Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
File:                     mlfRoEhHbJDZjDymmHBdYtTdRNM.mft (raw, json)
Hash identifier:          LoJmHK8hqE3JB6dM+cTFI1Nbjb+2siRCflAYS8gMnwA=
Subject key identifier:   53:81:E6:99:8E:34:D6:DD:DB:4E:4F:58:C8:05:3F:C6:04:4D:3A:B1
Authority key identifier: 9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3
Certificate issuer:       /CN=F36A44EAAF/serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
Certificate serial:       08A1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
Manifest number:          08A0
Signing time:             Fri 25 Apr 2025 01:30:44 +0000
Manifest this update:     Fri 25 Apr 2025 01:30:43 +0000
Manifest next update:     Sun 27 Apr 2025 01:30:43 +0000
Files and hashes:         1: mlfRoEhHbJDZjDymmHBdYtTdRNM.crl (hash: 1jpFSvARTEI5uBtHCjcErxgoevQDSUwG4J7SirTtSH8=)
                          2: C2885C5A890C11E99FBFB061F8AEA228.roa (hash: Nc3QhHvVxfoVedVMaampsQ99yjqvi1tBTakd45JoFJw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2209 (0x8a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAF, serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
        Validity
            Not Before: Apr 25 01:30:43 2025 GMT
            Not After : Apr 27 01:30:43 2025 GMT
        Subject: CN=680ae5c4-f9ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:66:5e:76:7a:2b:74:98:f0:81:bc:a5:1d:
                    d8:eb:da:1a:96:cb:37:b6:fe:90:33:19:19:0d:28:
                    be:d6:d3:a4:4e:a4:a3:09:2c:b4:f8:ec:23:55:b2:
                    22:fc:cf:2a:00:fa:7a:39:d2:42:c1:88:a8:72:51:
                    f2:49:d6:99:56:29:6b:05:0c:7d:37:a4:8e:48:2a:
                    2f:1e:ea:c3:64:e1:aa:9c:27:e5:3f:fa:4f:02:87:
                    d1:fd:79:f4:f7:81:e9:4d:bc:6b:1c:9b:1e:b6:3f:
                    bf:85:d5:14:54:57:46:d8:bc:d6:5c:2b:01:d1:61:
                    ee:07:4d:c8:d3:cb:3c:2c:6b:b4:dc:98:ed:f7:6c:
                    1e:97:82:bb:f1:a3:54:2f:b6:83:b9:a5:17:04:aa:
                    81:b8:f2:e4:9d:a2:39:73:9a:84:f8:f1:bc:1b:31:
                    a0:61:81:15:2e:ff:b5:d1:76:b1:93:d5:a4:67:91:
                    88:ef:aa:24:34:94:2a:ff:45:fb:fe:b7:49:ce:17:
                    e4:44:b3:67:f7:e5:cf:ce:76:12:12:c8:57:83:58:
                    e9:f4:0e:b9:68:bb:8f:f5:2f:8d:37:e7:bd:a6:e8:
                    61:e7:ff:e0:fc:f9:43:ea:f9:33:67:83:2b:56:64:
                    fc:c7:93:c9:2c:4a:13:8c:e7:eb:ce:cb:da:21:95:
                    02:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:81:E6:99:8E:34:D6:DD:DB:4E:4F:58:C8:05:3F:C6:04:4D:3A:B1
            X509v3 Authority Key Identifier:
                keyid:9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:5b:df:20:7d:b4:a9:4c:38:af:df:62:aa:2c:e1:8c:6f:bb:
         8a:11:09:39:9d:f4:d7:2b:da:48:e6:98:d4:b3:0b:91:2c:3a:
         98:c6:b4:67:fc:73:13:65:71:a6:e2:b6:d3:56:17:f6:f8:e7:
         a7:90:cc:d7:7e:7c:ad:6d:03:78:0f:a2:7b:75:da:fb:ac:a4:
         74:fa:9c:45:f3:fa:9e:f7:51:69:36:52:e0:bf:b0:55:04:4d:
         c5:f7:08:e2:24:33:5d:50:1f:a9:fe:0f:9e:62:03:0d:e6:bc:
         43:b8:f9:a6:90:63:c5:52:dc:0e:5d:dc:a0:c9:00:ee:2e:50:
         0d:7b:be:3f:32:97:da:49:b7:87:fb:e2:44:49:30:c1:ee:cb:
         81:3d:f6:d1:d0:ee:9c:0b:45:68:71:fa:e3:0e:9c:54:34:0e:
         b0:ef:d6:18:30:b9:07:a8:fa:c8:37:30:58:e3:6c:1a:9d:85:
         e6:f8:ab:eb:9d:fb:eb:70:09:2b:05:27:d4:d2:bd:80:71:e0:
         90:77:5e:2d:65:c1:d7:11:c4:1e:ea:3a:89:1d:b5:56:89:5d:
         47:33:99:d3:44:05:b9:93:64:ea:fc:af:f7:33:17:84:96:50:
         80:6d:6c:7c:8d:ab:67:ff:e9:c9:9c:f8:86:eb:16:9a:d8:bf:
         98:ee:c4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:01 2025 by rpki-client on console.sobornost.net