Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
File:                     EoXp9a6JDQnrah2cFSaY2CVpQXM.mft (raw, json)
Hash identifier:          nPqC8eTghSE01V7XE7Y7dnD5IkRFDyDC2XkZYUGW6aA=
Subject key identifier:   A4:E5:90:F1:42:15:08:FD:4A:BC:9B:DB:B2:BE:FE:A2:02:D9:0C:B4
Authority key identifier: 12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73
Certificate issuer:       /CN=F36B2D09AF/serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
Certificate serial:       014D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
Manifest number:          014B
Signing time:             Fri 25 Apr 2025 04:34:04 +0000
Manifest this update:     Fri 25 Apr 2025 04:34:04 +0000
Manifest next update:     Sun 27 Apr 2025 04:34:04 +0000
Files and hashes:         1: EoXp9a6JDQnrah2cFSaY2CVpQXM.crl (hash: pbINPnH8uAiY/pgPCAKb/80gFODD8H2PWJePgPCZv/Q=)
                          2: 81A877024B1B11EF97889885762E951A.roa (hash: Jb7FsCfPieRiHewZHkBoyTfyXOoZ5GSQBgW72tN/jmY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2D09AF, serialNumber=1285E9F5AE890D09EB6A1D9C152698D825694173
        Validity
            Not Before: Apr 25 04:34:04 2025 GMT
            Not After : Apr 27 04:34:04 2025 GMT
        Subject: CN=680b10bc-1b64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:09:e2:28:b5:ec:6d:a2:be:e9:81:32:32:06:
                    fa:3b:29:3c:3a:ad:51:9d:95:9e:63:3d:13:b2:64:
                    da:67:09:64:5e:be:8c:a9:55:f2:ba:36:35:e2:08:
                    22:9f:e3:e1:3f:39:cb:5c:1d:3f:c9:92:cd:b1:71:
                    26:4b:02:6d:e4:30:5c:fe:f9:25:4d:d5:12:e4:94:
                    6b:d6:55:72:58:07:c1:3a:88:0e:f4:f4:a6:c7:e6:
                    26:0a:f5:e4:b9:5b:f6:2e:e1:48:57:13:09:8f:8b:
                    10:2a:ca:4b:9b:5d:da:ca:85:df:bd:21:8c:ec:d9:
                    2b:e3:93:70:4a:19:b9:01:43:71:43:d8:13:07:ab:
                    e7:5f:ac:c2:ff:ec:b8:39:e8:6c:43:27:72:ba:f5:
                    94:16:5d:73:68:62:3f:0f:ac:ef:f4:d1:ea:ab:09:
                    aa:be:ff:b2:fc:a3:4b:ef:bd:88:05:e7:91:cd:00:
                    5c:9b:ec:ef:0e:af:99:51:f0:39:3c:e8:a2:df:0f:
                    f4:b1:ce:91:2b:7c:e3:1a:35:29:a7:c5:1e:8e:ad:
                    2e:11:0d:95:0d:4e:91:e2:b2:e4:ad:de:a8:76:25:
                    16:92:8f:89:2b:81:3b:6a:17:73:2c:84:3e:3d:38:
                    b0:c2:b6:5e:78:cb:01:ce:33:6a:db:19:83:3e:d8:
                    1a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E5:90:F1:42:15:08:FD:4A:BC:9B:DB:B2:BE:FE:A2:02:D9:0C:B4
            X509v3 Authority Key Identifier:
                keyid:12:85:E9:F5:AE:89:0D:09:EB:6A:1D:9C:15:26:98:D8:25:69:41:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EoXp9a6JDQnrah2cFSaY2CVpQXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2D09/0841ED9827E511EFA5CFA4137DDC24C2/EoXp9a6JDQnrah2cFSaY2CVpQXM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:65:d3:0d:dd:56:07:ab:6b:0a:0a:bf:25:1f:26:69:ea:c9:
         bc:88:04:04:e8:66:4b:0e:51:a9:29:83:9b:7a:c6:19:fb:4b:
         71:04:c6:c4:3b:f2:56:02:91:25:3a:9a:15:aa:13:d4:1b:65:
         d1:17:31:58:e3:0c:6d:02:6c:f1:5c:d0:2d:2a:a5:c5:8c:c6:
         d5:42:19:30:e2:e8:f8:30:f2:51:6e:4f:d2:41:ea:59:6e:f5:
         da:4a:5c:ea:aa:3c:70:20:35:86:a5:c9:67:51:2a:09:e6:60:
         7e:04:22:1a:df:d8:13:48:29:98:dd:af:5a:bb:49:df:09:b5:
         ec:ad:85:bf:93:56:4a:27:3d:5f:88:a1:7e:03:15:10:e5:fd:
         d7:c0:49:89:ba:84:5b:e4:f6:f8:28:81:d8:d6:bb:a6:b4:d0:
         4b:d2:3e:02:6e:99:3d:02:3c:f4:d6:f8:42:7f:93:89:55:e9:
         27:d8:e0:e6:6f:81:65:b5:fa:ce:e1:dd:bd:b4:13:b8:15:1d:
         56:4f:e0:54:d0:d3:1d:c9:a3:db:59:5d:57:b2:34:0f:62:d4:
         4b:f2:e7:a6:97:ee:93:c5:0c:ea:dc:91:6e:04:cc:ff:ea:89:
         9e:74:5b:37:47:da:dc:e3:1d:39:51:e4:34:3a:ce:92:cc:ee:
         d7:9c:f0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:29 2025 by rpki-client on console.sobornost.net