Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
File:                     MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft (raw, json)
Hash identifier:          BE4ouCfhwAgmmtcspAzQQ3VB9WdeJjzdQ1WN/rBX+NQ=
Subject key identifier:   12:CD:7D:DC:42:B0:D0:CF:8F:66:E9:29:51:60:D6:48:D8:D0:11:66
Authority key identifier: 31:FC:D3:92:FE:8E:BD:57:E1:25:38:DC:60:A8:05:9F:FA:39:A0:3A
Certificate issuer:       /CN=F36EC727AF/serialNumber=31FCD392FE8EBD57E12538DC60A8059FFA39A03A
Certificate serial:       F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
Manifest number:          F2
Signing time:             Fri 25 Apr 2025 04:50:14 +0000
Manifest this update:     Fri 25 Apr 2025 04:50:14 +0000
Manifest next update:     Sun 27 Apr 2025 04:50:14 +0000
Files and hashes:         1: MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl (hash: ixrTWTwBchWeR3ykGMxAzP/nCjuc80sLObnAfVlfLNQ=)
                          2: 26FC764A6FAC11EF8469D197762E951A.roa (hash: 2TO/cGj7sHRkn2ixg6Y+5Mtfx/C/Oewdnp7crBfamHM=)
                          3: B25B5AD66FAB11EF87286395762E951A.roa (hash: vwW65Nr7lh1XhWegso15AlnrJBnrQ6EFgBiPcl1lNqQ=)
                          4: D16713486FAB11EFBBD4B095762E951A.roa (hash: 8SVqRCmZw8s4aV8wC2vczr/9L/GkHhk4+czM91U/KkQ=)
                          5: ED98BED66FAB11EF9A20B695762E951A.roa (hash: q5xaFzCvVq0NWEpLqV6QDT0xbz7mypl+IUxKYjoGCf4=)
                          6: 099CAAA26FAC11EF9F68F695762E951A.roa (hash: zHFgniH7TocXhiVpBcZaQImwKvniIQ9de2Qqx9HFC+c=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 247 (0xf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC727AF, serialNumber=31FCD392FE8EBD57E12538DC60A8059FFA39A03A
        Validity
            Not Before: Apr 25 04:50:14 2025 GMT
            Not After : Apr 27 04:50:14 2025 GMT
        Subject: CN=680b1486-7606
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d8:22:44:2f:4b:d7:d4:6f:4e:5f:71:6b:9d:
                    d0:cf:6c:6b:dd:3f:28:cb:29:23:fd:9d:f7:50:82:
                    02:f9:56:9d:f0:73:6d:4a:23:28:f2:c0:57:3f:25:
                    b6:f3:cd:3f:2d:b8:ce:34:10:d1:ff:29:86:b2:85:
                    27:91:6b:1b:1c:54:c0:4b:3d:dc:ce:5f:88:a4:c9:
                    d9:94:19:cb:16:22:27:bb:9c:6b:85:c1:45:28:1a:
                    0c:bb:22:78:3e:f7:53:15:fb:0e:9d:83:68:0e:ab:
                    b6:e2:e0:b4:a9:f9:11:49:0c:8e:5a:1f:f8:7f:fb:
                    a8:0e:c7:8d:f3:81:14:3e:4b:9d:d8:c7:3e:23:51:
                    aa:82:ae:7a:d4:1b:76:c1:70:1c:bb:11:8f:14:43:
                    84:80:7a:2b:71:27:3e:22:59:5c:7c:e5:74:46:33:
                    86:19:23:0b:c7:8b:1c:72:74:73:ad:ee:b6:02:c7:
                    40:c8:7f:22:f8:81:29:23:15:d2:9c:b1:e5:1d:09:
                    15:3b:69:f6:66:e4:0b:5b:12:3a:15:59:1b:3e:37:
                    4a:ea:25:5b:21:c8:4a:96:ed:f4:52:03:f4:1f:d5:
                    ba:8e:39:ea:10:c1:64:85:41:90:c1:90:1d:da:e3:
                    b2:30:76:b2:8f:ad:ce:51:d9:41:05:5e:65:2e:d6:
                    5a:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CD:7D:DC:42:B0:D0:CF:8F:66:E9:29:51:60:D6:48:D8:D0:11:66
            X509v3 Authority Key Identifier:
                keyid:31:FC:D3:92:FE:8E:BD:57:E1:25:38:DC:60:A8:05:9F:FA:39:A0:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MfzTkv6OvVfhJTjcYKgFn_o5oDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC727/278945E46FAB11EFB4297291762E951A/MfzTkv6OvVfhJTjcYKgFn_o5oDo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:3a:1f:b8:c3:f6:85:e9:0b:0c:f6:f8:59:df:71:8c:e5:ac:
         ba:8b:b6:85:f8:94:53:0e:b3:dd:b0:70:22:4b:ad:d9:c4:0c:
         a9:5a:27:47:77:ee:31:39:ab:b8:01:ed:89:22:8d:c9:46:0b:
         d0:47:b9:7a:07:04:07:8a:52:f8:58:d4:26:ef:e7:9a:86:96:
         1f:90:81:86:42:d4:63:bf:01:b4:7b:0a:e9:d1:90:0b:3d:e2:
         25:3b:c3:1f:75:f4:dc:53:9f:28:fa:4d:67:97:72:ee:77:e4:
         e1:ad:a5:59:be:13:e8:00:38:f4:57:b3:2f:f9:72:fa:4c:8c:
         0a:29:bb:2b:16:04:23:81:f2:25:42:68:9f:52:a7:9d:15:71:
         9d:b2:0b:3f:88:6b:e5:7a:7d:7e:ef:21:91:35:a0:87:cb:6b:
         ec:52:f2:1c:a2:40:01:16:3c:09:e4:b3:00:41:03:36:82:67:
         e9:af:b9:48:35:7e:ca:d8:68:8a:8c:ff:1c:3b:fc:50:94:0c:
         37:60:0b:30:01:d2:44:43:02:98:15:88:dd:30:2f:df:77:a8:
         c2:38:1b:18:7a:4d:49:51:7a:f9:2b:96:de:d2:f8:b9:d9:63:
         34:d6:31:d0:7e:6b:36:9c:73:b5:9a:5c:2b:e2:c5:0c:a8:2a:
         17:2c:cd:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:23:29 2025 by rpki-client on console.sobornost.net