Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
File:                     mpAdFskLYBlnVD3tV83q800LJz4.mft (raw, json)
Hash identifier:          NGxkahmTtelhcLORZaBDL9VsPdId3/3dnumhT4fFcL4=
Subject key identifier:   20:5E:2C:F7:AA:3D:F5:48:2B:EC:A0:08:01:17:D7:ED:3D:4B:D7:AA
Authority key identifier: 9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E
Certificate issuer:       /CN=F36ED442AR/serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
Certificate serial:       0E05
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
Manifest number:          0E05
Signing time:             Mon 28 Apr 2025 00:57:59 +0000
Manifest this update:     Mon 28 Apr 2025 00:57:58 +0000
Manifest next update:     Wed 30 Apr 2025 00:57:58 +0000
Files and hashes:         1: mpAdFskLYBlnVD3tV83q800LJz4.crl (hash: VbMpFbid/EhuYfupL8Es2CEnZKUk7S+Sb4xMG31vq2c=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                          rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3589 (0xe05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED442AR, serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
        Validity
            Not Before: Apr 28 00:57:58 2025 GMT
            Not After : Apr 30 00:57:58 2025 GMT
        Subject: CN=680ed297-fa7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:84:49:30:54:0b:f3:ed:ef:7b:7e:94:67:ac:
                    ac:d1:61:99:6d:3d:bf:28:aa:8e:2b:e3:4d:86:dd:
                    61:12:72:af:2e:44:45:f0:79:39:9c:ef:7e:d8:c2:
                    e7:7b:1c:18:cb:b5:2f:d2:b7:5e:fd:c4:e8:4d:b1:
                    6a:16:ab:ed:83:71:f1:91:0b:cd:d1:c4:3b:29:a8:
                    97:fb:7b:81:1d:98:4c:d9:7e:f1:f7:1c:0b:71:2d:
                    b3:0c:bb:0e:bd:59:bb:3a:0a:8a:cf:be:c6:a9:a3:
                    17:a3:cf:17:8f:c5:4a:ec:b4:4e:4a:1d:b8:45:77:
                    5d:79:b6:5f:00:37:df:d2:ea:19:9d:d0:f0:a5:bc:
                    35:a7:e3:ce:11:6d:74:0f:87:5c:d9:93:02:b6:de:
                    24:5b:29:3f:cb:66:d3:c7:c3:d2:bc:81:72:89:cc:
                    b4:3a:8e:a3:b1:02:21:1d:87:9b:55:a5:af:d0:39:
                    9b:c3:eb:70:63:3d:e3:94:b7:57:0d:f2:f1:4c:0c:
                    df:66:44:48:1c:bc:15:e7:61:82:11:f8:b2:a2:ee:
                    d3:5b:4f:c6:5b:93:61:7d:59:bd:ff:1b:a7:8b:6d:
                    48:4c:9e:ff:5a:88:1e:77:22:9d:8a:94:60:0a:46:
                    97:0c:2a:43:8b:cf:bf:60:3f:92:54:4b:60:dd:5a:
                    e0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5E:2C:F7:AA:3D:F5:48:2B:EC:A0:08:01:17:D7:ED:3D:4B:D7:AA
            X509v3 Authority Key Identifier:
                keyid:9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:a2:30:86:8a:c3:94:e7:b2:36:e4:d6:4b:30:7c:0a:64:6b:
         54:c3:22:81:4f:54:ab:de:e6:c0:9a:2e:47:48:9c:4c:20:43:
         20:5f:a7:80:c1:e7:b0:c0:3a:88:0d:ed:14:ba:c6:4f:97:b5:
         29:a1:68:ee:37:33:16:90:68:8a:18:65:58:7d:7d:8e:fb:ca:
         cf:e0:d4:fb:e9:e6:66:b6:3e:77:2e:8f:c8:5d:0b:9c:03:69:
         94:4a:cf:ce:f7:48:dd:93:b8:6b:48:15:50:5e:97:f3:02:4e:
         c6:dc:58:ea:cc:5b:4b:60:a6:ef:f0:fd:b5:bb:03:ec:ac:c8:
         f5:c9:b5:c6:8f:34:5f:45:16:dd:cb:f2:3c:44:1d:32:3f:d6:
         25:48:b6:2d:b6:2b:a2:34:78:d7:0b:da:6a:71:b6:1d:b2:06:
         f6:b2:65:34:40:b9:d0:26:98:37:be:90:df:0f:6f:13:59:8a:
         4a:4e:b9:99:57:05:7a:ed:09:65:d7:04:90:9e:b2:bf:a8:8f:
         16:6e:0d:a8:fc:a0:36:f1:54:0c:93:70:98:10:76:ed:ac:7f:
         36:e4:8f:d6:88:f6:a9:f3:e4:1b:24:28:b3:f9:32:d7:45:51:
         08:7d:bb:a5:96:3b:0a:8c:31:a4:3b:6f:1c:a1:96:cd:e9:06:
         ab:8b:51:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:06:38 2025 by rpki-client on console.sobornost.net