Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
File:                     _Y4EWISxZp69QwrlZnIdl0BKbOg.mft (raw, json)
Hash identifier:          y4oHTktOHI0NCOtXK5sctStf1TOIezo4hizPN05wDmk=
Subject key identifier:   FF:20:6F:46:9D:16:13:B7:F9:3D:0A:E3:4D:DC:FC:70:02:0A:CB:F4
Authority key identifier: FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8
Certificate issuer:       /CN=F36E373DAF/serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
Certificate serial:       08E3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
Manifest number:          08C7
Signing time:             Mon 28 Apr 2025 01:33:51 +0000
Manifest this update:     Mon 28 Apr 2025 01:33:50 +0000
Manifest next update:     Wed 30 Apr 2025 01:33:50 +0000
Files and hashes:         1: _Y4EWISxZp69QwrlZnIdl0BKbOg.crl (hash: xVQq1oXysbltHyEV2F1ZNJPa6ErIoT5Ptw1elGCEVMI=)
                          2: 72FDA95EBED111EBB1E95938F8AEA228.roa (hash: BFwqjnvA7M7iOe8MrvjQVzzYtcahDaV6kGy9p/HlFzg=)
                          3: 8CFF0D3452E011EEB9E2557C4AD9E6FC.roa (hash: AjdT4e8a6WXfxGEzOMU2Ejz3vHkEPA/+xC+T83HmsUY=)
                          4: 7E2AA4AC953C11ECB825FCA95A40D577.roa (hash: V0xEm03mcnP/23ED2cL/AoR2czYuEnqqGtBl0cqLVJY=)
                          5: 771B25DAC1DC11EBAFF27A22F8AEA228.roa (hash: hB7LK5vkWRJBikNKLrZykTmcN1gbhqGJuoapPw28t74=)
                          6: 487A092ADA8611ED9609AEE52F6D8C1D.roa (hash: D/BuyKELkA6Kinn/ZmmBBy28n4BcPuuOdNb0VMO9tSc=)
                          7: EBFDEB1CDA8511EDAD8DC8E42F6D8C1D.roa (hash: T0K4k+0IgpuVi35+ZPDqnwWPZANeAHrt4BvXYlWbXMI=)
                          8: 417B7412681D11EABAE8A23BF8AEA228.roa (hash: EcSboq3Auo5ZSfF9dSrc6D9TXAo4UTRY5/uzWoCkLSY=)
                          9: A0A710B2C1DC11EBBC70BD22F8AEA228.roa (hash: nWisPdHBij3RvecNt34Yu238DLfWQU7kpk3sAXEBWpo=)
                          10: 9132C716F59111E9AF6CD33BF8AEA228.roa (hash: rXypH2zp9nVVHeDRCTVV4b8eCSlSkXxt3YUitRlyOEk=)
                          11: 9364DF78BED111EBB8FF9938F8AEA228.roa (hash: NRhe7qbaq8yZpi9FGOqJZVS+hbrFKmeWDZsrvab3+uA=)
                          12: 7F0A8334DA8611ED854699E62F6D8C1D.roa (hash: GP3NdP5uExbY2GZHQJ+RZAHZhDY8bRc/dyrY/rF4P6I=)
                          13: 238CE30A681D11EA8E2A7D3BF8AEA228.roa (hash: ydKx4ungEUC7wspHHxXIcDKz2U1m9S6af+pOZ0cF1vY=)
                          14: D7EB2302681D11EA9D36683CF8AEA228.roa (hash: AgNVSSf6L6GA3IHpXql3JWZ8L6ROJY9bnjmSjQeMQnU=)
                          15: F251F7A2681D11EA847A8F3CF8AEA228.roa (hash: CH6IVgy5lqquXIo/aSkiaRuN6dDR9B17P94pxUuhf4w=)
                          16: AF1ED052BED111EBAE20BD38F8AEA228.roa (hash: 4XRclk/yI8EJN8d2ChhuI+DM9Txu0zUGc/TXnREwp8M=)
