Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
File:                     8ZI823Vz-wlzku4GArwdsbV78OM.mft (raw, json)
Hash identifier:          r4S5Z+2m/BVXrKGY57rhoc6rxNoBOATTxYK30mcdLMs=
Subject key identifier:   47:68:0D:B6:1B:A4:61:B3:8E:84:8D:31:3D:28:6D:CA:93:8C:48:6A
Authority key identifier: F1:92:3C:DB:75:73:FB:09:73:92:EE:06:02:BC:1D:B1:B5:7B:F0:E3
Certificate issuer:       /CN=F36F731FRI/serialNumber=F1923CDB7573FB097392EE0602BC1DB1B57BF0E3
Certificate serial:       0287
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
Manifest number:          0287
Signing time:             Mon 28 Apr 2025 04:01:13 +0000
Manifest this update:     Mon 28 Apr 2025 04:01:12 +0000
Manifest next update:     Wed 30 Apr 2025 04:01:12 +0000
Files and hashes:         1: 8ZI823Vz-wlzku4GArwdsbV78OM.crl (hash: dBMurglfaZ+PMxut8F1CtIPbGYz5us1Ti+h0jn6+s50=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
                          rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:45:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FRI, serialNumber=F1923CDB7573FB097392EE0602BC1DB1B57BF0E3
        Validity
            Not Before: Apr 28 04:01:12 2025 GMT
            Not After : Apr 30 04:01:12 2025 GMT
        Subject: CN=680efd89-7673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:93:ca:5c:05:e0:c0:55:d7:18:13:0e:16:d2:
                    6b:c7:ca:db:d2:28:7b:52:20:70:cc:d7:be:00:1f:
                    3f:ac:fc:51:1f:db:69:23:4a:de:6f:b6:71:5d:ce:
                    63:80:dc:7b:0e:9d:0b:d2:42:5f:89:12:92:00:cc:
                    36:7f:dd:a0:b3:95:b4:05:27:c8:75:41:df:d3:1a:
                    19:f3:3a:8d:97:24:3b:b5:b0:06:9c:4d:df:37:fd:
                    72:cd:ee:80:2a:5b:47:3e:98:41:64:48:b8:c3:b8:
                    cf:eb:8e:b9:3d:5e:b6:8b:d7:1f:e9:7a:4d:6c:e1:
                    d8:2c:3c:d2:cc:ad:a9:77:1d:98:90:4e:a3:fa:6c:
                    21:af:16:87:3b:c8:de:97:3d:ca:76:72:4c:d4:26:
                    8c:7b:01:4f:0c:3c:82:fb:4a:fa:1e:5b:b8:68:a4:
                    83:2c:ed:4d:87:0d:6a:5c:b5:43:e7:98:a8:11:af:
                    ef:91:f3:97:d8:eb:1b:53:1f:ae:71:4b:c0:d9:d1:
                    1f:b3:9f:35:be:37:85:c7:a9:42:30:b2:24:5a:53:
                    dc:62:73:aa:f2:23:6a:f7:6c:c1:c4:a8:f2:c1:1e:
                    df:ec:b5:aa:e4:f7:75:9d:38:cb:27:70:cd:f2:a9:
                    61:0e:f0:f9:96:87:ee:eb:dc:61:8d:50:b4:56:86:
                    ee:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:68:0D:B6:1B:A4:61:B3:8E:84:8D:31:3D:28:6D:CA:93:8C:48:6A
            X509v3 Authority Key Identifier:
                keyid:F1:92:3C:DB:75:73:FB:09:73:92:EE:06:02:BC:1D:B1:B5:7B:F0:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8ZI823Vz-wlzku4GArwdsbV78OM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/B1CAE0D4379711EE8ED7D9314AD9E6FC/8ZI823Vz-wlzku4GArwdsbV78OM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:93:be:b4:87:57:b9:e8:82:67:92:f9:ee:c2:9e:a4:ee:e8:
         42:90:b8:f9:fc:8f:7b:f3:bb:2c:a3:99:7f:98:e0:66:2e:ed:
         56:af:40:5e:2d:18:2d:64:ce:9f:f3:01:53:6f:6a:7f:63:4b:
         b4:ed:fd:01:59:64:ee:a2:25:d7:cb:22:ce:72:be:dd:19:28:
         d1:e7:ba:a5:19:a6:61:d1:34:1b:9a:24:2e:19:4b:83:43:c1:
         24:3b:39:a0:3d:c1:1d:d4:a5:44:e9:a9:2c:b1:2f:f3:00:ae:
         f1:86:71:15:78:e4:f1:b1:31:92:b2:2d:9e:7b:9c:80:41:ec:
         b3:7f:c0:f0:b7:18:6d:4d:3d:a7:06:4a:d9:f8:63:3a:ec:67:
         89:98:42:29:21:46:33:d9:f1:c7:87:d5:96:dc:c6:55:61:e3:
         1c:f8:1a:ea:ad:df:17:6c:e6:76:67:6a:a6:55:e8:91:d8:0c:
         d1:ef:ba:67:2e:3b:52:c0:f9:d2:46:1e:f2:e2:a1:21:51:c8:
         48:ea:5b:91:5e:5e:a8:2b:3b:38:76:1d:db:1c:7b:dc:8a:ab:
         bf:63:36:45:a2:ac:40:de:a9:2f:77:a0:2c:08:ea:89:55:85:
         e6:1f:8e:fc:cc:de:63:2c:d8:ab:3b:d1:8e:97:10:37:42:f7:
         a7:9d:03:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:06:40 2025 by rpki-client on console.sobornost.net