Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
File:                     FUgKw-djfPKntoh6_VGlPwPmrUc.mft (raw, json)
Hash identifier:          aHKvrCvB+WIIq5R18nw5i3CJ4bfYbvq3u6Lt2Ax2BnY=
Subject key identifier:   CE:6D:2E:09:87:17:EF:8B:C9:AA:C8:10:89:B6:25:E8:70:96:D4:53
Authority key identifier: 15:48:0A:C3:E7:63:7C:F2:A7:B6:88:7A:FD:51:A5:3F:03:E6:AD:47
Certificate issuer:       /CN=F36D289CAF/serialNumber=15480AC3E7637CF2A7B6887AFD51A53F03E6AD47
Certificate serial:       0889
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
Manifest number:          0885
Signing time:             Sat 26 Apr 2025 01:36:49 +0000
Manifest this update:     Sat 26 Apr 2025 01:36:48 +0000
Manifest next update:     Mon 28 Apr 2025 01:36:48 +0000
Files and hashes:         1: FUgKw-djfPKntoh6_VGlPwPmrUc.crl (hash: pDOS5Rlj9+4L2vls39w/fOJVMOelCIzL3VAgUSg5wXQ=)
                          2: 967E592CF1E611EFBCF7DD4F762E951A.roa (hash: OyrLKAFW3d4E09yYEW9wskKKqknjSYiMg4ra/6illO4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Apr 2025 00:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2185 (0x889)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D289CAF, serialNumber=15480AC3E7637CF2A7B6887AFD51A53F03E6AD47
        Validity
            Not Before: Apr 26 01:36:48 2025 GMT
            Not After : Apr 28 01:36:48 2025 GMT
        Subject: CN=680c38b0-ed7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:3c:0c:9c:df:b9:3a:6f:19:ac:a5:82:5b:e1:
                    bd:f2:5a:5c:52:13:39:5f:79:10:37:74:3b:af:47:
                    37:2c:49:8e:64:5d:18:b0:5b:d2:a1:5b:e2:ea:0e:
                    fe:a8:82:59:03:bb:3b:54:7b:38:79:d8:46:ad:91:
                    7c:e4:90:f7:eb:56:aa:f3:4a:64:27:c7:63:03:2b:
                    b3:8a:77:6f:dd:c9:d6:05:e2:2d:1c:4b:62:06:51:
                    e7:c7:72:bd:9f:e6:6a:4a:ca:7b:ca:58:5f:2a:1b:
                    3c:a6:5f:c8:7e:d2:2d:2f:d3:a2:bd:9d:55:c8:5a:
                    a7:dc:9c:46:9a:a2:48:cd:36:20:d1:45:42:69:b6:
                    54:24:fe:5e:fc:65:61:8c:2e:e1:f0:0a:7e:1d:05:
                    e8:5a:9f:47:cf:e6:60:4d:32:33:6b:9e:bf:fd:27:
                    48:5c:f7:2c:4e:4d:13:e0:54:08:33:33:2d:aa:9a:
                    ac:4a:63:db:9e:0d:23:9a:09:e7:bd:a7:63:0d:fe:
                    d9:8a:8b:07:27:9b:b9:f7:00:15:3f:51:4a:ba:78:
                    6c:ee:1b:41:de:cb:c9:da:55:dc:3a:b6:88:55:98:
                    9a:69:e9:ff:82:d0:fa:84:38:16:c2:1a:34:ca:55:
                    c5:e1:38:71:69:61:62:f0:52:63:ea:ae:5d:fa:86:
                    13:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:6D:2E:09:87:17:EF:8B:C9:AA:C8:10:89:B6:25:E8:70:96:D4:53
            X509v3 Authority Key Identifier:
                keyid:15:48:0A:C3:E7:63:7C:F2:A7:B6:88:7A:FD:51:A5:3F:03:E6:AD:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:b4:12:67:e2:e9:1b:d6:f3:c6:33:2b:2b:80:d3:21:fc:f2:
         fe:7c:40:f3:6b:e1:a7:27:aa:76:88:ac:da:0a:0e:b5:40:b7:
         c5:3c:3d:09:80:c3:f0:25:1e:e3:31:1c:07:7e:c2:67:27:49:
         e9:63:26:11:64:40:41:5b:f1:c7:8f:02:95:86:ea:21:b9:ff:
         e0:7e:31:91:40:a2:aa:85:8f:e5:9c:16:a2:70:62:a7:0e:94:
         a8:5b:7a:cb:d3:f7:19:6c:a9:5d:ee:75:23:a3:75:5e:5f:54:
         ce:9b:eb:3a:3a:0c:d5:7f:02:46:0f:8e:48:d8:9c:62:cb:e6:
         c8:44:6b:26:7d:54:a3:dd:30:be:62:42:61:06:f1:88:b3:ec:
         d4:cc:f8:d4:f6:af:2c:e7:3e:90:f1:4c:86:f8:c2:fc:aa:ee:
         8b:5d:fb:ac:e6:42:1a:2a:94:de:6d:2c:4e:3e:23:b9:78:d9:
         05:f8:b4:b2:91:c4:71:a9:a0:e4:65:21:d9:79:35:4e:26:78:
         b8:6f:36:5f:fd:39:e1:e2:27:42:33:90:1b:b5:28:36:2f:33:
         e5:0f:28:e1:6f:6f:62:89:4b:ac:cf:fe:d2:73:c6:56:83:56:
         c8:1b:cf:a4:e9:93:cb:0f:1f:31:8d:f2:83:50:95:78:49:9f:
         3f:75:73:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:21:34 2025 by rpki-client on console.sobornost.net