Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
File:                     Ga2syP-jkxMYpsdToKwbKukpXgM.mft (raw, json)
Hash identifier:          eHQbvFbDe3RuXpnQXzjomyHYfLkCeeXHcO0lFU11W8k=
Subject key identifier:   6C:27:6A:80:13:A0:82:D9:61:0A:56:3D:FF:CD:03:BD:37:4D:B7:FC
Authority key identifier: 19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
Certificate issuer:       /CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Certificate serial:       08D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
Manifest number:          08CC
Signing time:             Fri 25 Apr 2025 01:21:22 +0000
Manifest this update:     Fri 25 Apr 2025 01:21:21 +0000
Manifest next update:     Sun 27 Apr 2025 01:21:21 +0000
Files and hashes:         1: Ga2syP-jkxMYpsdToKwbKukpXgM.crl (hash: VTa2ZGWemVyeWuuM4raVPGP+7b0g/ARWgJMdl3qpX2g=)
                          2: 40F0EA0C864C11EF8B0D4162762E951A.roa (hash: 5nZTReAvtcbgPm+oRDhQ83p7XciRK3gVMtmCqG06N7Q=)
                          3: 19DBEAFC864C11EF91E74660762E951A.roa (hash: ssNbfh+xyxoJkv8ui9GVFM6RQk48tyv7Wmx8dqGtWao=)
                          4: 8F04BF5C864C11EF8F687464762E951A.roa (hash: MFVB+4npBxn/Yh83eigumhh31Iuk3EG7QH/ll1Qzce0=)
                          5: DF0FB1A6864B11EFAA421C60762E951A.roa (hash: wcCwWJ/0MHVkGO7m4+40u82BAL5x3asIQ+jyQE9ovPY=)
                          6: 325E4A4E864B11EF9931C05B762E951A.roa (hash: uilxINn6WdcvcjXq+Nwl5lpnynygHnR6cPspfvXc/m0=)
                          7: EB320A3E864511EF82F333B8762E951A.roa (hash: AOcstZS+3TqPjLs5Onnwkaac6jTexzGQCvTnjKOL0G4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2263 (0x8d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B52A6AF, serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
        Validity
            Not Before: Apr 25 01:21:21 2025 GMT
            Not After : Apr 27 01:21:21 2025 GMT
        Subject: CN=680ae392-c439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:7c:0b:5b:61:45:f2:0e:3d:52:fe:4a:03:3f:
                    b5:6d:3f:6e:cc:cc:a6:8b:e0:b4:66:39:21:30:80:
                    c9:0f:ea:54:73:b6:26:44:01:ec:06:97:c3:2a:be:
                    57:4a:68:64:d5:d1:64:b0:d1:33:c0:60:99:2f:a4:
                    ef:4b:1a:5c:da:de:69:22:21:f8:97:17:aa:be:10:
                    c4:ad:2f:19:2f:c3:93:82:07:f0:32:ac:f3:27:e2:
                    37:c2:cb:a0:bb:94:7a:bc:df:3f:5b:de:20:f7:68:
                    34:0b:42:f7:1d:11:16:f0:5b:2e:ac:17:a7:1f:4e:
                    a5:37:94:b1:65:15:0d:26:ca:95:e3:db:7a:79:97:
                    1a:b3:da:43:79:60:15:69:89:63:92:6e:d2:0a:95:
                    d7:ab:a6:d6:43:9b:45:77:97:e8:62:04:65:67:dd:
                    ff:e8:9e:02:5c:ec:17:70:8b:46:0c:5d:ad:d2:48:
                    0d:97:32:d7:4e:bf:9d:58:37:81:54:f3:ab:22:f0:
                    93:9a:f7:65:a2:d9:6e:b4:5b:bd:4c:12:ef:6f:4b:
                    b7:de:9a:8d:29:e6:ea:2f:20:7a:9e:5f:ca:c1:db:
