Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
File:                     9quAr34JmFsP46OzgjMPLIk1jNg.mft (raw, json)
Hash identifier:          irfX1fIYrBO/5awn2Sx3WZ5ohr48rJZHE4kjw4+cyho=
Subject key identifier:   B6:BF:CE:C5:72:0A:65:63:0F:AC:2F:50:9E:E4:F7:7C:49:6D:8B:DA
Authority key identifier: F6:AB:80:AF:7E:09:98:5B:0F:E3:A3:B3:82:33:0F:2C:89:35:8C:D8
Certificate issuer:       /CN=F36F5D39AF/serialNumber=F6AB80AF7E09985B0FE3A3B382330F2C89358CD8
Certificate serial:       0221
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9quAr34JmFsP46OzgjMPLIk1jNg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
Manifest number:          0221
Signing time:             Fri 25 Apr 2025 04:07:21 +0000
Manifest this update:     Fri 25 Apr 2025 04:07:20 +0000
Manifest next update:     Sun 27 Apr 2025 04:07:20 +0000
Files and hashes:         1: 9quAr34JmFsP46OzgjMPLIk1jNg.crl (hash: hdpIeNHJGkbqQhp341krgw4C80Q8C2M3rNAoQAZNEpM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9quAr34JmFsP46OzgjMPLIk1jNg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Apr 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F5D39AF, serialNumber=F6AB80AF7E09985B0FE3A3B382330F2C89358CD8
        Validity
            Not Before: Apr 25 04:07:20 2025 GMT
            Not After : Apr 27 04:07:20 2025 GMT
        Subject: CN=680b0a79-ce52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:93:fd:13:54:f3:cb:7d:9b:f8:d3:7a:c1:cb:
                    37:b3:29:a9:60:4a:66:0a:72:33:6d:c9:ca:e9:7c:
                    c5:74:28:04:da:a0:9e:50:0b:94:2b:c7:74:46:4a:
                    0b:3f:c9:5e:52:12:17:b6:c4:61:70:2f:56:08:aa:
                    31:22:d5:cf:fc:01:46:72:1e:b8:9c:f0:7f:ce:1b:
                    a7:75:2a:6e:3a:81:4c:2c:43:f0:f4:dd:2a:ff:ea:
                    f6:a6:ea:39:08:ed:d9:8c:c8:25:16:d5:ca:96:4e:
                    73:8b:e2:57:a1:7f:93:cf:e4:7f:5a:98:96:97:69:
                    15:57:b3:5e:0a:31:41:11:c1:2b:c2:de:6f:70:c8:
                    0e:a4:d8:36:85:ba:f4:f7:ef:a4:c7:6f:7a:a3:f6:
                    b7:00:92:9d:a6:9a:cc:02:22:e8:43:16:6f:c1:54:
                    51:eb:b3:d1:5c:27:e3:02:e1:b1:e4:2d:93:26:33:
                    a9:d7:a2:65:f5:24:a4:fc:c0:6f:7a:6f:78:08:fb:
                    a7:6a:49:8c:84:7e:35:dc:96:23:55:81:d6:f8:d1:
                    5e:43:3f:bb:20:ec:67:3d:d6:7b:c4:2d:63:10:7c:
                    ad:87:38:bb:29:52:29:9f:49:dc:c6:c5:65:f9:2f:
                    90:63:e0:99:2b:5e:36:7a:ae:cb:92:7c:d6:fb:87:
                    b7:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BF:CE:C5:72:0A:65:63:0F:AC:2F:50:9E:E4:F7:7C:49:6D:8B:DA
            X509v3 Authority Key Identifier:
                keyid:F6:AB:80:AF:7E:09:98:5B:0F:E3:A3:B3:82:33:0F:2C:89:35:8C:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9quAr34JmFsP46OzgjMPLIk1jNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/2624B8A482E011EEB87E50264AD9E6FC/9quAr34JmFsP46OzgjMPLIk1jNg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:8e:04:09:0d:b9:4d:1c:3a:8a:32:bb:48:91:fe:1b:e1:d6:
         2d:ee:3f:4d:0a:ab:7a:6e:87:b3:7f:69:cb:34:c1:45:9d:93:
         67:c7:3d:0e:c7:c1:03:08:14:18:6e:bc:c4:a0:97:ca:44:c9:
         c5:1f:02:c9:1e:3b:48:37:89:fb:5d:d6:e0:aa:cf:ab:be:55:
         4f:3e:96:f9:95:a5:bc:eb:ca:66:7c:f3:b5:d6:a7:85:fe:2c:
         d0:55:5d:02:62:df:51:f9:7c:ef:21:0c:6a:d6:40:ff:33:66:
         68:9c:e6:07:45:bd:2c:0b:ea:96:e8:71:b7:69:3c:ee:4b:8f:
         fc:d3:27:5f:ae:d2:57:5f:04:c5:bc:10:78:2d:3b:6b:c4:6e:
         53:1d:b8:b0:bd:3a:da:c0:95:ba:6a:2c:d0:9c:46:b5:91:7b:
         d3:78:40:3e:67:fc:c1:39:56:2b:3f:95:6f:1d:dd:4d:01:7b:
         a3:b8:6d:f1:e8:24:6f:fb:c1:ca:e0:e4:43:1b:ca:b6:cb:d3:
         aa:19:86:3c:54:50:20:a5:f4:a2:7d:a5:f5:b6:c4:64:88:14:
         30:41:a7:1b:a7:f1:03:29:c4:7a:0f:55:79:38:e8:9d:af:20:
         cf:70:13:a3:6f:79:67:3c:d7:22:d4:d1:13:a0:24:ba:9b:88:
         14:43:f8:e6
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAiEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjVEMzlBRjExMC8GA1UEBRMoRjZBQjgwQUY3RTA5OTg1QjBGRTNBM0IzODIzMzBG
MkM4OTM1OENEODAeFw0yNTA0MjUwNDA3MjBaFw0yNTA0MjcwNDA3MjBaMBgxFjAU
BgNVBAMTDTY4MGIwYTc5LWNlNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBk/0TVPPLfZv403rByzezKalgSmYKcjNtycrpfMV0KATaoJ5QC5Qrx3RG
Sgs/yV5SEhe2xGFwL1YIqjEi1c/8AUZyHric8H/OG6d1Km46gUwsQ/D03Sr/6vam
6jkI7dmMyCUW1cqWTnOL4lehf5PP5H9amJaXaRVXs14KMUERwSvC3m9wyA6k2DaF
uvT376THb3qj9rcAkp2mmswCIuhDFm/BVFHrs9FcJ+MC4bHkLZMmM6nXomX1JKT8
wG96b3gI+6dqSYyEfjXcliNVgdb40V5DP7sg7Gc91nvELWMQfK2HOLspUimfSdzG
xWX5L5Bj4JkrXjZ6rsuSfNb7h7dFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUtr/O
xXIKZWMPrC9QnuT3fElti9owHwYDVR0jBBgwFoAU9quAr34JmFsP46OzgjMPLIk1
jNgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkY1RDM5LzI2MjRCOEE0ODJFMDExRUVCODdFNTAyNjRBRDlFNkZDLzlxdUFy
MzRKbUZzUDQ2T3pnak1QTElrMWpOZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzlxdUFyMzRKbUZzUDQ2T3pnak1QTElrMWpOZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjVEMzkvMjYyNEI4QTQ4MkUwMTFFRUI4N0U1MDI2NEFE
OUU2RkMvOXF1QXIzNEptRnNQNDZPemdqTVBMSWsxak5nLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAZjgQJDblNHDqKMrtIkf4b4dYt7j9N
Cqt6boezf2nLNMFFnZNnxz0Ox8EDCBQYbrzEoJfKRMnFHwLJHjtIN4n7Xdbgqs+r
vlVPPpb5laW868pmfPO11qeF/izQVV0CYt9R+XzvIQxq1kD/M2ZonOYHRb0sC+qW
6HG3aTzuS4/80ydfrtJXXwTFvBB4LTtrxG5THbiwvTrawJW6aizQnEa1kXvTeEA+
Z/zBOVYrP5VvHd1NAXujuG3x6CRv+8HK4ORDG8q2y9OqGYY8VFAgpfSifaX1tsRk
iBQwQacbp/EDKcR6D1V5OOidryDPcBOjb3lnPNci1NEToCS6m4gUQ/jm
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:20 2025 by rpki-client on console.sobornost.net