Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft
File:                     Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft (raw, json)
Hash identifier:          fVZqSrPeb9+sgMYZe8EaheIA+Cfvuazq27zmtW7bsjc=
Subject key identifier:   54:F4:35:81:3B:11:29:55:65:A3:FA:B5:77:9E:F2:AE:21:0B:D7:0F
Authority key identifier: 1B:2E:71:DA:04:AE:09:10:39:45:11:7F:90:76:C7:F8:E1:99:24:3C
Certificate issuer:       /CN=F36AC9F1AF/serialNumber=1B2E71DA04AE09103945117F9076C7F8E199243C
Certificate serial:       F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft
Manifest number:          F6
Signing time:             Sat 26 Apr 2025 04:50:06 +0000
Manifest this update:     Sat 26 Apr 2025 04:50:05 +0000
Manifest next update:     Mon 28 Apr 2025 04:50:05 +0000
Files and hashes:         1: Gy5x2gSuCRA5RRF_kHbH-OGZJDw.crl (hash: xu3HlYfceaWCKD9eidTA4srOOm49hax1ViBrHUYJSmk=)
                          2: A30F3A50697C11EFB366DFAE762E951A.roa (hash: /ilQRqAkN9GV5Cf0rRJQg2G1MMpc0XTxcTekWiarM/c=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AC9F1AF, serialNumber=1B2E71DA04AE09103945117F9076C7F8E199243C
        Validity
            Not Before: Apr 26 04:50:05 2025 GMT
            Not After : Apr 28 04:50:05 2025 GMT
        Subject: CN=680c65fd-f9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:04:fb:6a:12:e2:62:41:4f:a1:74:1d:13:
                    56:be:bd:fe:79:42:25:2d:ed:e3:ca:5b:3c:02:60:
                    b9:6d:41:13:ff:f4:ca:41:02:47:ec:be:fc:3a:a1:
                    0b:5b:ce:71:09:4f:56:89:5a:e4:e5:18:e2:e1:88:
                    b5:1f:e2:d8:fa:60:3f:8c:da:f1:b0:e8:a8:20:44:
                    a5:78:10:80:7c:1f:08:c9:5e:c4:f8:bc:0e:99:b6:
                    10:65:c9:90:f7:c1:99:bc:a1:df:d9:12:0d:5e:09:
                    08:bd:a1:a2:ae:87:cd:1d:37:ae:3b:17:5a:18:5e:
                    0b:7b:5e:9d:7c:bd:08:93:f9:60:0b:8e:9f:74:f8:
                    83:3a:c3:de:1b:63:1a:63:65:73:3a:86:04:80:0b:
                    3c:74:32:fa:a0:f7:8b:94:e9:40:41:23:05:e5:6c:
                    bf:16:2f:e7:70:74:96:3a:32:a3:26:8b:f0:31:d6:
                    d8:1f:be:3b:f2:93:0c:73:a5:b6:eb:0e:6f:8f:7e:
                    5d:46:a3:d0:5e:6e:9c:72:85:86:86:ff:06:e1:07:
                    83:77:24:5f:86:77:ab:10:06:3e:35:a2:0b:e2:fc:
                    6c:07:2c:ff:08:13:25:60:c6:a5:ef:c2:38:04:7e:
                    d8:34:15:fc:24:89:8b:73:b5:6a:b1:2e:7e:23:9b:
                    49:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F4:35:81:3B:11:29:55:65:A3:FA:B5:77:9E:F2:AE:21:0B:D7:0F
            X509v3 Authority Key Identifier:
                keyid:1B:2E:71:DA:04:AE:09:10:39:45:11:7F:90:76:C7:F8:E1:99:24:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC9F1/91D240A6697311EFAFAC2778762E951A/Gy5x2gSuCRA5RRF_kHbH-OGZJDw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:bb:24:33:3a:0a:38:a3:d2:51:bb:49:0d:1b:6e:c6:50:38:
         62:03:11:82:24:bb:a3:d6:1e:3c:af:d5:da:82:7a:0e:fd:fa:
         8f:a3:77:df:b9:51:1a:32:24:81:69:93:66:c1:61:61:18:b0:
         1a:70:0a:31:2b:fb:62:bd:77:41:dd:9a:9b:2c:76:d4:b8:fa:
         fa:2c:60:68:13:46:5e:7b:ba:3b:7d:4a:d9:5d:42:ce:d6:5c:
         23:34:e9:77:8f:7c:9a:4c:86:89:39:a4:93:e4:a1:a7:57:f8:
         a9:33:05:e1:c8:f6:ff:67:09:6a:78:1c:c0:e0:73:1a:1b:18:
         39:17:10:15:95:cb:46:6a:59:35:70:da:e6:a8:be:de:58:d1:
         f2:5f:c6:be:c1:43:21:74:2d:d4:f7:81:69:d0:49:a3:be:4a:
         29:c4:e7:3a:e4:97:a6:c3:f6:51:b2:09:9e:c7:65:84:da:ed:
         9d:cb:f4:42:13:b7:91:7e:7f:3e:fd:59:fd:62:15:18:98:d6:
         14:6f:1f:71:31:a5:03:f6:63:2b:e9:56:ea:bd:32:aa:59:f7:
         48:89:d1:b6:c9:41:17:45:ba:5b:ac:b4:46:8a:bd:ae:a6:c5:
         fe:39:e0:6c:00:46:48:9a:f5:46:ed:a4:3d:20:e9:45:ec:1a:
         a7:b5:49:87
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAPcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QUM5RjFBRjExMC8GA1UEBRMoMUIyRTcxREEwNEFFMDkxMDM5NDUxMTdGOTA3NkM3
RjhFMTk5MjQzQzAeFw0yNTA0MjYwNDUwMDVaFw0yNTA0MjgwNDUwMDVaMBgxFjAU
BgNVBAMTDTY4MGM2NWZkLWY5ZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDIQT7ahLiYkFPoXQdE1a+vf55QiUt7ePKWzwCYLltQRP/9MpBAkfsvvw6
oQtbznEJT1aJWuTlGOLhiLUf4tj6YD+M2vGw6KggRKV4EIB8HwjJXsT4vA6ZthBl
yZD3wZm8od/ZEg1eCQi9oaKuh80dN647F1oYXgt7Xp18vQiT+WALjp90+IM6w94b
YxpjZXM6hgSACzx0Mvqg94uU6UBBIwXlbL8WL+dwdJY6MqMmi/Ax1tgfvjvykwxz
pbbrDm+Pfl1Go9BebpxyhYaG/wbhB4N3JF+Gd6sQBj41ogvi/GwHLP8IEyVgxqXv
wjgEftg0FfwkiYtztWqxLn4jm0kfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUVPQ1
gTsRKVVlo/q1d57yriEL1w8wHwYDVR0jBBgwFoAUGy5x2gSuCRA5RRF/kHbH+OGZ
JDwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkFDOUYxLzkxRDI0MEE2Njk3MzExRUZBRkFDMjc3ODc2MkU5NTFBL0d5NXgy
Z1N1Q1JBNVJSRl9rSGJILU9HWkpEdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0d5NXgyZ1N1Q1JBNVJSRl9rSGJILU9HWkpEdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QUM5RjEvOTFEMjQwQTY2OTczMTFFRkFGQUMyNzc4NzYy
RTk1MUEvR3k1eDJnU3VDUkE1UlJGX2tIYkgtT0daSkR3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAnuyQzOgo4o9JRu0kNG27GUDhiAxGC
JLuj1h48r9XagnoO/fqPo3ffuVEaMiSBaZNmwWFhGLAacAoxK/tivXdB3ZqbLHbU
uPr6LGBoE0Zee7o7fUrZXULO1lwjNOl3j3yaTIaJOaST5KGnV/ipMwXhyPb/Zwlq
eBzA4HMaGxg5FxAVlctGalk1cNrmqL7eWNHyX8a+wUMhdC3U94Fp0EmjvkopxOc6
5Jemw/ZRsgmex2WE2u2dy/RCE7eRfn8+/Vn9YhUYmNYUbx9xMaUD9mMr6VbqvTKq
WfdIidG2yUEXRbpbrLRGir2upsX+OeBsAEZImvVG7aQ9IOlF7BqntUmH
-----END CERTIFICATE-----
Generated at Sat Apr 26 08:51:42 2025 by rpki-client on console.sobornost.net