Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
File:                     z9HOEVgucPjVG3hwclwV72fgxlE.mft (raw, json)
Hash identifier:          YLKMwDtaK1z/kWi5bKpxZyIkGqDHAX9e1O4Dwe6T2JA=
Subject key identifier:   09:5F:EC:7A:76:ED:BC:A6:7F:94:51:67:4D:F6:4B:41:84:DC:5D:2C
Authority key identifier: CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51
Certificate issuer:       /CN=F36DB4B4AF/serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
Certificate serial:       0D8E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
Manifest number:          0D8B
Signing time:             Sun 27 Apr 2025 01:01:37 +0000
Manifest this update:     Sun 27 Apr 2025 01:01:36 +0000
Manifest next update:     Tue 29 Apr 2025 01:01:36 +0000
Files and hashes:         1: z9HOEVgucPjVG3hwclwV72fgxlE.crl (hash: 0pHfJ9BOOejWuKWWY1wdh9a9iWvYaTYg43b+5Apa9a4=)
                          2: 44FF457CB46311E58407FA55F8AEA228.roa (hash: B9WSKZRqziRr6GOCV6BDWegKxCtGmeVw42cvf6ryK9U=)
                          3: A17B340AB46311E59241EB56F8AEA228.roa (hash: 7FwQeUfCbVL0Bd2EXyoVC5y/xe6Lbd8u11SpNh5f5zI=)
                          4: F0D40794B46211E5A330CA55F8AEA228.roa (hash: t2nsrO2U23DwtiWKoe3fqAaOO4rdHwgErkagqsJpKHc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3470 (0xd8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB4B4AF, serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
        Validity
            Not Before: Apr 27 01:01:36 2025 GMT
            Not After : Apr 29 01:01:36 2025 GMT
        Subject: CN=680d81f1-7ae7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:61:e9:eb:57:94:c9:29:74:59:ae:c8:fb:b7:
                    6c:8a:8b:82:de:47:c6:14:bc:ec:c1:0c:4f:64:60:
                    6a:6c:23:f5:05:21:d8:54:88:47:c5:66:8d:cf:ef:
                    a7:85:eb:03:36:f5:de:60:0e:42:f5:f3:0d:14:3c:
                    f4:82:f4:5a:1c:12:96:4c:ea:5e:4d:ec:b0:4c:9a:
                    d8:33:00:b9:d0:c9:b0:1f:d9:33:3f:53:ab:56:6a:
                    2b:fe:ab:c8:4e:d8:83:25:4a:da:5a:a6:53:82:17:
                    93:5f:1f:e7:4e:18:f1:7d:0c:cc:4f:50:50:68:de:
                    b6:a9:2d:7c:31:54:b0:32:8a:8a:0d:28:7d:45:2e:
                    5a:2c:2d:50:57:f5:f0:1f:72:48:c5:ba:33:1c:19:
                    5b:99:af:f6:7d:2b:31:db:d7:44:0d:93:49:cb:e4:
                    8c:b8:24:b4:03:23:56:8a:00:63:1a:fc:98:18:db:
                    db:c2:18:dc:e4:f9:ae:68:53:fe:43:39:89:75:98:
                    53:f9:2a:e1:85:f3:ae:fa:b5:34:22:95:9e:4e:46:
                    74:8b:56:ab:c6:ab:a6:0a:e2:8c:b5:75:a6:fc:49:
                    b9:59:30:ed:b2:e2:4d:2e:c5:da:77:7c:33:2b:cb:
                    8c:1b:46:a3:99:04:61:bd:45:e3:52:a1:0c:fe:26:
                    03:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5F:EC:7A:76:ED:BC:A6:7F:94:51:67:4D:F6:4B:41:84:DC:5D:2C
            X509v3 Authority Key Identifier:
                keyid:CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:8e:28:d7:b5:79:c3:59:b9:88:13:0d:cd:b9:f8:08:89:f7:
         23:87:24:27:48:30:89:83:bb:24:b4:a1:ac:a6:cb:db:31:aa:
         a7:c5:f6:d1:19:ef:82:1b:3d:3d:f1:f5:98:e4:d5:cd:ac:ac:
         b7:9b:a9:0c:5f:9e:dd:45:60:ad:b6:b9:57:ab:b5:39:0c:48:
         c2:45:cc:f8:8c:e1:bd:67:e0:7b:36:52:2a:d8:86:86:ea:75:
         1f:f7:1f:44:15:a6:e4:b9:14:3f:45:6d:79:80:a2:5c:44:3d:
         43:fb:8c:d9:5d:b9:cc:66:8f:af:6d:49:55:48:c3:fa:d0:a6:
         59:20:53:a2:4d:d7:63:ae:05:bd:14:35:a1:95:91:0b:9f:0a:
         3b:3d:5a:a4:ad:ce:07:64:74:48:12:a0:89:df:4f:11:2c:5d:
         43:82:b9:ef:c6:a6:93:43:62:76:10:e7:f1:3f:ae:75:1a:f0:
         b9:5c:40:9c:aa:9f:74:30:1d:49:0e:42:d4:53:14:56:71:23:
         e2:5b:11:80:bf:c0:4a:4c:90:2b:2e:34:ca:62:4a:cd:58:54:
         d3:90:cf:60:cd:11:90:33:d0:4e:8d:f7:61:eb:f1:06:1a:e8:
         64:8f:17:d9:60:b3:95:26:55:22:83:e0:67:1e:6e:de:23:b0:
         8d:12:63:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:55 2025 by rpki-client on console.sobornost.net