                    fd:04:99:00:44:da:f5:f4:e7:4c:ae:78:c1:76:59:
                    77:69:f5:73:42:08:8c:d0:30:f8:3e:8b:00:54:bd:
                    c7:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:27:6A:80:13:A0:82:D9:61:0A:56:3D:FF:CD:03:BD:37:4D:B7:FC
            X509v3 Authority Key Identifier:
                keyid:19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:8b:cf:0f:e1:2e:74:39:88:a1:6a:7e:2a:f0:63:e9:e5:f4:
         8a:3a:fd:2c:7e:db:fc:57:ec:73:86:f0:08:79:3f:1d:f3:21:
         97:58:7b:13:c5:7c:21:2e:57:6f:33:99:15:b2:7a:54:cb:3d:
         8e:47:4c:d5:73:12:c3:29:12:30:2a:1c:52:5d:0f:67:da:d2:
         ec:33:9a:91:b8:49:87:90:ae:c9:45:1a:4d:71:43:9c:d6:9e:
         e7:67:32:f0:ec:49:24:d4:af:40:42:fa:e5:d7:f0:30:84:24:
         cb:62:d6:58:2a:a3:23:5f:0f:65:8a:0c:cd:6a:59:89:e0:48:
         11:41:61:4d:a1:ae:dc:eb:63:50:23:f7:c7:4a:3e:4b:52:d3:
         59:7f:43:de:b0:1f:a8:e4:1c:e6:28:ca:93:a7:91:a3:f9:29:
         2c:8a:22:32:e8:54:09:a7:53:f1:4a:58:eb:e7:38:0d:ce:21:
         cc:6d:8b:73:8e:1d:0a:2c:93:1d:78:26:85:3a:89:66:1e:f2:
         75:71:bc:9c:b1:f2:08:bf:a9:7c:38:9f:85:4f:6c:30:9f:65:
         a1:cf:d6:d3:01:65:e2:99:a2:ed:0b:d9:54:0b:b7:6e:eb:3f:
         a7:1d:b7:f5:d6:5a:16:49:a5:11:56:99:90:76:69:b2:ab:cd:
         95:e1:05:bf
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCNcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjUyQTZBRjExMC8GA1UEBRMoMTlBREFDQzhGRkEzOTMxMzE4QTZDNzUzQTBBQzFC
MkFFOTI5NUUwMzAeFw0yNTA0MjUwMTIxMjFaFw0yNTA0MjcwMTIxMjFaMBgxFjAU
BgNVBAMTDTY4MGFlMzkyLWM0MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDkfAtbYUXyDj1S/koDP7VtP27MzKaL4LRmOSEwgMkP6lRztiZEAewGl8Mq
vldKaGTV0WSw0TPAYJkvpO9LGlza3mkiIfiXF6q+EMStLxkvw5OCB/AyrPMn4jfC
y6C7lHq83z9b3iD3aDQLQvcdERbwWy6sF6cfTqU3lLFlFQ0mypXj23p5lxqz2kN5
YBVpiWOSbtIKlderptZDm0V3l+hiBGVn3f/ongJc7Bdwi0YMXa3SSA2XMtdOv51Y
N4FU86si8JOa92Wi2W60W71MEu9vS7femo0p5uovIHqeX8rB2/0EmQBE2vX050yu
eMF2WXdp9XNCCIzQMPg+iwBUvcfbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUbCdq
gBOggtlhClY9/80DvTdNt/wwHwYDVR0jBBgwFoAUGa2syP+jkxMYpsdToKwbKukp
XgMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI1MkE2LzZBRTMwN0I2NkZGRDExRTlBNjlDQzEzNEY4QUVBMjI4L0dhMnN5
UC1qa3hNWXBzZFRvS3diS3VrcFhnTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dhMnN5UC1qa3hNWXBzZFRvS3diS3VrcFhnTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjUyQTYvNkFFMzA3QjY2RkZEMTFFOUE2OUNDMTM0RjhB
RUEyMjgvR2Eyc3lQLWpreE1ZcHNkVG9Ld2JLdWtwWGdNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSi88P4S50OYihan4q8GPp5fSKOv0s
ftv8V+xzhvAIeT8d8yGXWHsTxXwhLldvM5kVsnpUyz2OR0zVcxLDKRIwKhxSXQ9n
2tLsM5qRuEmHkK7JRRpNcUOc1p7nZzLw7Ekk1K9AQvrl1/AwhCTLYtZYKqMjXw9l
igzNalmJ4EgRQWFNoa7c62NQI/fHSj5LUtNZf0PesB+o5BzmKMqTp5Gj+SksiiIy
6FQJp1PxSljr5zgNziHMbYtzjh0KLJMdeCaFOolmHvJ1cbycsfIIv6l8OJ+FT2ww
n2Whz9bTAWXimaLtC9lUC7du6z+nHbf11loWSaURVpmQdmmyq82V4QW/
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:02 2025 by rpki-client on console.sobornost.net