Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
File:                     imnjE5vX78CApC4WBIM5j6bHW7Y.mft (raw, json)
Hash identifier:          wW+wyEIj0gnEtLZKH17wQwHm2U1Y3ntfu4GVoFkDynA=
Subject key identifier:   24:35:67:1D:9E:BF:51:AC:46:76:00:4D:60:B0:2B:CE:70:25:24:8B
Authority key identifier: 8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6
Certificate issuer:       /CN=F36CAF37AF/serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
Certificate serial:       0E03
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
Manifest number:          0E03
Signing time:             Sun 27 Apr 2025 00:58:13 +0000
Manifest this update:     Sun 27 Apr 2025 00:58:12 +0000
Manifest next update:     Tue 29 Apr 2025 00:58:12 +0000
Files and hashes:         1: imnjE5vX78CApC4WBIM5j6bHW7Y.crl (hash: V81WPTPlmXv3Y1Bn8zj6ScouV8rPYFhjmv+HyL9h/k0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3587 (0xe03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAF37AF, serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
        Validity
            Not Before: Apr 27 00:58:12 2025 GMT
            Not After : Apr 29 00:58:12 2025 GMT
        Subject: CN=680d8125-7e63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d7:f9:94:5d:b1:97:48:67:9a:fd:97:32:14:
                    0c:6e:bc:9d:df:c8:5d:e1:4b:eb:7d:40:d2:35:46:
                    5e:9d:57:25:8d:33:6d:04:d9:4a:98:02:4e:21:02:
                    19:c6:99:f6:39:fc:90:e3:6d:2a:19:ee:98:99:6c:
                    a2:d7:80:fe:77:ed:b5:cf:3d:c7:79:a9:92:44:e9:
                    fc:c2:73:da:bd:4e:4a:10:cc:7c:71:bf:91:9d:2d:
                    c4:50:5e:c5:7b:47:78:6a:09:6f:36:03:c8:70:27:
                    16:f8:36:21:c0:38:67:30:c5:cb:b7:17:8b:4a:a2:
                    74:ee:b8:93:c8:7e:4a:1f:29:09:7e:40:bd:78:19:
                    cc:2f:7f:28:aa:d4:32:e6:99:a1:28:03:fb:e5:b3:
                    37:a5:c5:46:24:35:3a:1e:95:72:50:56:a0:f8:3a:
                    8a:53:30:4f:33:39:cb:c8:5e:80:29:57:a4:67:55:
                    bd:5c:a9:59:da:bc:22:a8:e9:f7:53:f0:7d:20:0b:
                    1b:21:10:6e:22:87:15:c8:b4:a6:60:72:ed:e2:14:
                    22:ab:6a:22:d5:51:66:84:ab:23:21:21:d1:ff:76:
                    25:fe:76:dd:a6:3c:df:fb:bf:59:0b:6f:e4:4a:68:
                    32:8c:87:32:16:b5:ef:f7:bd:c5:23:3c:7e:cb:d1:
                    ee:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:35:67:1D:9E:BF:51:AC:46:76:00:4D:60:B0:2B:CE:70:25:24:8B
            X509v3 Authority Key Identifier:
                keyid:8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:86:b3:51:20:12:f9:38:c8:a7:ed:cd:a9:10:20:f5:d2:87:
         c7:4e:81:cb:fb:f5:14:6f:4e:1e:fb:1e:43:b7:58:41:1b:5d:
         ed:fe:68:77:3e:16:66:50:6c:de:27:d3:dd:b6:10:73:ae:41:
         24:36:68:ea:4c:8d:35:5d:9b:5c:6f:b1:9d:bb:1b:ac:15:c0:
         cd:a7:f5:fa:6d:86:d8:3b:2f:66:71:90:65:28:82:8d:4f:9c:
         79:b6:a3:a4:4c:6a:2d:b4:b5:96:08:72:50:e2:2e:5d:01:b0:
         4c:a7:71:55:32:a1:a8:5a:33:ec:fe:32:44:fb:91:ca:79:e0:
         ec:0a:ba:9b:00:0a:5b:89:7e:27:f8:36:d9:c3:92:a4:f4:5d:
         68:16:c0:46:36:ed:7f:d0:15:ca:f4:c9:c4:4b:60:08:0c:f4:
         ad:46:37:d8:f7:04:c7:ab:7f:0c:a2:66:4b:53:76:cf:60:f3:
         de:93:09:ee:1e:64:e8:25:92:94:17:35:64:46:4a:89:55:bb:
         d8:7d:1a:c1:49:af:80:52:c8:83:47:80:a5:a5:72:74:a9:7c:
         2a:98:6c:4e:c5:02:cd:29:f8:d6:e3:85:8d:e9:56:7f:c5:09:
         23:e7:fe:9b:6e:61:da:28:9d:37:c1:df:aa:8e:d0:b6:25:12:
         8b:c4:93:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:52 2025 by rpki-client on console.sobornost.net