Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
File:                     gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft (raw, json)
Hash identifier:          n/t0Of5rN8HlLGwBWY1KdX7Vh1gDwHTQVc9zbYwhzes=
Subject key identifier:   DA:69:28:8C:2A:00:89:0A:BC:AB:70:BB:84:45:B9:FC:2E:AD:F5:C1
Authority key identifier: 83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8
Certificate issuer:       /CN=F36ECAA2AF/serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
Certificate serial:       0354
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
Manifest number:          034F
Signing time:             Mon 28 Apr 2025 03:33:28 +0000
Manifest this update:     Mon 28 Apr 2025 03:33:28 +0000
Manifest next update:     Wed 30 Apr 2025 03:33:28 +0000
Files and hashes:         1: gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl (hash: GR9v7Q7nqIeYljd5WWO7mjVmTEZz7fhebA5YoFsKNGo=)
                          2: 98A7885C8DDF11EE856E001B4AD9E6FC.roa (hash: TrALYequ4gbamTwRj8gCMuUP9BJ+K7+H8Khcj3l43ng=)
                          3: AB725E028DE011EE9520701E4AD9E6FC.roa (hash: 7fwPCumSJFs34OrhghTo8l+HdWqKbq+1hmCpmK0WZcE=)
                          4: 22934508A60D11EDB81041C4F1222468.roa (hash: iIIKmZv0hW8wlHoV6xZsUe6KFdRjuYNOIqMfAgHd9Rk=)
                          5: 0845198C8DDF11EE841826194AD9E6FC.roa (hash: RjAkig7q9LVsQiCR96gKwlxjshut4m5EhwHTV6qeAo0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852 (0x354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ECAA2AF, serialNumber=833D4A24E39CDC942CBC5782541B81D4DD96AEA8
        Validity
            Not Before: Apr 28 03:33:28 2025 GMT
            Not After : Apr 30 03:33:28 2025 GMT
        Subject: CN=680ef708-7c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:df:23:62:7b:87:b1:18:c3:ff:ed:08:4e:b8:
                    c7:15:fe:53:5f:ca:f7:ba:ae:5e:7a:78:29:38:4d:
                    b1:43:9f:88:7c:25:16:35:5e:f5:96:2b:b2:32:f5:
                    2f:cb:aa:58:02:0f:bf:ee:e5:0b:a4:54:04:99:84:
                    a6:b5:30:2d:4b:e9:64:d6:27:b0:da:21:ae:8c:83:
                    08:7f:82:c0:e3:5f:c0:9d:a0:8c:e2:c7:a5:63:fe:
                    b8:7f:03:23:50:6c:e2:2b:74:5b:32:bd:47:0a:42:
                    0a:7d:1a:cc:fc:5c:62:eb:fb:99:c8:58:58:fd:ac:
                    ca:ae:e6:c0:40:00:d2:e6:15:b9:78:8c:a0:66:dd:
                    76:22:90:a0:f1:3b:76:7e:ca:31:4d:f0:3e:73:a2:
                    a6:b0:86:19:38:81:65:e7:28:b5:15:a2:e7:e8:a4:
                    6c:18:f0:a3:8e:2e:f5:68:38:c2:98:03:a7:c3:da:
                    e1:61:28:cc:6f:fd:e7:df:9b:5e:02:b4:74:69:5b:
                    22:25:9f:84:31:88:6d:5c:de:94:64:1a:26:6e:8f:
                    22:c2:94:a8:c2:3e:7a:92:c7:d8:0a:ee:00:cd:27:
                    80:23:e3:96:3e:9c:46:55:87:5d:da:52:06:06:6e:
                    ff:b8:20:66:2f:2a:c9:9d:f1:49:cb:5e:aa:78:fb:
                    9a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:69:28:8C:2A:00:89:0A:BC:AB:70:BB:84:45:B9:FC:2E:AD:F5:C1
