Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
File:                     Y8NA4QrXVoDHqjzdANvkjX1BneY.mft (raw, json)
Hash identifier:          dFGJEBIPTF94+SlRGjHqupHh/RW65/1ULO2tWRzgMQ4=
Subject key identifier:   E1:CD:FE:E0:00:F9:BD:34:67:B2:66:4E:22:82:1D:2E:87:26:AC:7A
Authority key identifier: 63:C3:40:E1:0A:D7:56:80:C7:AA:3C:DD:00:DB:E4:8D:7D:41:9D:E6
Certificate issuer:       /CN=F36CA1C4AF/serialNumber=63C340E10AD75680C7AA3CDD00DBE48D7D419DE6
Certificate serial:       057F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
Manifest number:          057D
Signing time:             Mon 28 Apr 2025 02:33:59 +0000
Manifest this update:     Mon 28 Apr 2025 02:33:58 +0000
Manifest next update:     Wed 30 Apr 2025 02:33:58 +0000
Files and hashes:         1: Y8NA4QrXVoDHqjzdANvkjX1BneY.crl (hash: OzPrl2Y4K0dfobDX1JOHJHdfhWeH0d+sLwcmbn/AWGM=)
                          2: E22275A0F42B11EB8DE13535D8A014CE.roa (hash: ixRAeAOi1PIeYWgmp7z7mBTbmz/nQmCMeTxu8P6RJX8=)
                          3: 75DE7694F4E611EBBD7D085AD8A014CE.roa (hash: 3ZB2CJ/bayIERLBg5mRjM6sGFJ1JWNYNoqaW/CbBpAw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407 (0x57f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CA1C4AF, serialNumber=63C340E10AD75680C7AA3CDD00DBE48D7D419DE6
        Validity
            Not Before: Apr 28 02:33:58 2025 GMT
            Not After : Apr 30 02:33:58 2025 GMT
        Subject: CN=680ee917-6891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d7:ec:6b:e4:98:c2:21:db:5a:57:6b:d6:1f:
                    1d:c4:9e:04:3c:b3:2c:30:eb:88:61:35:17:47:7b:
                    b6:1a:88:f6:80:70:3a:45:c7:08:19:0f:04:4a:4e:
                    b4:28:b8:18:2d:fd:b1:6c:34:44:b3:b4:93:9e:09:
                    36:56:81:cf:8d:72:9a:56:15:31:c6:d8:2f:28:43:
                    5b:9d:6c:0f:67:ad:c7:60:f8:f2:a7:2f:22:71:2c:
                    06:05:05:99:8f:e0:c1:92:53:49:52:bf:51:d0:19:
                    67:6e:66:59:d6:f5:f8:02:be:1e:ad:40:69:bb:f1:
                    64:2b:83:8c:11:24:85:69:aa:a7:a8:a4:e9:87:59:
                    93:4c:6a:0a:02:49:b2:86:e1:36:ab:6b:75:1b:9e:
                    89:f2:5a:06:fa:91:05:83:3d:1d:0b:b4:d8:98:dd:
                    6f:3c:34:0c:1f:cc:22:ca:f7:c5:89:a2:21:44:5f:
                    f6:0b:2e:7c:3f:13:ee:02:6c:85:e7:a3:19:64:2a:
                    bf:3f:59:0a:a8:ff:c5:77:4e:41:70:6c:02:56:57:
                    3e:c6:8b:18:32:18:13:6a:6d:dd:e5:31:af:75:74:
                    44:0d:b1:77:92:6d:0e:7f:33:ad:c0:92:86:3d:4d:
                    0c:d5:64:4b:49:15:62:24:0e:6f:e2:6b:ea:5b:9a:
                    5c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CD:FE:E0:00:F9:BD:34:67:B2:66:4E:22:82:1D:2E:87:26:AC:7A
            X509v3 Authority Key Identifier:
                keyid:63:C3:40:E1:0A:D7:56:80:C7:AA:3C:DD:00:DB:E4:8D:7D:41:9D:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:0b:3a:6a:a6:ed:57:0b:53:78:f7:1e:0a:e3:43:8d:c6:e2:
         97:cd:c2:35:29:85:99:99:d5:12:0d:20:55:4e:a7:bf:de:18:
         33:ad:65:49:fd:3e:0e:d1:a6:f3:99:f5:f3:cf:6f:c5:c6:13:
         d9:4b:0f:11:d3:c8:0c:13:5d:83:71:ac:b5:72:bd:ab:63:b2:
         68:dd:88:b3:1f:70:43:ff:5d:3d:97:4b:c6:4d:53:fe:d2:b4:
         6e:61:35:72:0c:ef:7c:3b:41:d1:e1:db:e9:73:f1:2f:49:8b:
         2b:18:93:b7:39:08:8e:0e:1e:14:e9:9d:62:12:c7:51:9a:25:
         47:37:80:24:f6:d9:86:8d:d9:b1:1d:01:e8:e3:09:08:f2:85:
         f8:94:e5:c9:c1:73:3e:85:ef:c0:c8:3a:03:a2:2b:b8:6b:fb:
         ff:38:1a:49:ba:fd:6b:3a:6c:31:f4:9b:c1:8a:e6:a9:16:e3:
         f6:91:ab:7e:1e:79:03:76:27:f4:5a:59:98:2f:21:d4:aa:6f:
         0e:1a:91:80:71:ad:7a:1e:e3:9f:1f:0e:85:64:60:5b:09:75:
         7a:08:77:bb:50:20:05:42:6d:5d:f7:ba:a4:3b:59:8e:45:56:
         c5:0e:82:be:51:60:fe:7b:4d:3b:4d:4d:54:86:08:65:2f:97:
         86:79:a1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:06:31 2025 by rpki-client on console.sobornost.net