Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
File:                     9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft (raw, json)
Hash identifier:          ZGl5uf8crdwHbcg51Vywx6rk0iwaKLNKjReqbp3YooE=
Subject key identifier:   EA:6A:7A:95:94:5F:2A:D6:C1:5E:D2:51:BD:C1:47:3B:C1:49:30:5C
Authority key identifier: F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49
Certificate issuer:       /CN=F36DB492AF/serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
Certificate serial:       0401
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
Manifest number:          03E4
Signing time:             Fri 25 Apr 2025 03:14:42 +0000
Manifest this update:     Fri 25 Apr 2025 03:14:41 +0000
Manifest next update:     Sun 27 Apr 2025 03:14:41 +0000
Files and hashes:         1: 9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl (hash: 5rp+Z3pYUqtGnpEMxSWfbktIA0vwzqmNVWr4RvrdrLI=)
                          2: CAB5EB42374D11EE8810A0744AD9E6FC.roa (hash: Rd+cT1WHVj6VPW10DhoJe1VPjes86osECuBqlAPA/jk=)
                          3: 20D8603A3C6311EEBD05616B4AD9E6FC.roa (hash: yn1GI8XUJDZhc/a1VL4Ew8aXczcEtSuNRFvBTlTvah0=)
                          4: 662EC19C3C6311EEA2CE226C4AD9E6FC.roa (hash: qJZA5eX+xbJzCe6D7i9PnOvJU1CqeC3CU+zF75cZcts=)
                          5: F67E4B16374D11EEB5DE38754AD9E6FC.roa (hash: hU4jFk//Gd5275KQZyF78ZmsmvKAmuy74Zm19XPUqO4=)
                          6: 14B6AF743B4011EEADF20A804AD9E6FC.roa (hash: K4yraD6px2otzCCbUQWt+Yh6khumJagXOv/4f3vipmU=)
                          7: 53D289E63CCE11EE935F8A394AD9E6FC.roa (hash: 4HBFVVMsDOfA/xrur5pE2xRwqQtzwcjvpCJfYPdn3co=)
                          8: 5F94B5287E1F11EEB18DE56B4AD9E6FC.roa (hash: NnfOKQOywlCm8MbXuo5ryxtlJJnqWeXUY/Zc4KGtk9o=)
                          9: 03541FA67E1F11EE99591D6B4AD9E6FC.roa (hash: tMNuryIys8bdcGqr2btn+01OsiqNMJcIT+oXA5sB548=)
                          10: 4ED14CDCA6DA11EDAEF82299F1222468.roa (hash: iXehJ8WLWU6cHBFHQ5qsEfloV58oVEhPLmmW3fV/BY4=)
                          11: 4788CE9A3C6311EE9733C66B4AD9E6FC.roa (hash: 0sVxWZVOpyK0cudH1BB1HUmOSWE0Bj2HjfkgAIa158s=)
                          12: 158513F4518011EE8BDBCE164AD9E6FC.roa (hash: sbl6JhnjaIL3BTU2+lQRNeSnxalVE/sMDYPWi7BO8vg=)
                          13: 85435BE23C6311EE9E2BB76C4AD9E6FC.roa (hash: ZIlXxtD8wXr16Udjo8wBxB2atTHwjE6MF56MpocHqts=)
                          14: 4433C912374E11EEBD8F3D764AD9E6FC.roa (hash: lHtBjObTBwNyVhJrHEQ/zHzgJmnlb42wMC73m5Dh7UE=)
                          15: A775C5D83C6311EEA094166D4AD9E6FC.roa (hash: L972nqC78lcXrhC+mjzOc5OXmYgCBGyLNtGIrSD8tWw=)