            X509v3 Authority Key Identifier:
                keyid:83:3D:4A:24:E3:9C:DC:94:2C:BC:57:82:54:1B:81:D4:DD:96:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/53AE1EDCA60911ED9422C1B9F1222468/gz1KJOOc3JQsvFeCVBuB1N2Wrqg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:39:ab:83:f6:3a:0b:9e:db:55:42:ad:cd:27:20:7d:0d:94:
         e1:25:6e:1e:64:88:e9:68:52:5d:50:f9:1b:f1:3c:d2:21:6b:
         d5:f2:51:6b:ec:1b:c9:90:69:ce:16:4c:3d:8c:ce:05:34:b2:
         06:ae:f1:b7:1e:ef:2e:c3:a3:63:06:24:dc:7f:1b:79:43:d3:
         d4:ba:56:ee:29:85:09:f9:a2:21:57:a9:ca:7e:03:a5:97:cb:
         bf:2d:ab:dd:37:3e:3b:4e:5b:27:24:40:62:4d:15:b5:f8:17:
         59:d7:ab:0f:6a:b8:98:77:74:be:9a:44:af:56:77:03:bc:cf:
         31:c1:32:b4:cf:81:39:42:54:c1:68:e7:6f:a5:c1:b7:f4:80:
         8e:a5:17:e9:c4:6a:85:3f:dd:df:e0:b9:e0:bf:7e:02:3a:fb:
         7f:a4:68:4a:a2:2e:b0:e2:c3:20:ad:2c:d3:5f:73:b9:f2:39:
         b4:94:72:28:d8:78:e1:54:61:56:a9:ff:e4:54:c2:8a:29:bd:
         28:65:62:25:5c:6b:84:4d:b0:4e:04:96:d2:53:9f:d6:fd:04:
         18:48:c5:a5:49:6b:38:7d:1c:f9:09:a8:fe:25:76:d4:2e:8c:
         d5:3a:0b:2f:84:af:f3:78:b1:a2:10:5f:1e:2f:33:c3:ec:c8:
         77:16:af:d1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA1QwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUNBQTJBRjExMC8GA1UEBRMoODMzRDRBMjRFMzlDREM5NDJDQkM1NzgyNTQxQjgx
RDRERDk2QUVBODAeFw0yNTA0MjgwMzMzMjhaFw0yNTA0MzAwMzMzMjhaMBgxFjAU
BgNVBAMTDTY4MGVmNzA4LTdjMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDO3yNie4exGMP/7QhOuMcV/lNfyve6rl56eCk4TbFDn4h8JRY1XvWWK7Iy
9S/LqlgCD7/u5QukVASZhKa1MC1L6WTWJ7DaIa6Mgwh/gsDjX8CdoIzix6Vj/rh/
AyNQbOIrdFsyvUcKQgp9Gsz8XGLr+5nIWFj9rMqu5sBAANLmFbl4jKBm3XYikKDx
O3Z+yjFN8D5zoqawhhk4gWXnKLUVoufopGwY8KOOLvVoOMKYA6fD2uFhKMxv/eff
m14CtHRpWyIln4QxiG1c3pRkGiZujyLClKjCPnqSx9gK7gDNJ4Aj45Y+nEZVh13a
UgYGbv+4IGYvKsmd8UnLXqp4+5qdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU2mko
jCoAiQq8q3C7hEW5/C6t9cEwHwYDVR0jBBgwFoAUgz1KJOOc3JQsvFeCVBuB1N2W
rqgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVDQUEyLzUzQUUxRURDQTYwOTExRUQ5NDIyQzFCOUYxMjIyNDY4L2d6MUtK
T09jM0pRc3ZGZUNWQnVCMU4yV3JxZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2d6MUtKT09jM0pRc3ZGZUNWQnVCMU4yV3JxZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RUNBQTIvNTNBRTFFRENBNjA5MTFFRDk0MjJDMUI5RjEy
MjI0NjgvZ3oxS0pPT2MzSlFzdkZlQ1ZCdUIxTjJXcnFnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCgOauD9joLnttVQq3NJyB9DZThJW4e
ZIjpaFJdUPkb8TzSIWvV8lFr7BvJkGnOFkw9jM4FNLIGrvG3Hu8uw6NjBiTcfxt5
Q9PUulbuKYUJ+aIhV6nKfgOll8u/LavdNz47TlsnJEBiTRW1+BdZ16sPariYd3S+
mkSvVncDvM8xwTK0z4E5QlTBaOdvpcG39ICOpRfpxGqFP93f4Lngv34COvt/pGhK
oi6w4sMgrSzTX3O58jm0lHIo2HjhVGFWqf/kVMKKKb0oZWIlXGuETbBOBJbSU5/W
/QQYSMWlSWs4fRz5Caj+JXbULozVOgsvhK/zeLGiEF8eLzPD7Mh3Fq/R
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:06:38 2025 by rpki-client on console.sobornost.net