Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft
File:                     m1ZovBMhETHfDtPunCXTEUxUspM.mft (raw, json)
Hash identifier:          In1auMprfDxGs58RSRb/7mTpwmbaITvZeEwPpD3LGBA=
Subject key identifier:   F2:AB:22:C8:55:F6:3A:DD:E1:32:B3:68:56:C4:7B:DA:18:A8:B5:AE
Authority key identifier: 9B:56:68:BC:13:21:11:31:DF:0E:D3:EE:9C:25:D3:11:4C:54:B2:93
Certificate issuer:       /CN=F36A42DFAF/serialNumber=9B5668BC13211131DF0ED3EE9C25D3114C54B293
Certificate serial:       026E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/m1ZovBMhETHfDtPunCXTEUxUspM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft
Manifest number:          026C
Signing time:             Sat 26 Apr 2025 04:01:12 +0000
Manifest this update:     Sat 26 Apr 2025 04:01:11 +0000
Manifest next update:     Mon 28 Apr 2025 04:01:11 +0000
Files and hashes:         1: m1ZovBMhETHfDtPunCXTEUxUspM.crl (hash: EjKTAFBvZN2Pqh5R3qhyy2Z47Yd5DJ125qoiNCpTQgo=)
                          2: 3A4EF220A8A711EF9CFB1394762E951A.roa (hash: L1LHN+SJMi+Tgbc6P2tpj/rVnix2khr9hjlkpH0IVPE=)
                          3: 63EB76DE4D6411EEB8D5BE834AD9E6FC.roa (hash: fbwi/jtS6FeTqYdpHpFLvs6qADWyxrzMpo/5QspGOXI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/m1ZovBMhETHfDtPunCXTEUxUspM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 622 (0x26e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A42DFAF, serialNumber=9B5668BC13211131DF0ED3EE9C25D3114C54B293
        Validity
            Not Before: Apr 26 04:01:11 2025 GMT
            Not After : Apr 28 04:01:11 2025 GMT
        Subject: CN=680c5a88-6c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1f:da:0e:fd:ab:cc:04:ed:d8:a4:68:65:99:
                    3f:52:6f:eb:ba:02:55:6e:bf:f6:d2:68:7d:e8:15:
                    f1:b7:c4:2f:26:02:a2:a4:10:ee:3a:41:7e:2a:56:
                    b1:2e:15:e5:88:19:e6:d5:78:7e:6e:2d:a7:f3:aa:
                    79:f3:bf:24:0d:f7:52:6e:c6:b1:c8:d4:47:ab:0a:
                    c2:90:41:cd:4d:f6:3c:b4:35:06:0c:b2:5d:1d:8e:
                    48:c8:13:f0:85:4e:57:7e:fe:5f:e3:17:07:18:f5:
                    63:19:7c:5d:04:34:d4:29:61:26:c9:2d:06:39:30:
                    40:9f:01:d6:87:b3:04:44:3f:49:af:d9:7a:7d:e4:
                    cd:69:e2:fc:bc:b3:4c:53:cb:31:30:0c:21:7d:ba:
                    3e:96:1a:ae:28:0f:25:10:d9:6f:04:0c:28:7d:51:
                    40:01:59:3f:19:c8:6f:7c:ea:e0:df:e0:87:81:7e:
                    e3:f1:cf:e6:6d:8a:ee:a1:c8:d6:0c:e3:39:a8:a3:
                    a5:7a:68:35:7a:15:44:d4:1b:68:3f:f3:0f:cc:e9:
                    41:6e:b2:de:3b:ab:66:7b:32:73:c7:9f:3c:b5:a6:
                    4c:8b:4f:c8:18:da:19:b1:99:02:ec:73:6e:1e:f5:
                    e5:85:ee:a2:d0:b1:b7:fd:ce:0e:3c:a1:7f:8d:29:
                    ca:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AB:22:C8:55:F6:3A:DD:E1:32:B3:68:56:C4:7B:DA:18:A8:B5:AE
            X509v3 Authority Key Identifier:
                keyid:9B:56:68:BC:13:21:11:31:DF:0E:D3:EE:9C:25:D3:11:4C:54:B2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/m1ZovBMhETHfDtPunCXTEUxUspM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:44:2c:96:24:49:66:72:ec:a7:6e:1c:d4:0d:64:68:04:cc:
         d4:44:18:3f:b6:f4:99:b5:5c:3c:9d:76:83:d5:e4:cc:72:f5:
         d3:2e:66:9f:66:01:19:a8:2a:4f:b9:5b:48:3e:31:88:9f:02:
         54:34:5b:ca:90:4d:4e:a3:ef:3d:45:eb:27:c4:4f:de:6d:77:
         49:ab:f4:8a:0c:54:f6:bf:02:03:91:b2:66:fc:2e:4f:68:3b:
         6d:a4:6d:0c:37:bc:a9:0e:c4:1b:08:ff:9f:f8:81:69:a4:d0:
         71:42:76:b8:55:6c:f2:ae:c4:cd:9b:8c:2b:10:a6:b4:97:59:
         6a:9f:e6:26:a9:e7:35:b5:73:e7:f9:af:9a:bf:51:f3:55:ff:
         66:d6:c0:84:08:5f:c4:d9:df:83:13:f0:f4:a6:58:27:50:a1:
         8f:54:e3:45:ca:4e:10:c1:12:42:16:40:b7:40:30:75:85:0c:
         8d:cb:82:ef:ef:1c:60:7d:e3:01:e7:fa:88:ef:09:23:dc:08:
         0d:7e:9c:82:b2:72:a5:3c:89:59:4c:9f:9b:6c:b0:76:d4:b9:
         0a:59:56:6d:65:a6:54:9d:b4:b4:e7:9b:b3:82:04:67:82:17:
         ce:0b:a1:d7:96:5d:cb:f0:74:bb:97:0e:cb:bd:23:16:e5:d6:
         77:a4:b6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:21:09 2025 by rpki-client on console.sobornost.net