Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
File:                     u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft (raw, json)
Hash identifier:          SRFrcoBxlE9zYz8gUBoaxeLEWzOoZQusBBdwj8MdrLA=
Subject key identifier:   89:10:2E:7C:80:AD:1E:46:1D:D9:44:66:64:F3:98:D7:CC:F9:FE:0B
Authority key identifier: BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79
Certificate issuer:       /CN=F36E084CAF/serialNumber=BB9AF1B86F31ACF277AB3A06D18E79EF5C8BAD79
Certificate serial:       0800
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
Manifest number:          07FA
Signing time:             Sun 27 Apr 2025 01:44:27 +0000
Manifest this update:     Sun 27 Apr 2025 01:44:26 +0000
Manifest next update:     Tue 29 Apr 2025 01:44:26 +0000
Files and hashes:         1: u5rxuG8xrPJ3qzoG0Y5571yLrXk.crl (hash: rJ9nY5OLel7GUz0bIV4qOmYnHuwzxe0jvPPT3iTt/5g=)
                          2: 86921EA0A38311EBBE2DD613F8AEA228.roa (hash: Qdm1jwSuwMkCRXEjG6ft+SApHF6cYD5AROgyucfXjCM=)
                          3: C2A79C94A38311EB9FD81C14F8AEA228.roa (hash: wCi/saeIICAwOHNLZFRK/7Rxl1hUxRkLtU6ihyqYm9U=)
                          4: 09404144A38211EB9403A411F8AEA228.roa (hash: XszKqqcugifGQ7P7cFMGaXWJ1rKb7154oh90pRoXSnM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2048 (0x800)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E084CAF, serialNumber=BB9AF1B86F31ACF277AB3A06D18E79EF5C8BAD79
        Validity
            Not Before: Apr 27 01:44:26 2025 GMT
            Not After : Apr 29 01:44:26 2025 GMT
        Subject: CN=680d8bfb-1320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:64:80:8b:f5:be:d2:72:9c:2c:16:90:42:a0:
                    47:ae:29:4a:73:71:7b:16:3c:c5:dd:fd:11:14:ec:
                    bf:7d:6a:cb:e0:21:ab:f4:5b:23:5f:8c:e6:bd:13:
                    58:6d:df:ec:8d:20:ca:5d:9d:f2:82:3a:d4:90:fe:
                    da:aa:01:94:bf:44:62:61:f8:59:60:ef:0a:e0:5f:
                    32:9a:d6:ea:b1:1f:15:fe:d9:6d:d0:3e:40:c6:98:
                    54:09:69:d8:af:0d:3a:74:64:61:de:ef:54:df:b7:
                    90:b6:ce:2e:b2:20:b9:87:81:a1:ed:62:3c:ec:37:
                    8e:15:48:56:1c:7b:20:87:ec:ed:f7:cb:3d:66:e5:
                    10:bb:dc:f8:86:f5:5e:fc:9f:a9:c3:45:f0:4f:8a:
                    df:f4:17:69:9a:f1:45:3c:39:b7:03:9b:e5:7d:9c:
                    d2:6f:92:f2:8b:46:66:79:75:60:6c:3b:0e:79:e5:
                    12:e7:c6:41:20:9c:58:77:f5:3c:58:83:a5:e4:71:
                    cc:d4:d9:93:ec:45:79:72:02:95:41:d1:ed:79:c5:
                    20:ea:47:84:fa:90:fa:0c:ff:cb:19:24:93:a7:0a:
                    1b:e6:75:35:8b:04:7f:58:bd:3f:90:d1:c7:47:cc:
                    4e:de:2b:93:44:e3:4d:ba:80:7c:85:39:e3:93:2a:
                    7a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:10:2E:7C:80:AD:1E:46:1D:D9:44:66:64:F3:98:D7:CC:F9:FE:0B
            X509v3 Authority Key Identifier:
                keyid:BB:9A:F1:B8:6F:31:AC:F2:77:AB:3A:06:D1:8E:79:EF:5C:8B:AD:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/u5rxuG8xrPJ3qzoG0Y5571yLrXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E084C/6A9DAE420F5C11EA915D5341F8AEA228/u5rxuG8xrPJ3qzoG0Y5571yLrXk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:75:3b:34:1f:83:01:96:92:f0:1f:82:ca:bb:bd:89:00:dc:
         86:ad:b5:5f:9e:24:c6:28:fb:9b:1a:1d:4b:90:7c:8e:96:54:
         b1:d1:5d:85:af:85:61:40:b3:af:6f:82:db:9a:7f:bb:1c:10:
         d9:9c:da:51:86:8a:f0:6f:17:64:df:71:15:b5:d7:b7:4b:a1:
         15:4a:c3:b4:1d:35:a6:be:f5:89:09:9a:e9:43:0c:6a:aa:22:
         69:81:ac:58:09:2a:cd:de:7d:81:14:15:2f:26:77:5b:a7:f2:
         bf:54:6b:c1:fe:ac:d6:aa:0a:9b:88:3a:65:ed:6b:60:48:39:
         81:7f:cb:86:f0:16:73:4b:26:d0:6d:34:ac:b7:07:bd:c7:0c:
         81:93:42:f9:20:b1:02:07:df:37:a4:32:c7:cb:21:6c:5b:be:
         9c:5a:42:4c:3d:0c:92:00:78:e0:0f:74:93:af:b2:25:77:93:
         2d:f3:2a:af:f5:41:0f:e2:0a:eb:97:a9:37:a4:6c:67:ac:7a:
         d2:80:53:b0:b2:0f:3b:65:93:77:d1:06:8a:d2:8f:66:0f:51:
         09:c4:fb:c0:8d:8f:25:fe:4f:5a:cc:71:42:75:3d:85:6b:ab:
         fe:57:21:e3:82:e5:56:44:23:bd:57:e9:8f:06:5f:be:97:04:
         38:d6:47:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:55 2025 by rpki-client on console.sobornost.net