Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
File:                     ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft (raw, json)
Hash identifier:          Dd+JqNUCrgAzChCay9CCnWITkDXdrtVCuLdZ2TZ1btk=
Subject key identifier:   19:96:0E:51:F2:8C:E9:B3:82:5E:91:0C:27:A3:C4:77:64:8E:63:80
Authority key identifier: CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2
Certificate issuer:       /CN=F36E4B69AF/serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
Certificate serial:       0242
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
Manifest number:          0231
Signing time:             Mon 28 Apr 2025 04:14:57 +0000
Manifest this update:     Mon 28 Apr 2025 04:14:57 +0000
Manifest next update:     Wed 30 Apr 2025 04:14:56 +0000
Files and hashes:         1: ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl (hash: TwV85CKXskJUjzUy0/euZdYFQx/C0ga+UrKUvhUR7hs=)
                          2: 4EA7D32E53E611EF9B5BE56C762E951A.roa (hash: NtlpVvP6+zWzB8RFTth6ghNvN5nR/THSHfhDD9x2bP8=)
                          3: C1A1DD34BE5E11EE99164ABD775412E6.roa (hash: wvW9kZ5/AUNQWgKaGpjvpIVPHuqxftH9YadONSy7YnM=)
                          4: 757D2A34887711EE836A404E4AD9E6FC.roa (hash: +ZI3X/alavjG8hd5TUGXudmlVMdSEsoVpfbaqPGHQKA=)
                          5: A1BBDFB45BDA11EFA2803F75762E951A.roa (hash: B+/DOrNgATDNRMYx/JLMgJNXWHAPifjl6iw4sXJYoDA=)
                          6: D2F9CEC4BE4B11EE8D656598775412E6.roa (hash: Cxpb4VpHsS5nAkYLG5LF8Ro6WmVM8kJPPNxJ4wnGbyc=)
                          7: 75479C3CBE5711EEA57807B1775412E6.roa (hash: KJ78VQh/EaM4VrWU0qtdFJzJqdOESws+8hhBj0+/JkQ=)
                          8: 8804A9420EF611EF90E9CB4F017001B1.roa (hash: Ah/gC+WFiWi7Jlp6m9g/RNWVwD4e/UvuFekwBmptqnY=)
                          9: A8121FD29CFC11EF91E12A85762E951A.roa (hash: 40tq9RUAvjkX3eq2QoBMj2ZOuP4wwcDT4oeJUrXPD54=)
                          10: EC1D132E0D2A11EFB8F87A2D017001B1.roa (hash: Ly9LZH0Fh6E4ZtDar/abB8C31gGCVwPrBo7kMnb8boM=)
                          11: 0EF37AD45BDA11EF9E5BF670762E951A.roa (hash: 51koAiGBT4Qlz96Il2OYaGj869PU6MSFeqlPyjHqg1Q=)
                          12: 518CAA929CFC11EF95640782762E951A.roa (hash: OyktAYCtLdWaRz8aqABUtVcVPRFArgA2QV1t66oDcS8=)
                          13: 23292B7612C311EFB9087350017001B1.roa (hash: ljEIXCzMDkNC6MsSv3Wx80qJCOfaflJx6GdHSwJRefU=)
                          14: D265FEDE0BCA11EF917FA0F3007001B1.roa (hash: JnlsXUtJ6yRPF3xH5RBfKSof1yPWn25dJe2aCkd3Tug=)
                          15: 7F5635A2887511EEBFD443484AD9E6FC.roa (hash: ocQwdIyiszloWpRuczWxhp841V/qq4mP8+w57e47R8w=)
                          16: 3B419B887CAB11EFB49DDE4D762E951A.roa (hash: IQzn2Mmxf3299kc5c2KxlM3LEdiHGEsho1HI4seozUE=)
                          17: 88C005FAE86F11EEA0289955775412E6.roa (hash: 2xUGL17bO3ah/ni1p+4Y+DjG347crU5mRkFs3eTev0U=)
                          18: 566CE01C0BD011EF922BB41F017001B1.roa (hash: NJoaiPoqCsvM8uTcCsGcl3CIrYSjToxekiedssQBL9U=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4B69AF, serialNumber=CA6642EA9AFCC73AA24AA4047544B17C2603CBD2
        Validity
            Not Before: Apr 28 04:14:57 2025 GMT
            Not After : Apr 30 04:14:56 2025 GMT
        Subject: CN=680f00c1-de27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:ea:d7:e1:c6:a2:af:e9:e0:b4:6b:c5:6a:
                    78:f9:52:ec:86:ab:3e:7b:68:97:f3:12:b7:58:20:
                    72:ef:d9:5d:32:35:d4:26:22:ed:90:36:43:66:49:
                    bc:bf:fa:e1:20:92:81:2e:a7:5d:80:cc:f4:5f:2b:
                    4b:e5:a1:cd:0d:5d:85:ff:85:b1:ea:7a:64:f1:db:
                    28:7b:c3:f3:6e:da:e4:03:69:60:e6:e9:e3:69:37:
                    e0:7e:df:8c:5f:3e:f3:c6:43:04:ed:47:18:83:18:
