Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
File:                     b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft (raw, json)
Hash identifier:          2oKSBWG0MxMtwvR1GO4Vi0RWTs9W1J5txWI53QFOOA8=
Subject key identifier:   7B:1C:3D:FB:B7:C4:63:F2:7B:C8:0A:AA:4C:BE:E8:4B:98:59:63:39
Authority key identifier: 6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66
Certificate issuer:       /CN=F36E94D7AF/serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
Certificate serial:       045F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
Manifest number:          045C
Signing time:             Fri 25 Apr 2025 02:54:19 +0000
Manifest this update:     Fri 25 Apr 2025 02:54:18 +0000
Manifest next update:     Sun 27 Apr 2025 02:54:18 +0000
Files and hashes:         1: b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl (hash: W/PkzyF9EexJTLPNUhm2Hm3Ipz45zA/c/aGiBgTvwzI=)
                          2: B1A16132D28A11EC8F270DC0F1222468.roa (hash: 4TQRBmeOxAbF3KLeP0SF+V9s9RzwKR9Ie0C7o3vk0Oo=)
                          3: E3D5D52AD28A11ECB4D0B0C0F1222468.roa (hash: MgA7cMYgIRFHAgD+dSaQaOo5eOVm+neEzUW6GLOT448=)
                          4: 784AE4BCD28A11EC81ED62BFF1222468.roa (hash: CkuoR2/+F6JKHq8BKZH5DTfRvZh+LqHD0UlmcfmPCMw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1119 (0x45f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E94D7AF, serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
        Validity
            Not Before: Apr 25 02:54:18 2025 GMT
            Not After : Apr 27 02:54:18 2025 GMT
        Subject: CN=680af95b-0174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:79:d3:c6:22:58:eb:2d:71:e0:68:b6:bb:dd:
                    cf:00:74:87:38:7b:1c:11:37:38:03:3b:9e:1e:83:
                    24:00:b7:f3:76:22:d0:69:f1:39:d6:b1:5a:dc:21:
                    ba:73:09:9d:6b:60:7d:f6:86:d8:61:35:b0:72:e9:
                    e7:fa:d9:31:ea:23:84:2c:7a:21:b4:d4:95:a9:99:
                    00:2b:4a:83:1b:ae:6c:12:9f:87:4a:5f:01:8b:96:
                    fc:2c:80:76:39:26:66:00:c5:31:93:f7:84:a2:51:
                    1e:1f:6c:77:c1:67:36:c1:1d:91:11:38:0d:5a:a0:
                    cf:4c:f4:7f:37:71:f0:c9:4d:da:63:a0:cc:5d:98:
                    9c:58:d1:be:60:92:a1:5f:25:4d:f6:ca:7a:61:20:
                    de:39:56:69:fb:09:fd:db:0c:a3:47:23:ee:37:4c:
                    23:b6:bc:dc:ab:8b:ba:77:b3:d4:74:5c:64:55:23:
                    1b:01:18:77:c0:5d:3a:ad:96:31:c8:fe:c5:b1:a7:
                    f0:bd:8d:56:52:63:48:48:ae:aa:eb:61:ab:0e:81:
                    4b:1b:5d:42:87:50:e5:b4:e0:78:0b:c8:e6:89:50:
                    2e:ef:24:7a:c6:cb:22:1f:ce:bb:4b:69:bb:40:fb:
                    6f:58:e1:dd:47:90:fc:94:51:19:c5:4a:e1:32:fe:
                    b0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1C:3D:FB:B7:C4:63:F2:7B:C8:0A:AA:4C:BE:E8:4B:98:59:63:39
            X509v3 Authority Key Identifier:
                keyid:6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:5f:6c:76:97:dd:f7:25:51:18:94:e8:40:da:2e:02:70:ef:
         6c:2c:dd:d8:cf:ee:d8:f6:e2:ca:2d:fc:28:de:48:73:fe:80:
         1c:02:6b:2f:ab:c3:87:ad:04:da:d8:7f:c7:a6:07:c8:98:6d:
         ff:3f:59:e4:1c:5a:f5:57:dc:4f:46:d9:a0:83:f5:d0:60:bc:
         30:6d:8a:fe:e0:22:31:79:0f:a7:57:cd:2c:21:e5:7d:54:06:
         94:21:ce:4e:4b:e0:72:01:40:ca:03:fb:a3:87:7f:c4:c5:57:
         8d:9c:39:5a:d6:52:cd:c7:4c:c3:6b:77:23:73:3c:fc:d8:4b:
         c7:ac:1f:d4:8b:db:64:c4:4e:71:b0:9f:08:68:5d:a0:86:df:
         00:4f:a8:17:83:e2:1b:03:6d:01:36:8a:54:3b:8d:0b:7a:c5:
         ee:1d:84:a8:c6:cb:29:da:68:08:72:f2:80:19:30:66:5f:12:
         65:3c:66:a5:54:03:e5:ca:b4:51:62:17:42:bf:c7:f7:96:9b:
         1a:de:4f:d0:48:60:7d:4f:4d:06:1f:ff:f6:8e:b6:25:b4:fd:
         87:74:75:0c:48:b0:bc:e0:c7:01:7a:54:4f:fb:bb:96:15:19:
         f9:ea:51:4c:bf:f9:5e:8a:14:33:93:24:21:d3:75:da:f9:ee:
         42:c1:3d:6a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBF8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTk0RDdBRjExMC8GA1UEBRMoNkY4MEMwQTE5MDc2ODBEOTc5MDBERjQ1MUNENTU0
RDdGQURCQ0M2NjAeFw0yNTA0MjUwMjU0MThaFw0yNTA0MjcwMjU0MThaMBgxFjAU
BgNVBAMTDTY4MGFmOTViLTAxNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDuedPGIljrLXHgaLa73c8AdIc4exwRNzgDO54egyQAt/N2ItBp8TnWsVrc
IbpzCZ1rYH32hthhNbBy6ef62THqI4QseiG01JWpmQArSoMbrmwSn4dKXwGLlvws
gHY5JmYAxTGT94SiUR4fbHfBZzbBHZEROA1aoM9M9H83cfDJTdpjoMxdmJxY0b5g
kqFfJU32ynphIN45Vmn7Cf3bDKNHI+43TCO2vNyri7p3s9R0XGRVIxsBGHfAXTqt
ljHI/sWxp/C9jVZSY0hIrqrrYasOgUsbXUKHUOW04HgLyOaJUC7vJHrGyyIfzrtL
abtA+29Y4d1HkPyUURnFSuEy/rD5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUexw9
+7fEY/J7yAqqTL7oS5hZYzkwHwYDVR0jBBgwFoAUb4DAoZB2gNl5AN9FHNVU1/rb
zGYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU5NEQ3LzQyRDQyNzA4RDI4NTExRUM5MkVEOTdBRkYxMjIyNDY4L2I0REFv
WkIyZ05sNUFOOUZITlZVMV9yYnpHWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2I0REFvWkIyZ05sNUFOOUZITlZVMV9yYnpHWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTk0RDcvNDJENDI3MDhEMjg1MTFFQzkyRUQ5N0FGRjEy
MjI0NjgvYjREQW9aQjJnTmw1QU45RkhOVlUxX3JiekdZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQClX2x2l933JVEYlOhA2i4CcO9sLN3Y
z+7Y9uLKLfwo3khz/oAcAmsvq8OHrQTa2H/HpgfImG3/P1nkHFr1V9xPRtmgg/XQ
YLwwbYr+4CIxeQ+nV80sIeV9VAaUIc5OS+ByAUDKA/ujh3/ExVeNnDla1lLNx0zD
a3cjczz82EvHrB/Ui9tkxE5xsJ8IaF2ght8AT6gXg+IbA20BNopUO40LesXuHYSo
xssp2mgIcvKAGTBmXxJlPGalVAPlyrRRYhdCv8f3lpsa3k/QSGB9T00GH//2jrYl
tP2HdHUMSLC84McBelRP+7uWFRn56lFMv/leihQzkyQh03Xa+e5CwT1q
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:19 2025 by rpki-client on console.sobornost.net