Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft
File:                     PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft (raw, json)
Hash identifier:          TgJF9tbYjFGEwjqaM6YGJBuChkJA9VBO8fTrMTVWwkk=
Subject key identifier:   E7:43:EB:1B:70:FE:12:2A:69:50:43:C4:27:BA:DD:12:EC:CD:E1:FA
Authority key identifier: 3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44
Certificate issuer:       /CN=F36B33A4AF/serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
Certificate serial:       0765
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft
Manifest number:          074D
Signing time:             Mon 28 Apr 2025 01:57:58 +0000
Manifest this update:     Mon 28 Apr 2025 01:57:57 +0000
Manifest next update:     Wed 30 Apr 2025 01:57:57 +0000
Files and hashes:         1: PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl (hash: axXdDszbGTwFsWiqtd/TwzdxnIR6nsDb8LhiJMIpFXc=)
                          2: 3BA2665EC99E11EE86A1DB6A775412E6.roa (hash: rvuBIHZ0MsQsAnNFjdP7+k2TSvK7jCLmLslBiuksEqI=)
                          3: E1837E5AF24311EE883862C9775412E6.roa (hash: jqNH3huKCT5kT+AUi/uqzdedHx3wpcmsGIeRoxqgiaw=)
                          4: 08F1D7D0C99E11EEAE79B16A775412E6.roa (hash: WiJwwLdNdFaMsxNqsHzgy8OEyHtwMAs7d1aXr8Hkrgc=)
                          5: 443359E8C99B11EEB7426E66775412E6.roa (hash: eJwP1UmHsKDVGDi3xz1KEXx8NcHlZwtcW4ClWms4mh8=)
                          6: C2676006C99711EE9BB52C61775412E6.roa (hash: NVq8amuk8Yp0DqwnbjhmTB3EkjNU4QSAXBzS9xgY4jM=)
                          7: 983705B2C99611EEBF88425F775412E6.roa (hash: XJqJ7gN3jDfsB7Pjiht6+uqJPoJvzMlDF3QiUIEoqEI=)
                          8: EB509C2AC99D11EEB321876A775412E6.roa (hash: p2dpDdQb34gaCv5jDzsfZfSA7ioiyEsF2wPYi+ctFkc=)
                          9: FC8328E2C99711EEBB2C6E61775412E6.roa (hash: ECrLGXW4HGhv0A+5ZOhcAy86Q0opfMQJGNiQHV4n8eI=)
                          10: 92C82F9CC99711EEA514D260775412E6.roa (hash: Go8jrZxUVeAB3wwsylNTy4r7WY+TqHaRJK8STLGevKs=)
                          11: 27A3DFEEC99811EEBDD0A661775412E6.roa (hash: YUrsV0URWBMfqQ2ScnE6bIXBAZO6NHUCKtS8EDJHuV8=)
                          12: 203AD6B4C99711EEACE71860775412E6.roa (hash: Y4routOqi/xdmhqWXRfoss58qnjt9AO023CBa3Exqzs=)
                          13: 508DB2ECC99611EE9EC0FE5E775412E6.roa (hash: rwK9a3BNPMfOi+DFZv313IXZPRakzD4mPl627qdMUUA=)
                          14: BC272006C99B11EEB694FE66775412E6.roa (hash: NfSJftU35E7esFbejpm9fx8yq+4lHpxvcEhTk6+CBbc=)
                          15: C0824C54F24311EEAC2A08C9775412E6.roa (hash: HK1RgUmg7yyo7g5XCNEgpSTZhf4OHzEmzrKfYIY/qvg=)
                          16: 6578AC56C99711EEA22F7160775412E6.roa (hash: mF+qsWfeIIiqu5K/0h0PvdJsYj6tWZGXQAReqMCB/cA=)
                          17: A3E68908C99D11EEBCDBDD69775412E6.roa (hash: JHGShobNFQwFQaj9FU3+SLnUbdV9/2sN3XHwcPWqTIc=)
                          18: 74AB9A52C99D11EE966AB969775412E6.roa (hash: L6zdyCVDaIVgr+0hckVAHvQQy0uRUVNQxJCmvoAc0+g=)
                          19: 6DC4A582C99B11EEAA679266775412E6.roa (hash: MjTKJFnfxwa+7JMBxkfxSEbP+ssgAMkXFxn505219tQ=)
