTI1MDQyNTA1MDcyNFoXDTI1MDQyNzA1MDcyNFowGDEWMBQG
A1UEAxMNNjgwYjE4OGQtZGQzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALf/9TpjMTgKEirC3qUHzUPXutZQ8F6hO9f059MT5TdWb8M8/gQeldAroRU8
ygnLb9qsCMXO7c3HwAycbVFrGhooATM1pW+l2m5D1hhZmogn6joFcrf4ZwXSAQpi
HpJYFH2KlPU7LiSvKR5N4bZABfRVPqhNzNbupfEu7BwLrX6t6ENe4CrC+pwqs7xA
FNkp+lAWEs+fPKzKMj9Uc42QsBOaUiPZ3njmiVrjPFzd1LPFxLjvo7PATrCdthfJ
geBhE7MBQjLWiMBxevuCg7B0BjFj2aQEuHiolGo0P6RGrHZEgIK3MqIWPxuWEy8S
lJdV0QOQIQYk2Jol8LFfg1AKfFUCAwEAAaOCArgwggK0MB0GA1UdDgQWBBRGBd8K
3KFvEJgzMpfdYC+O5HJ66TAfBgNVHSMEGDAWgBTETuKZr1ixy/Rr0dIPx9zZfGpX
aDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTQxM0YvRUZENzlFRDJEMzM5MTFFRkIyNkFEN0IzNzYyRTk1MUEveEU3aW1h
OVlzY3YwYTlIU0Q4ZmMyWHhxVjJnLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMveEU3aW1hOVlzY3YwYTlIU0Q4ZmMyWHhxVjJnLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZBNDEzRi9FRkQ3OUVEMkQzMzkxMUVGQjI2QUQ3QjM3NjJF
OTUxQS94RTdpbWE5WXNjdjBhOUhTRDhmYzJYeHFWMmcubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBADgio0lle2UJFiKKRV2mnJqwg2XCoiTm
Ei0I/Af//fOCABYwYfspqRnXMOBXaPO5rcZQy6HIzcrPvJ8ch1bU5d/0u50oGbN7
gFvddIjupanD7BZ1xsDEhQ/HClHppRSvnEo1lAZpSQxov/IqTL9Fe8kH1QPZpsf5
ZwPejU9adYG+4ILDG6lt46FF6J6eVHOO1mDeoU44eKCQojsqqMqtPrM+MKMNz9YU
LN+d1mxNx1cYtvSm2K4qJRHzgTS7xdheyp1ES//IJZJsCbEj195II61+hpkl8Okk
NhjBqtZTcxi4CDFLqAdriIGa9TaqzfKKH46SzSRFnNQWyR58HGWY61c=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:28 2025 by rpki-client on console.sobornost.net