Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.mft
File:                     TibbH7y8v-dYX84SgHnV75Hfj14.mft (raw, json)
Hash identifier:          IKkbB+/kGWgxWcJU2u4mQQ9CP7vqsR/66b+r/+0Tgoo=
Subject key identifier:   5A:94:42:C9:4F:3A:70:97:13:D9:CB:42:E1:93:89:01:4E:65:AE:B7
Authority key identifier: 4E:26:DB:1F:BC:BC:BF:E7:58:5F:CE:12:80:79:D5:EF:91:DF:8F:5E
Certificate issuer:       /CN=F36E33CDAF/serialNumber=4E26DB1FBCBCBFE7585FCE128079D5EF91DF8F5E
Certificate serial:       0418
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TibbH7y8v-dYX84SgHnV75Hfj14.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.mft
Manifest number:          0415
Signing time:             Mon 28 Apr 2025 03:10:14 +0000
Manifest this update:     Mon 28 Apr 2025 03:10:13 +0000
Manifest next update:     Wed 30 Apr 2025 03:10:13 +0000
Files and hashes:         1: TibbH7y8v-dYX84SgHnV75Hfj14.crl (hash: wWpXhdJaJsvxVlgsc7UnBGP/Zos0E6CwW6I/qCBNGS8=)
                          2: E6CDC9AA237E11EDB6A2EDF9F1222468.roa (hash: n+PuUD7Nff8t9oN2JZTn6zKXJJ6q9obodlo2ezFFRl0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TibbH7y8v-dYX84SgHnV75Hfj14.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E33CDAF, serialNumber=4E26DB1FBCBCBFE7585FCE128079D5EF91DF8F5E
        Validity
            Not Before: Apr 28 03:10:13 2025 GMT
            Not After : Apr 30 03:10:13 2025 GMT
        Subject: CN=680ef195-d13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ed:8b:9a:4c:d5:e5:21:d5:f1:8b:d8:36:2e:
                    0b:7d:b3:b8:e7:23:66:44:fb:fa:14:0e:36:fc:81:
                    f6:8c:cb:be:bd:a1:3f:a2:d8:6c:b9:a2:9b:d4:b0:
                    20:8b:96:5f:d1:56:60:90:8d:14:a3:a3:8b:77:c8:
                    0c:79:a6:13:8c:3e:bc:37:9a:4f:31:10:cf:7a:9c:
                    3a:43:ff:b8:11:3e:1a:b9:91:a3:19:46:f2:f1:10:
                    06:08:e4:d6:ec:27:c3:cb:a3:10:8b:9d:2b:7b:77:
                    39:52:5d:a3:87:55:e1:9e:95:d7:c3:b7:26:e2:24:
                    ff:e7:7b:0d:d7:eb:71:78:db:30:e6:c2:19:25:b1:
                    a3:aa:41:ee:aa:a3:be:1f:96:eb:ed:58:85:a6:bc:
                    a6:d6:e6:bc:df:4e:56:21:4c:95:25:13:53:c4:35:
                    c2:6a:86:45:60:5c:9c:2d:e5:ac:cd:e6:d8:93:2a:
                    1b:35:df:66:f4:cb:85:dd:c1:9a:02:76:ea:fa:dd:
                    63:20:52:67:cc:6c:13:f6:d6:6c:ac:c9:69:79:c7:
                    22:20:59:e5:bb:9e:8f:6d:18:ad:77:3e:19:ed:6e:
                    8f:0a:bc:d8:c7:9d:d1:58:e5:26:ce:01:ce:40:40:
                    f7:eb:1f:f5:93:9c:8c:e3:e7:4d:f1:9e:f4:54:3a:
                    1e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:94:42:C9:4F:3A:70:97:13:D9:CB:42:E1:93:89:01:4E:65:AE:B7
            X509v3 Authority Key Identifier:
                keyid:4E:26:DB:1F:BC:BC:BF:E7:58:5F:CE:12:80:79:D5:EF:91:DF:8F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TibbH7y8v-dYX84SgHnV75Hfj14.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E33CD/C394ECF00E6811EDB3EB47F0F1222468/TibbH7y8v-dYX84SgHnV75Hfj14.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:8a:9c:65:12:99:7d:fd:52:7b:b7:cc:67:4c:ac:cc:6c:0c:
         9a:44:1e:8d:70:42:fb:17:c9:dd:67:85:a3:a5:38:9b:c3:96:
         b5:28:b6:1b:40:c8:69:68:f6:1e:b9:97:1b:11:73:64:27:7d:
         4c:7c:d2:fb:4d:d4:32:a5:2f:3a:45:68:f3:a8:e2:aa:e4:83:
         c3:b4:91:ef:a6:62:25:ca:c9:49:cf:ee:0e:30:18:26:50:d1:
         2b:d9:52:39:fd:eb:c4:a9:27:df:a2:8b:98:14:a4:8d:f4:d4:
         3f:7a:d7:76:09:ac:d3:d7:98:ef:08:6e:b5:c4:de:c7:6b:34:
         a2:d8:f1:d4:57:9c:5b:89:00:91:a6:d9:ae:44:4a:96:62:ad:
         3f:c3:38:f6:46:6d:91:14:45:68:d2:92:89:c3:e4:5a:7f:60:
         27:f5:71:76:f8:34:c2:56:d1:fb:3a:34:c3:11:08:56:5d:7b:
         3b:c9:cb:9a:5d:54:9c:2b:6f:db:e5:fc:9c:55:4f:8a:a8:0f:
         bc:cd:54:9e:a7:53:46:8b:15:e3:ae:ea:af:b4:fe:9a:a9:be:
         d3:62:47:5f:f8:91:7f:17:64:ad:43:74:b9:ea:b3:86:c3:b0:
         65:13:3c:c4:f6:e7:ab:4c:7b:8a:ca:59:ae:1c:cc:94:50:96:
         d7:10:e5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:06:36 2025 by rpki-client on console.sobornost.net