                          20: 226005C0C99E11EE8229D66A775412E6.roa (hash: fztcGGjZDl2A7WS5DFatscmgH/f3R5t75XLV1PV1STQ=)
                          21: 95876FBEC99B11EEBFE3CA66775412E6.roa (hash: 67MnwHHRIWAZKkGpUDkvHKd9YNZxKCNvG3lBkHztdAE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1893 (0x765)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B33A4AF, serialNumber=3E0CE63D60455BD65BAA3154BE81206C67E69D44
        Validity
            Not Before: Apr 28 01:57:57 2025 GMT
            Not After : Apr 30 01:57:57 2025 GMT
        Subject: CN=680ee0a6-12c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:04:75:15:fd:6a:16:66:11:14:e5:c7:b3:78:
                    9b:50:aa:a1:a1:ff:68:2c:bc:c0:1f:d8:ea:a7:9c:
                    98:b7:35:33:74:2f:24:c3:b8:52:d7:f9:ee:65:14:
                    20:f1:22:61:de:57:cc:c3:1f:12:b2:ff:5a:0c:c1:
                    0d:e0:23:f6:f1:da:70:e1:45:13:05:bd:71:63:59:
                    e2:b1:f2:a3:d0:74:4b:31:22:e0:5f:71:b7:a1:b4:
                    09:8c:af:a0:2d:6f:94:dd:cb:9d:5c:19:ba:42:33:
                    3e:de:f8:d6:35:d3:d2:46:2c:6c:d0:03:6a:12:9e:
                    71:ab:6f:f3:50:de:b2:b5:93:ef:ba:6c:65:cd:83:
                    12:f6:0e:9c:bc:ae:90:88:8b:9a:70:4f:4b:6a:84:
                    af:63:7c:68:f4:f7:d1:e1:08:83:11:40:5e:5e:f4:
                    23:ec:7d:c5:b6:04:02:06:8f:6e:d6:a1:40:5b:23:
                    2a:37:1e:9d:c1:4b:1d:58:c1:a6:44:d0:28:54:e5:
                    06:51:a9:83:56:ae:27:4b:98:3b:2c:7c:bc:4f:d6:
                    30:d8:86:74:df:0f:d0:24:56:07:2d:d1:5a:74:f5:
                    06:3f:36:94:ca:8e:6c:ba:64:ac:39:c9:b3:99:6a:
                    1a:a0:3f:27:8b:f4:a5:d2:0a:57:00:3d:d5:2d:a6:
                    be:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:43:EB:1B:70:FE:12:2A:69:50:43:C4:27:BA:DD:12:EC:CD:E1:FA
            X509v3 Authority Key Identifier:
                keyid:3E:0C:E6:3D:60:45:5B:D6:5B:AA:31:54:BE:81:20:6C:67:E6:9D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B33A4/2E743782A1AC11EA9FEBC374F8AEA228/PgzmPWBFW9ZbqjFUvoEgbGfmnUQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:dd:03:f7:54:12:c9:e1:44:91:d4:87:e3:7f:1b:a3:53:e1:
         06:51:d9:2f:e2:b7:5f:c4:ba:72:34:42:87:13:c2:0a:d7:48:
         6b:aa:e1:24:8f:98:ff:04:2a:35:e9:27:e8:d2:e1:88:c7:e6:
         39:71:d6:1c:a9:17:83:11:b2:89:27:0c:da:d7:28:13:fc:18:
         61:52:84:e3:c2:60:65:99:89:0a:a4:e7:79:9e:ab:57:bc:cc:
         8c:56:fb:e9:86:44:9d:2b:e6:8c:ec:58:ad:4b:6c:80:2a:df:
         8c:32:e6:e1:1f:3a:52:94:ea:fc:0c:00:fa:6d:0b:48:21:dc:
         ea:81:b6:76:5c:19:44:47:8c:36:4e:fc:16:40:b6:1a:f8:68:
         ab:86:7e:f3:d3:99:71:c5:7d:b9:48:0f:53:21:90:b7:e4:cd:
         06:34:33:18:db:bf:be:64:c4:c9:64:50:6c:43:58:8e:bd:31:
         2e:3e:d9:fc:19:08:f6:04:9c:6b:0f:0e:90:0a:0c:2a:87:b0:
         c1:79:0b:bc:ad:44:3a:18:9c:25:d8:a0:a7:7c:9b:26:a4:84:
         e6:c1:fe:1d:64:ad:30:5b:04:8a:19:90:25:20:f0:60:30:a8:
         d0:17:b9:fb:86:17:f2:8c:c3:d5:a4:14:63:ab:61:15:5f:cc:
         cb:a3:64:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:06:20 2025 by rpki-client on console.sobornost.net