Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
File:                     xel4rPl9qfSdxLKEr_AldPEDGH8.mft (raw, json)
Hash identifier:          UibMp2hniTI/h73WGymuNRzXRsDKDXy+iHdS6TMVpEU=
Subject key identifier:   EF:B9:B4:75:DF:93:10:08:52:3F:3C:E7:09:5D:1F:5B:A0:F2:F7:55
Authority key identifier: C5:E9:78:AC:F9:7D:A9:F4:9D:C4:B2:84:AF:F0:25:74:F1:03:18:7F
Certificate issuer:       /CN=F36E6AB8AF/serialNumber=C5E978ACF97DA9F49DC4B284AFF02574F103187F
Certificate serial:       0549
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
Manifest number:          0548
Signing time:             Sun 27 Apr 2025 02:33:55 +0000
Manifest this update:     Sun 27 Apr 2025 02:33:54 +0000
Manifest next update:     Tue 29 Apr 2025 02:33:54 +0000
Files and hashes:         1: xel4rPl9qfSdxLKEr_AldPEDGH8.crl (hash: 6z+ZbJqQ0ilETZtg0t1jlBk0vJfdSKItVbhdfKSFnMs=)
                          2: 1C9E519E1BDD11ECA0560768D8A014CE.roa (hash: FU98lPpwZTQalULqUls0soaKI9pnCPgBWGxAh0GDG/g=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1353 (0x549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6AB8AF, serialNumber=C5E978ACF97DA9F49DC4B284AFF02574F103187F
        Validity
            Not Before: Apr 27 02:33:54 2025 GMT
            Not After : Apr 29 02:33:54 2025 GMT
        Subject: CN=680d9793-dd7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2d:7d:d1:c3:07:f4:ba:27:d4:20:e4:02:76:
                    b3:47:85:71:81:03:b2:89:6c:95:43:a3:4e:ce:df:
                    5c:85:3e:a0:11:89:7a:d2:47:c7:55:c1:fc:ae:f7:
                    72:b4:dd:04:be:c1:0c:54:0f:b6:da:57:e8:df:27:
                    94:b2:e5:17:4c:14:af:9c:61:4f:a3:cb:e3:6d:90:
                    5e:d0:b5:90:9d:e3:a6:ea:c3:92:9f:82:55:a8:cc:
                    18:43:86:fa:96:36:80:59:2e:10:d4:51:f8:a5:87:
                    37:c1:0a:02:4a:4c:e2:cf:34:7d:6e:38:c6:8a:e4:
                    41:7a:b0:3a:1d:96:67:7c:6c:69:92:38:a4:84:81:
                    95:5e:cb:44:47:25:59:78:16:2b:d4:5a:4d:f4:46:
                    2f:c0:ca:59:74:85:58:bb:f0:53:c2:94:c8:e5:ad:
                    09:22:93:f3:15:83:91:d7:ea:59:f8:2a:ba:1d:e0:
                    4d:db:8f:4a:66:f1:c6:05:ff:f5:b7:98:43:1e:3c:
                    d6:ff:04:1d:be:b8:15:f7:df:ed:1f:89:f0:40:6d:
                    a1:27:d5:fc:ce:cd:77:b7:54:f5:15:d4:cd:b4:05:
                    99:bf:09:59:82:88:fc:b5:d4:fd:7b:f8:c6:fb:fe:
                    77:12:7a:c1:d7:a4:2f:94:ae:0c:4c:fb:1e:7f:cc:
                    10:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B9:B4:75:DF:93:10:08:52:3F:3C:E7:09:5D:1F:5B:A0:F2:F7:55
            X509v3 Authority Key Identifier:
                keyid:C5:E9:78:AC:F9:7D:A9:F4:9D:C4:B2:84:AF:F0:25:74:F1:03:18:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:21:d7:7a:1c:55:a4:7d:d6:16:86:f7:81:31:21:73:b6:9c:
         75:21:95:7f:a1:f7:40:ab:d3:18:9d:e9:20:b0:65:13:52:3f:
         b9:94:78:8e:06:d9:c8:21:a0:33:a2:a9:2c:d6:9c:e0:e6:ea:
         92:cc:d3:e7:fe:8e:a6:f2:ae:fd:3f:f8:4a:06:09:c7:65:eb:
         dd:6e:d0:96:ed:65:0c:03:e6:09:ba:ed:61:9a:ef:90:87:2a:
         e1:65:29:e1:96:09:ef:0b:d1:a2:1b:5d:c6:32:f1:2c:b3:af:
         48:ad:21:a3:83:91:b9:1d:3e:02:c9:42:e8:82:6b:5e:09:27:
         0f:d7:35:fe:26:7d:31:f4:34:d7:bc:7e:46:a5:44:ef:30:6f:
         af:97:e6:e3:2e:9a:75:87:5b:7f:c2:0c:38:2c:e3:d9:00:71:
         e2:6d:34:40:e4:ec:b3:3d:24:3c:4b:8a:97:dc:2a:ee:96:b3:
         8c:01:a0:43:39:c7:2e:2c:c9:18:f2:22:09:d5:e1:80:d4:cd:
         7b:89:f7:ab:f9:dc:75:7d:4e:7c:06:e4:a8:83:e9:17:a1:0d:
         55:4c:d2:a0:a0:56:1f:e4:ee:06:1c:12:4b:dd:ee:af:2f:ab:
         b0:bc:24:16:96:e6:57:75:0c:05:56:73:29:66:ba:a3:7c:63:
         ae:f8:d1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:56 2025 by rpki-client on console.sobornost.net