Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft
File:                     0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft (raw, json)
Hash identifier:          wnXE2AcWrnF/JzOwRAgnnz3yZ5OMORdGhuiUc6jYhdk=
Subject key identifier:   F6:CE:2B:AB:5F:3E:79:70:D0:33:2D:9E:4B:61:EC:79:0B:20:17:D1
Authority key identifier: D1:0D:52:E9:5E:CD:FF:A0:B1:39:46:92:58:80:3D:4A:62:FB:13:EF
Certificate issuer:       /CN=F36B89F3AF/serialNumber=D10D52E95ECDFFA0B139469258803D4A62FB13EF
Certificate serial:       032D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft
Manifest number:          032C
Signing time:             Sat 26 Apr 2025 03:33:15 +0000
Manifest this update:     Sat 26 Apr 2025 03:33:14 +0000
Manifest next update:     Mon 28 Apr 2025 03:33:14 +0000
Files and hashes:         1: 0Q1S6V7N_6CxOUaSWIA9SmL7E-8.crl (hash: 4LNr8Q0IIj5ykUJdDMfE0dBqdYHdcTGsXgy2BQs+UZ0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 813 (0x32d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B89F3AF, serialNumber=D10D52E95ECDFFA0B139469258803D4A62FB13EF
        Validity
            Not Before: Apr 26 03:33:14 2025 GMT
            Not After : Apr 28 03:33:14 2025 GMT
        Subject: CN=680c53fa-1ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:45:f0:c7:0f:6f:0b:ff:24:a8:d6:15:a6:4d:
                    2d:ac:de:a4:db:94:2a:e9:fe:75:8a:7c:7e:e5:b9:
                    ba:73:ac:ba:41:6e:b6:76:0b:cf:b7:31:7e:38:20:
                    00:03:fd:51:5d:a0:14:95:9b:ae:19:99:76:f1:ee:
                    8b:f7:55:c7:d4:b0:02:2f:28:dc:8a:2d:17:64:6d:
                    7c:bb:b9:c1:91:6a:08:1d:6b:12:38:a3:61:42:78:
                    44:1b:22:b7:5f:b5:67:7c:45:2d:50:55:7c:29:c9:
                    f5:08:c9:1e:ac:a4:33:ea:42:bd:4e:ad:b2:3b:29:
                    9d:63:6e:9a:b5:b9:7f:3b:e2:8e:a3:ee:ae:e8:57:
                    48:3a:af:ca:ae:2f:69:c0:5d:24:d0:dd:00:99:1c:
                    7b:a8:5f:9a:a8:35:79:55:af:ab:eb:fd:f9:9b:21:
                    b0:34:da:72:51:90:31:fb:07:95:d4:92:0e:56:87:
                    78:79:12:a0:7d:1f:b3:71:4b:f8:6f:e2:3f:8d:e9:
                    32:42:e5:95:77:5f:ca:6c:3b:86:d5:b6:44:77:6e:
                    6b:23:48:79:0a:25:38:50:5b:b2:d2:77:88:7c:88:
                    2e:1c:e8:30:0e:dc:e0:03:77:43:8e:7c:4e:32:63:
                    26:49:f5:17:23:73:a5:38:48:b3:d1:18:f6:bf:b0:
                    da:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:CE:2B:AB:5F:3E:79:70:D0:33:2D:9E:4B:61:EC:79:0B:20:17:D1
            X509v3 Authority Key Identifier:
                keyid:D1:0D:52:E9:5E:CD:FF:A0:B1:39:46:92:58:80:3D:4A:62:FB:13:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B89F3/36920906BA9211ED8D542ACBF1222468/0Q1S6V7N_6CxOUaSWIA9SmL7E-8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:31:8c:9f:9f:68:67:f7:80:ee:6a:a4:a0:04:75:68:1c:8f:
         35:0d:ef:38:50:7b:6c:41:d0:34:45:fe:f0:b3:5e:28:3b:2e:
         b5:d2:8c:89:18:51:59:26:65:18:f1:ae:9e:b7:36:63:c5:77:
         de:88:89:35:24:03:4f:f3:55:74:d6:55:d7:37:87:ae:91:ed:
         e7:64:76:9a:89:87:42:83:22:9c:96:12:6d:63:bf:65:6e:cc:
         7d:73:cc:00:dc:c4:8c:df:49:46:a0:33:1a:fa:17:ea:46:69:
         94:5e:8d:b3:cc:1d:92:9e:4d:55:6a:b1:d0:30:e9:ec:9c:bf:
         c9:8f:10:97:60:63:a2:22:a1:17:3d:b6:8a:7f:da:d4:62:10:
         0f:5c:6b:ba:f0:bb:d7:7d:d0:51:a5:7d:d3:b3:7d:b4:18:4f:
         76:95:58:bd:0d:83:15:0d:fa:f6:5c:46:ba:26:d2:6d:e1:c3:
         e5:26:28:5e:27:da:c1:38:47:01:62:87:62:72:e7:b8:b8:3e:
         3b:99:4f:ef:fb:f4:38:1d:ad:96:15:91:0b:0c:fd:e2:d1:62:
         b7:27:bb:9c:ba:f4:13:27:74:bb:6b:de:d6:3b:68:3a:57:6f:
         c9:63:05:cf:23:3a:7b:bc:b0:04:c9:6d:33:27:66:48:54:9d:
         fd:36:a1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:21:26 2025 by rpki-client on console.sobornost.net