Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED057/3455862086BD11E98D8DE82EF8AEA228/RL5M5X4RXgvLNOa56wxXI669InQ.mft
File:                     RL5M5X4RXgvLNOa56wxXI669InQ.mft (raw, json)
Hash identifier:          KHEbCHep46ZVQ5+NjBeoPy3jTPVr476UnNzAu0X8Wqw=
Subject key identifier:   45:08:ED:60:41:6F:E4:AE:D2:63:D0:D2:6E:6F:D2:C4:0B:08:5D:D6
Authority key identifier: 44:BE:4C:E5:7E:11:5E:0B:CB:34:E6:B9:EB:0C:57:23:AE:BD:22:74
Certificate issuer:       /CN=F36ED057AF/serialNumber=44BE4CE57E115E0BCB34E6B9EB0C5723AEBD2274
Certificate serial:       08A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RL5M5X4RXgvLNOa56wxXI669InQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED057/3455862086BD11E98D8DE82EF8AEA228/RL5M5X4RXgvLNOa56wxXI669InQ.mft
Manifest number:          08A7
Signing time:             Sun 27 Apr 2025 01:29:22 +0000
Manifest this update:     Sun 27 Apr 2025 01:29:21 +0000
Manifest next update:     Tue 29 Apr 2025 01:29:21 +0000
Files and hashes:         1: RL5M5X4RXgvLNOa56wxXI669InQ.crl (hash: 4Ur4IxWix2olFxnM9chQa6ikt96hXWiaaoYdrMcXNzI=)
                          2: C96F4D9CC3F211ED8B3F1BD0F1222468.roa (hash: o7cW1+3HMZb5Mpe6+lzxsb3ID9BGRwC3rWFdxd+zpDk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED057/3455862086BD11E98D8DE82EF8AEA228/RL5M5X4RXgvLNOa56wxXI669InQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED057/3455862086BD11E98D8DE82EF8AEA228/RL5M5X4RXgvLNOa56wxXI669InQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RL5M5X4RXgvLNOa56wxXI669InQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2217 (0x8a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED057AF, serialNumber=44BE4CE57E115E0BCB34E6B9EB0C5723AEBD2274
        Validity
            Not Before: Apr 27 01:29:21 2025 GMT
            Not After : Apr 29 01:29:21 2025 GMT
        Subject: CN=680d8872-8542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:54:53:0a:27:17:5f:f5:61:9b:0e:1c:cf:
                    e6:31:68:de:c8:73:46:81:f8:cb:16:af:cd:8c:42:
                    32:1c:cc:8b:ee:e8:33:d9:d9:9f:4a:3d:e4:f5:d8:
                    f2:18:18:fe:56:bf:c6:e7:24:43:be:3f:b8:ad:7a:
                    df:c8:8b:18:32:14:4e:05:9e:19:2f:e4:a6:0b:fa:
                    50:be:a5:a0:06:90:fc:5d:57:f1:11:80:d3:08:2e:
                    27:9e:81:b0:aa:09:f3:77:99:8b:14:c6:f3:6e:d7:
                    f5:91:3e:b4:65:7f:c7:f6:33:25:d9:bd:b4:97:fe:
                    e6:ab:88:17:e2:d5:70:75:40:3a:4e:2f:99:e3:01:
                    45:3d:3c:5b:d1:d9:b5:e9:cd:04:01:86:34:ef:c1:
                    6d:ab:6a:ea:d8:c0:9a:5d:9c:a7:48:96:36:f3:7d:
                    71:c9:82:57:1d:f8:96:96:73:09:3b:37:33:de:7c:
                    17:b2:75:a0:0d:e1:5e:b1:e4:e7:14:32:46:27:1a:
                    ae:8e:48:24:a1:c6:5a:00:fc:e1:c9:4a:34:b2:9f:
                    00:e1:bc:f2:0d:e5:f9:a6:d2:37:d4:f6:cf:a0:70:
                    25:47:92:a8:d6:7f:a2:a5:90:80:81:6f:59:fd:9b:
                    96:83:14:ac:2b:e6:3b:95:e1:57:b1:d9:37:d7:e5:
                    77:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:08:ED:60:41:6F:E4:AE:D2:63:D0:D2:6E:6F:D2:C4:0B:08:5D:D6
            X509v3 Authority Key Identifier:
                keyid:44:BE:4C:E5:7E:11:5E:0B:CB:34:E6:B9:EB:0C:57:23:AE:BD:22:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED057/3455862086BD11E98D8DE82EF8AEA228/RL5M5X4RXgvLNOa56wxXI669InQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RL5M5X4RXgvLNOa56wxXI669InQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED057/3455862086BD11E98D8DE82EF8AEA228/RL5M5X4RXgvLNOa56wxXI669InQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d1:9e:aa:44:94:6f:17:0d:63:cb:cb:f7:53:69:3c:6a:78:
         99:f7:42:34:21:17:d7:19:8a:66:11:a5:14:b0:f9:a6:93:5d:
         1c:24:07:14:4f:69:61:b8:28:63:07:cb:b1:85:e7:e3:91:5e:
         df:c9:2c:04:51:81:47:f6:93:43:22:49:fd:0b:07:7e:d7:80:
         69:41:65:02:cf:c4:1f:56:eb:f9:17:42:fa:6a:63:aa:b1:04:
         26:32:00:74:5d:ef:d6:2a:82:34:45:8e:42:b4:be:b4:f1:c4:
         74:91:af:25:b4:64:a1:08:7b:f2:f6:58:be:aa:27:9c:ab:de:
         93:f0:bb:1f:8f:92:71:d8:d1:fa:76:2f:eb:2a:5d:7e:24:5b:
         37:fe:85:86:08:98:03:83:dc:1a:e0:fd:9e:9c:7f:ce:3b:fc:
         ac:1f:12:9c:35:78:b1:30:67:62:12:92:35:28:ab:81:7c:1d:
         19:33:9a:f7:fa:f6:f9:0b:5c:1d:e3:b3:97:0b:bb:9c:ca:cb:
         dc:fd:ac:f4:e9:5f:1d:4e:f8:20:6c:1c:b9:2f:58:71:78:a9:
         a3:68:8a:ff:f2:f3:8e:c6:2c:f4:27:75:35:da:d7:35:fe:27:
         37:c5:5d:39:aa:14:c9:dc:9d:5f:b5:b8:e7:42:88:59:29:08:
         56:79:71:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:57 2025 by rpki-client on console.sobornost.net