Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
File:                     qUI_pMACbS5NqCEtEo2dJwfoHck.mft (raw, json)
Hash identifier:          znnfFgnYRhSO323xhC4UvE5uDU5Eip550J9YQ8bbWuo=
Subject key identifier:   EB:87:C3:70:33:DF:CF:5E:F7:83:11:2D:4B:11:A8:15:C6:B0:AD:67
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Certificate issuer:       /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial:       057F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
Manifest number:          057D
Signing time:             Thu 24 Apr 2025 02:27:48 +0000
Manifest this update:     Thu 24 Apr 2025 02:27:47 +0000
Manifest next update:     Sat 26 Apr 2025 02:27:47 +0000
Files and hashes:         1: qUI_pMACbS5NqCEtEo2dJwfoHck.crl (hash: eNPbA5X44h+7xzGBI5G9kLmJTik+95c0Id0M919z/lc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Apr 2025 00:06:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1407 (0x57f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E70F4AF, serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
        Validity
            Not Before: Apr 24 02:27:47 2025 GMT
            Not After : Apr 26 02:27:47 2025 GMT
        Subject: CN=6809a1a4-57e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:09:02:16:3f:e6:9c:11:69:a4:6f:83:db:8b:
                    2a:88:e8:41:41:45:7f:f3:5d:8d:77:2a:0d:87:19:
                    60:93:e9:25:9d:6c:b1:99:55:b0:4c:7d:5a:ae:51:
                    d9:d6:93:41:ac:29:51:9f:26:a0:83:8f:da:c0:0a:
                    a8:e2:33:f2:e6:20:0e:26:e7:51:48:69:ab:50:93:
                    e9:f6:1e:a8:7a:d1:18:6b:c8:11:df:c1:99:91:8e:
                    77:36:13:97:e1:70:5e:b1:f5:ca:90:3f:6d:8d:75:
                    7b:be:7c:43:27:9a:0e:71:70:c2:a3:9d:33:56:fc:
                    9e:63:ba:3a:96:4e:b1:b3:91:bb:5e:6f:e4:2f:20:
                    6f:4e:fc:82:fc:be:b8:d5:a1:92:ff:ec:06:c3:4c:
                    ed:1a:9e:9c:f1:16:a9:82:73:24:b0:ee:97:8a:97:
                    af:ca:f6:ea:24:98:2a:10:e7:77:4e:e3:da:12:a4:
                    0e:67:4b:cf:6f:ce:09:e0:09:05:81:95:83:c0:42:
                    66:55:a4:ce:8d:11:46:6a:02:b2:96:66:79:0c:c6:
                    b7:35:a4:1b:b1:75:94:a8:3a:05:61:a7:ed:e3:99:
                    98:3b:39:97:cf:96:2a:6a:91:a7:15:ef:1f:85:6e:
                    8c:58:55:de:0c:13:12:ae:f8:b3:3d:2e:c0:e3:62:
                    83:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:87:C3:70:33:DF:CF:5E:F7:83:11:2D:4B:11:A8:15:C6:B0:AD:67
            X509v3 Authority Key Identifier:
                keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c3:03:91:ea:a7:47:33:66:ea:15:f0:c1:f7:01:cf:50:78:
         f4:a3:56:0c:d5:65:8a:f3:2b:96:57:29:32:a0:0f:04:ee:bf:
         45:2a:22:9b:c5:f3:d2:81:5f:a4:55:16:fa:21:98:6a:40:e7:
         3f:50:39:35:62:65:2e:3b:4c:68:47:8e:48:ab:8a:80:fd:d2:
         d7:0b:fe:b7:43:f3:5b:40:d8:91:1b:87:fc:3d:97:17:9d:ab:
         03:5d:74:6e:4e:45:8a:99:30:e3:d2:ca:82:b7:94:ce:dd:e4:
         bb:d7:01:70:3e:cb:00:52:57:78:fe:25:bc:0f:9d:b7:a2:23:
         1d:a4:70:ee:75:b2:98:f7:08:bc:56:27:89:e8:ce:06:fc:e6:
         3c:d6:a5:55:06:0e:e3:88:47:20:aa:3d:9b:0c:73:b5:26:d6:
         3f:f2:55:ac:ed:a5:4f:bf:ae:c6:00:bf:52:52:01:8f:a0:eb:
         b1:91:4c:86:0d:c2:56:fb:cc:97:2d:6f:85:e8:e3:2f:3d:12:
         13:6b:b3:1e:ea:4d:bb:2e:81:bf:f8:c5:f4:4e:3a:fb:35:8f:
         b3:01:ab:1a:dc:c3:20:c6:0c:f6:cd:ff:d2:70:36:5c:04:00:
         0b:96:1f:aa:09:27:ec:ea:9f:56:f8:26:8c:02:ea:ca:34:a2:
         90:72:99:90
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBX8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTcwRjRBRjExMC8GA1UEBRMoQTk0MjNGQTRDMDAyNkQyRTREQTgyMTJEMTI4RDlE
MjcwN0U4MURDOTAeFw0yNTA0MjQwMjI3NDdaFw0yNTA0MjYwMjI3NDdaMBgxFjAU
BgNVBAMTDTY4MDlhMWE0LTU3ZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcCQIWP+acEWmkb4PbiyqI6EFBRX/zXY13Kg2HGWCT6SWdbLGZVbBMfVqu
UdnWk0GsKVGfJqCDj9rACqjiM/LmIA4m51FIaatQk+n2Hqh60RhryBHfwZmRjnc2
E5fhcF6x9cqQP22NdXu+fEMnmg5xcMKjnTNW/J5jujqWTrGzkbteb+QvIG9O/IL8
vrjVoZL/7AbDTO0anpzxFqmCcySw7peKl6/K9uokmCoQ53dO49oSpA5nS89vzgng
CQWBlYPAQmZVpM6NEUZqArKWZnkMxrc1pBuxdZSoOgVhp+3jmZg7OZfPlipqkacV
7x+FboxYVd4MExKu+LM9LsDjYoMpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU64fD
cDPfz173gxEtSxGoFcawrWcwHwYDVR0jBBgwFoAUqUI/pMACbS5NqCEtEo2dJwfo
HckwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU3MEY0LzY5NTY4NDE2RjA1OTExRUJBRjU2RjQzQkQ4QTAxNENFL3FVSV9w
TUFDYlM1TnFDRXRFbzJkSndmb0hjay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3FVSV9wTUFDYlM1TnFDRXRFbzJkSndmb0hjay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTcwRjQvNjk1Njg0MTZGMDU5MTFFQkFGNTZGNDNCRDhB
MDE0Q0UvcVVJX3BNQUNiUzVOcUNFdEVvMmRKd2ZvSGNrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCrwwOR6qdHM2bqFfDB9wHPUHj0o1YM
1WWK8yuWVykyoA8E7r9FKiKbxfPSgV+kVRb6IZhqQOc/UDk1YmUuO0xoR45Iq4qA
/dLXC/63Q/NbQNiRG4f8PZcXnasDXXRuTkWKmTDj0sqCt5TO3eS71wFwPssAUld4
/iW8D523oiMdpHDudbKY9wi8VieJ6M4G/OY81qVVBg7jiEcgqj2bDHO1JtY/8lWs
7aVPv67GAL9SUgGPoOuxkUyGDcJW+8yXLW+F6OMvPRITa7Me6k27LoG/+MX0Tjr7
NY+zAasa3MMgxgz2zf/ScDZcBAALlh+qCSfs6p9W+CaMAurKNKKQcpmQ
-----END CERTIFICATE-----
Generated at Thu Apr 24 04:38:34 2025 by rpki-client on console.sobornost.net