                          16: 20EEA9507E1F11EEAD686A6B4AD9E6FC.roa (hash: +kuN9/TLBGpI4GFRii8gvKOE9Vh3yGtX4DQwHRmVzSA=)
                          17: 04540B763C6311EE82DB186B4AD9E6FC.roa (hash: 8pLsZ3suwRhldyF5vniTCRO+W8oJo+1mBH+nN66FQ8k=)
                          18: 329D5926A54311EEA7A66B2ED25BE465.roa (hash: 1pPOf7iWBENGk84AGGgfnWlGuOjuG2CHIm2+lZTlGVY=)
                          19: 9369A48A374D11EEBBBCC3734AD9E6FC.roa (hash: LriikUtiyzWDzN+qJjLYRklCy7tVdfyDgc1icmMt3FY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025 (0x401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB492AF, serialNumber=F43E0668EF72BD87FA5368BE2B6815C0BCB40149
        Validity
            Not Before: Apr 25 03:14:41 2025 GMT
            Not After : Apr 27 03:14:41 2025 GMT
        Subject: CN=680afe22-11c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8b:e5:78:44:ef:93:da:e8:30:ea:b5:3c:ef:
                    e4:af:cf:5c:3d:b6:b1:b3:de:21:2f:9e:a2:97:30:
                    4b:79:ef:37:f3:07:d3:b8:ec:1a:c3:9b:18:26:eb:
                    d3:e3:b8:28:7a:26:8b:15:38:f7:af:1d:8a:1e:4a:
                    dd:dd:06:65:f9:93:c4:85:6f:98:60:57:04:47:f1:
                    0b:07:f0:4b:03:02:0e:b4:64:1b:3c:ff:c4:36:28:
                    7e:e3:0a:7f:8c:2f:2f:ff:16:81:55:a7:ee:f6:56:
                    23:0d:28:cb:8b:8b:5a:c5:45:6d:ff:46:b6:a7:3a:
                    8f:16:bb:d1:ed:95:78:f3:2f:87:de:04:9b:c9:c8:
                    f1:43:d3:7a:45:0a:e4:54:ec:5c:47:b5:3d:0f:68:
                    fb:6c:62:f7:c4:6c:c8:f5:ce:55:23:24:ab:f9:0c:
                    2a:4e:bb:04:b9:3a:7a:cf:00:1d:4b:9b:5e:b4:78:
                    1e:72:3a:28:8c:8f:c3:9b:b6:77:d0:b6:4a:78:a8:
                    24:e1:d7:48:d6:33:b3:42:e4:c4:c4:be:51:20:dd:
                    71:b8:a2:38:72:3a:86:0c:1c:fa:a7:30:bf:1e:08:
                    b2:61:2d:67:be:52:1f:17:cc:58:37:47:a0:3c:71:
                    d7:90:d4:60:54:a7:14:b8:e2:17:7b:dd:2f:df:17:
                    c2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6A:7A:95:94:5F:2A:D6:C1:5E:D2:51:BD:C1:47:3B:C1:49:30:5C
            X509v3 Authority Key Identifier:
                keyid:F4:3E:06:68:EF:72:BD:87:FA:53:68:BE:2B:68:15:C0:BC:B4:01:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9D4GaO9yvYf6U2i-K2gVwLy0AUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB492/10DA99764A0311ED8F59D89EF1222468/9D4GaO9yvYf6U2i-K2gVwLy0AUk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:20:5d:28:6c:8b:fd:ac:b8:bf:64:9f:cc:4d:3c:dc:c6:50:
         62:75:ff:7e:c4:94:91:e2:34:50:fb:94:47:14:41:ba:66:67:
         57:67:24:b3:c6:77:f4:95:36:53:80:dd:0f:80:5b:b5:a8:33:
         89:92:78:42:7d:93:6b:26:2d:a9:4f:a5:66:1b:85:48:b8:c3:
         d4:1f:23:98:cc:e4:a3:cc:c7:25:b8:74:be:06:0f:be:ca:c8:
         d6:86:c6:56:be:01:66:11:ee:35:41:bb:1a:a1:a5:78:50:56:
         40:d5:e4:30:6d:0e:10:4f:88:91:2c:1a:d9:88:4a:4e:8e:1a:
         16:41:63:9a:f9:c8:b4:78:87:e8:62:29:f8:41:11:45:20:d0:
         fc:5f:ac:1f:ed:7e:23:0a:57:1e:3e:50:da:2f:93:60:13:5e:
         30:c1:60:ec:d7:fe:6a:36:05:a9:d5:a4:11:dc:f9:96:aa:4d:
         bf:d6:9f:af:3b:11:e2:2d:e5:cb:42:40:f6:eb:b4:cd:c2:c4:
         a7:30:ce:92:5d:1d:43:8a:f8:f8:58:17:c7:5a:05:27:5e:28:
         eb:da:7d:9c:6c:e0:ab:76:7c:6e:6d:76:87:19:fe:ff:18:6a:
         ab:51:12:4b:d6:c3:37:cc:5d:a3:9b:0a:a4:ac:ba:c2:4c:11:
         70:ce:66:7b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBAEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REI0OTJBRjExMC8GA1UEBRMoRjQzRTA2NjhFRjcyQkQ4N0ZBNTM2OEJFMkI2ODE1
QzBCQ0I0MDE0OTAeFw0yNTA0MjUwMzE0NDFaFw0yNTA0MjcwMzE0NDFaMBgxFjAU
BgNVBAMTDTY4MGFmZTIyLTExYzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7i+V4RO+T2ugw6rU87+Svz1w9trGz3iEvnqKXMEt57zfzB9O47BrDmxgm
69PjuCh6JosVOPevHYoeSt3dBmX5k8SFb5hgVwRH8QsH8EsDAg60ZBs8/8Q2KH7j
Cn+MLy//FoFVp+72ViMNKMuLi1rFRW3/RranOo8Wu9HtlXjzL4feBJvJyPFD03pF
CuRU7FxHtT0PaPtsYvfEbMj1zlUjJKv5DCpOuwS5OnrPAB1Lm160eB5yOiiMj8Ob
tnfQtkp4qCTh10jWM7NC5MTEvlEg3XG4ojhyOoYMHPqnML8eCLJhLWe+Uh8XzFg3
R6A8cdeQ1GBUpxS44hd73S/fF8IpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU6mp6
lZRfKtbBXtJRvcFHO8FJMFwwHwYDVR0jBBgwFoAU9D4GaO9yvYf6U2i+K2gVwLy0
AUkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCNDkyLzEwREE5OTc2NEEwMzExRUQ4RjU5RDg5RUYxMjIyNDY4LzlENEdh
Tzl5dllmNlUyaS1LMmdWd0x5MEFVay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlENEdhTzl5dllmNlUyaS1LMmdWd0x5MEFVay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REI0OTIvMTBEQTk5NzY0QTAzMTFFRDhGNTlEODlFRjEy
MjI0NjgvOUQ0R2FPOXl2WWY2VTJpLUsyZ1Z3THkwQVVrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAiIF0obIv9rLi/ZJ/MTTzcxlBidf9+
xJSR4jRQ+5RHFEG6ZmdXZySzxnf0lTZTgN0PgFu1qDOJknhCfZNrJi2pT6VmG4VI
uMPUHyOYzOSjzMcluHS+Bg++ysjWhsZWvgFmEe41QbsaoaV4UFZA1eQwbQ4QT4iR
LBrZiEpOjhoWQWOa+ci0eIfoYin4QRFFIND8X6wf7X4jClcePlDaL5NgE14wwWDs
1/5qNgWp1aQR3PmWqk2/1p+vOxHiLeXLQkD267TNwsSnMM6SXR1Divj4WBfHWgUn
Xijr2n2cbOCrdnxubXaHGf7/GGqrURJL1sM3zF2jmwqkrLrCTBFwzmZ7
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:16 2025 by rpki-client on console.sobornost.net