                          17: A6F9E6BC52E711EEA98697134AD9E6FC.roa (hash: 522xUbFyDNAfNVyOqkEJj/kgs5vlVi6RihMtJZxJPIA=)
                          18: 51E7667A198311EDA6FEC5BFF1222468.roa (hash: 5AYXvFdqlcLtOaW600VeglJz5MATpO6Rt2/LbZme/P8=)
                          19: DBFF1E3C43DD11ED95883DBCF1222468.roa (hash: Y8zoZUQnQqpVoToxLOumwxqYjQxD2d4+Fg81697ZwlM=)
                          20: 60E94C82DA8611EDB9B5F0E52F6D8C1D.roa (hash: uN0Q1zV+VPkcLgC9gryjBgSon2OLOyHeE5NbuOjD/vU=)
                          21: 14FC84CEDA8611EDAD5B23E52F6D8C1D.roa (hash: S6+GPt3mMdOMUzMxpxdXeFeENM7hq23EiAhTHkvC6fQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2275 (0x8e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E373DAF, serialNumber=FD8E045884B1669EBD430AE566721D97404A6CE8
        Validity
            Not Before: Apr 28 01:33:50 2025 GMT
            Not After : Apr 30 01:33:50 2025 GMT
        Subject: CN=680edaff-f291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:20:62:27:c4:e3:a5:c9:48:75:a7:9d:d4:5a:
                    48:32:fc:1d:e3:75:a8:db:63:b4:da:0c:89:13:0d:
                    e6:e2:79:a7:36:e8:d8:a1:ec:2a:2b:cd:53:77:52:
                    bb:4e:9f:0d:da:cc:f1:6f:dd:ce:39:aa:58:1b:fe:
                    c3:28:6c:67:ba:00:42:bc:fc:e5:ea:1b:19:d5:06:
                    cd:33:b2:0e:83:65:4c:50:29:3b:a4:ed:87:bd:43:
                    f3:28:db:fb:cd:c4:6f:f2:5e:c0:78:c0:b1:63:5e:
                    72:13:87:0b:7c:50:ff:75:64:a7:67:a9:03:57:12:
                    2d:4b:3b:69:26:7b:03:5c:27:24:f5:a0:90:0e:54:
                    78:8a:32:b3:c7:3e:5b:df:e4:68:0e:4d:bc:3e:a0:
                    cb:ed:80:32:f5:75:5b:8b:6f:8e:58:b4:eb:d7:4f:
                    8b:35:1b:a8:29:83:1e:d3:43:61:f1:bc:3f:25:b1:
                    f2:93:da:f5:eb:fc:ce:6d:b8:b2:d7:b9:eb:c2:d9:
                    53:42:be:59:a5:98:6a:d6:f2:77:7c:91:fa:f9:c9:
                    37:76:6e:aa:d3:53:1d:4e:56:e5:a4:9b:1c:01:af:
                    01:5a:8a:99:e8:bc:8a:59:43:73:c1:a5:8d:45:84:
                    b6:1b:13:c5:38:71:61:73:20:1d:1a:df:df:49:c7:
                    17:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:20:6F:46:9D:16:13:B7:F9:3D:0A:E3:4D:DC:FC:70:02:0A:CB:F4
            X509v3 Authority Key Identifier:
                keyid:FD:8E:04:58:84:B1:66:9E:BD:43:0A:E5:66:72:1D:97:40:4A:6C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_Y4EWISxZp69QwrlZnIdl0BKbOg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E373D/4D22ACD68B7311E9A49A4368F8AEA228/_Y4EWISxZp69QwrlZnIdl0BKbOg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:10:d1:aa:e7:83:a2:08:db:09:e3:db:ba:3c:de:c7:cf:11:
         6a:cc:bf:78:e4:14:ea:e1:d7:7f:b0:aa:a1:a5:0f:91:34:38:
         46:01:cd:92:65:a0:ff:cc:96:be:97:39:c5:ad:21:ea:30:67:
         48:96:a4:58:bd:fa:b9:5e:66:b7:d2:23:4b:60:73:2e:bd:2c:
         6b:ad:de:8a:d6:24:66:a4:89:a9:41:74:21:67:39:19:4e:6f:
         86:fc:b8:48:04:7a:b3:9b:0e:f1:97:58:02:4f:d5:42:52:9e:
         9b:f3:2e:60:54:cc:5b:d3:a0:62:ca:7f:1f:11:8f:62:fc:f6:
         31:e5:cb:16:34:b9:5a:6c:af:92:ae:40:21:96:70:40:7c:e8:
         3e:0e:98:f7:6f:6f:6d:9f:26:8f:ff:78:a8:6c:4a:03:54:bc:
         ef:ea:b4:d8:ed:dc:e5:92:4a:1d:58:3d:3e:af:71:cc:7f:f6:
         86:dd:b5:40:5b:e1:51:a7:c6:12:3a:84:29:4e:73:c3:87:9b:
         18:39:9b:47:96:7f:d4:95:4c:b3:d6:69:62:56:6f:2a:6b:55:
         a8:a1:c2:39:73:2f:15:c2:0d:ab:21:35:73:ef:58:19:74:57:
         6c:09:c4:d8:f4:92:4d:df:52:a9:1d:0f:dd:33:cb:6a:c4:ca:
         b6:49:f0:3c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCOMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTM3M0RBRjExMC8GA1UEBRMoRkQ4RTA0NTg4NEIxNjY5RUJENDMwQUU1NjY3MjFE
OTc0MDRBNkNFODAeFw0yNTA0MjgwMTMzNTBaFw0yNTA0MzAwMTMzNTBaMBgxFjAU
BgNVBAMTDTY4MGVkYWZmLWYyOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/IGInxOOlyUh1p53UWkgy/B3jdajbY7TaDIkTDebieac26Nih7CorzVN3
UrtOnw3azPFv3c45qlgb/sMobGe6AEK8/OXqGxnVBs0zsg6DZUxQKTuk7Ye9Q/Mo
2/vNxG/yXsB4wLFjXnIThwt8UP91ZKdnqQNXEi1LO2kmewNcJyT1oJAOVHiKMrPH
Plvf5GgOTbw+oMvtgDL1dVuLb45YtOvXT4s1G6gpgx7TQ2HxvD8lsfKT2vXr/M5t
uLLXuevC2VNCvlmlmGrW8nd8kfr5yTd2bqrTUx1OVuWkmxwBrwFaipnovIpZQ3PB
pY1FhLYbE8U4cWFzIB0a399JxxejAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU/yBv
Rp0WE7f5PQrjTdz8cAIKy/QwHwYDVR0jBBgwFoAU/Y4EWISxZp69QwrlZnIdl0BK
bOgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzNzNELzREMjJBQ0Q2OEI3MzExRTlBNDlBNDM2OEY4QUVBMjI4L19ZNEVX
SVN4WnA2OVF3cmxabklkbDBCS2JPZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19ZNEVXSVN4WnA2OVF3cmxabklkbDBCS2JPZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTM3M0QvNEQyMkFDRDY4QjczMTFFOUE0OUE0MzY4RjhB
RUEyMjgvX1k0RVdJU3hacDY5UXdybFpuSWRsMEJLYk9nLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCHENGq54OiCNsJ49u6PN7HzxFqzL94
5BTq4dd/sKqhpQ+RNDhGAc2SZaD/zJa+lznFrSHqMGdIlqRYvfq5Xma30iNLYHMu
vSxrrd6K1iRmpImpQXQhZzkZTm+G/LhIBHqzmw7xl1gCT9VCUp6b8y5gVMxb06Bi
yn8fEY9i/PYx5csWNLlabK+SrkAhlnBAfOg+Dpj3b29tnyaP/3iobEoDVLzv6rTY
7dzlkkodWD0+r3HMf/aG3bVAW+FRp8YSOoQpTnPDh5sYOZtHln/UlUyz1mliVm8q
a1WoocI5cy8Vwg2rITVz71gZdFdsCcTY9JJN31KpHQ/dM8tqxMq2SfA8
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:06:36 2025 by rpki-client on console.sobornost.net