                    18:ee:66:aa:bf:23:db:5f:95:b3:4c:08:87:6a:ad:
                    f6:54:e3:86:bc:94:e2:19:14:1c:a7:41:15:06:7d:
                    f5:c5:88:fc:ae:33:19:39:e7:f4:c1:61:89:84:98:
                    f5:23:90:34:10:a2:d3:99:ee:7e:2a:db:f8:e7:41:
                    78:a7:3d:6d:ee:ad:e5:76:11:40:f9:47:aa:a7:4a:
                    7a:2a:3d:89:61:90:d2:c9:d1:25:98:a0:15:ea:9d:
                    00:9e:ab:d7:32:a0:bc:d3:3c:67:49:40:09:4a:20:
                    65:64:15:81:fe:85:6c:ab:8b:2e:96:eb:41:79:33:
                    d7:21:42:aa:cc:a6:9f:f4:ef:02:c6:4c:f5:20:b1:
                    4c:ee:e4:0f:5d:93:dd:92:e3:52:99:d1:ee:b6:1b:
                    01:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:96:0E:51:F2:8C:E9:B3:82:5E:91:0C:27:A3:C4:77:64:8E:63:80
            X509v3 Authority Key Identifier:
                keyid:CA:66:42:EA:9A:FC:C7:3A:A2:4A:A4:04:75:44:B1:7C:26:03:CB:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ymZC6pr8xzqiSqQEdUSxfCYDy9I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4B69/DE14770E887311EE89B811434AD9E6FC/ymZC6pr8xzqiSqQEdUSxfCYDy9I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:09:9e:cb:2a:66:5f:72:0f:8b:7b:b8:e8:0f:6c:99:22:ac:
         9d:22:b9:01:85:ad:04:48:dd:a7:48:c4:aa:37:b2:b9:6d:53:
         75:d6:b4:67:a0:96:65:19:01:1d:3e:46:a1:80:92:e0:1e:72:
         ca:66:45:c9:67:33:ec:9b:4f:34:a5:28:e6:56:b3:45:17:ee:
         f1:f5:67:68:2b:ab:dd:b3:d5:8f:c5:99:a8:5c:2b:0b:28:7f:
         e1:fc:1b:ae:8e:a5:89:0e:1b:91:1c:9c:47:a0:c7:0e:bf:ef:
         31:33:98:20:9e:17:bd:24:9d:6f:65:24:23:b4:fb:14:7a:d1:
         e9:1b:28:fa:15:68:b2:66:29:31:9d:90:39:9e:3d:20:5f:af:
         0f:d2:b5:79:20:35:66:2c:e4:3a:e5:5b:eb:ac:de:32:bc:72:
         d4:33:69:52:98:15:0a:c1:47:02:db:e1:00:d1:41:3d:85:2e:
         1a:1f:c7:22:3d:4d:0d:3f:85:32:f8:38:a4:27:e6:3a:e8:d6:
         85:04:5a:32:77:69:07:df:38:49:c4:a4:38:a1:98:f7:4d:5d:
         c0:21:1d:3d:4d:23:3e:bf:17:73:8e:2a:47:c5:ef:86:b0:ce:
         55:28:79:28:34:be:65:36:dd:84:6a:37:1c:85:ff:f9:14:e5:
         6e:43:32:41
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAkIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTRCNjlBRjExMC8GA1UEBRMoQ0E2NjQyRUE5QUZDQzczQUEyNEFBNDA0NzU0NEIx
N0MyNjAzQ0JEMjAeFw0yNTA0MjgwNDE0NTdaFw0yNTA0MzAwNDE0NTZaMBgxFjAU
BgNVBAMTDTY4MGYwMGMxLWRlMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCo0+rX4cair+ngtGvFanj5UuyGqz57aJfzErdYIHLv2V0yNdQmIu2QNkNm
Sby/+uEgkoEup12AzPRfK0vloc0NXYX/hbHqemTx2yh7w/Nu2uQDaWDm6eNpN+B+
34xfPvPGQwTtRxiDGBjuZqq/I9tflbNMCIdqrfZU44a8lOIZFBynQRUGffXFiPyu
Mxk55/TBYYmEmPUjkDQQotOZ7n4q2/jnQXinPW3ureV2EUD5R6qnSnoqPYlhkNLJ
0SWYoBXqnQCeq9cyoLzTPGdJQAlKIGVkFYH+hWyriy6W60F5M9chQqrMpp/07wLG
TPUgsUzu5A9dk92S41KZ0e62GwF1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGZYO
UfKM6bOCXpEMJ6PEd2SOY4AwHwYDVR0jBBgwFoAUymZC6pr8xzqiSqQEdUSxfCYD
y9IwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU0QjY5L0RFMTQ3NzBFODg3MzExRUU4OUI4MTE0MzRBRDlFNkZDL3ltWkM2
cHI4eHpxaVNxUUVkVVN4ZkNZRHk5SS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3ltWkM2cHI4eHpxaVNxUUVkVVN4ZkNZRHk5SS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTRCNjkvREUxNDc3MEU4ODczMTFFRTg5QjgxMTQzNEFE
OUU2RkMveW1aQzZwcjh4enFpU3FRRWRVU3hmQ1lEeTlJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYCZ7LKmZfcg+Le7joD2yZIqydIrkB
ha0ESN2nSMSqN7K5bVN11rRnoJZlGQEdPkahgJLgHnLKZkXJZzPsm080pSjmVrNF
F+7x9WdoK6vds9WPxZmoXCsLKH/h/BuujqWJDhuRHJxHoMcOv+8xM5ggnhe9JJ1v
ZSQjtPsUetHpGyj6FWiyZikxnZA5nj0gX68P0rV5IDVmLOQ65VvrrN4yvHLUM2lS
mBUKwUcC2+EA0UE9hS4aH8ciPU0NP4Uy+DikJ+Y66NaFBFoyd2kH3zhJxKQ4oZj3
TV3AIR09TSM+vxdzjipHxe+GsM5VKHkoNL5lNt2Eajcchf/5FOVuQzJB
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:06:37 2025 by rpki-client on console.sobornost.net