Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
File:                     LmD5YTFKp9b93e6durMSN0cF5ss.mft (raw, json)
Hash identifier:          OsHh/Mbx+g7eHOW52oFUuBJG9sRZo5mcUAXkUJUeTCk=
Subject key identifier:   9A:EE:24:B5:9E:C4:47:D9:9C:F9:BE:81:B2:7F:AC:1A:46:D9:9F:E0
Authority key identifier: 2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB
Certificate issuer:       /CN=F36FC8A0AF/serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
Certificate serial:       0260
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
Manifest number:          025F
Signing time:             Sun 27 Apr 2025 04:01:40 +0000
Manifest this update:     Sun 27 Apr 2025 04:01:39 +0000
Manifest next update:     Tue 29 Apr 2025 04:01:39 +0000
Files and hashes:         1: LmD5YTFKp9b93e6durMSN0cF5ss.crl (hash: tzaH2koN5S8tVLlLhO/vFlHXsZID/TsBAN/qGnnwKFY=)
                          2: 333100CC56E711EEB82D22544AD9E6FC.roa (hash: iWB0O9f+LLwbK/f70tuWF05AYGrsYH+zV7rCgvpguSc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Apr 2025 00:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC8A0AF, serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
        Validity
            Not Before: Apr 27 04:01:39 2025 GMT
            Not After : Apr 29 04:01:39 2025 GMT
        Subject: CN=680dac24-bdcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2a:40:77:0e:18:db:2e:6d:43:c6:47:72:37:
                    b9:58:b7:dc:8c:8c:a6:2d:18:5a:47:13:6a:ec:66:
                    b3:dc:8a:e9:7d:5b:45:d8:81:9d:fa:d0:5c:69:2a:
                    c7:98:bf:61:3a:9c:6b:47:69:ce:71:56:a1:78:c0:
                    1d:ea:4c:83:f3:bf:e4:9b:55:25:f0:f0:dc:69:11:
                    3b:52:5c:29:b8:6d:94:99:2c:30:d0:ff:af:48:c2:
                    5c:e0:3a:93:d3:0c:c6:22:3e:4e:e6:f4:4e:a7:a0:
                    56:be:aa:7f:7b:8c:39:30:57:81:f3:73:fd:6c:66:
                    2c:9e:b7:73:c8:fb:55:ab:76:90:15:87:24:ae:27:
                    51:d6:d1:fc:29:87:67:37:e7:4b:3c:6f:a5:68:43:
                    6c:fc:cf:e8:57:b7:05:41:a6:cc:7e:0f:e8:f2:76:
                    40:c1:a3:f0:64:3f:e4:a8:0b:ff:b7:26:2a:cc:f1:
                    c0:15:34:8c:4c:a0:4e:6e:98:ca:67:42:01:ea:fd:
                    d9:e2:ff:78:0c:56:21:12:5c:df:2d:4a:c3:cb:fa:
                    e1:0e:92:08:28:f0:70:4a:3c:48:75:78:17:0d:8e:
                    de:d6:37:a3:0f:09:88:e2:12:af:81:7e:a6:df:a9:
                    76:7a:59:53:9c:fb:39:ed:e3:9c:28:0a:1b:cd:b6:
                    f6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EE:24:B5:9E:C4:47:D9:9C:F9:BE:81:B2:7F:AC:1A:46:D9:9F:E0
            X509v3 Authority Key Identifier:
                keyid:2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:bd:6f:e6:03:a9:61:1f:d7:9b:8f:be:c0:bd:d1:5b:7b:81:
         e6:52:3e:ad:e1:49:8d:e1:a2:d1:4c:c1:2d:3a:3b:92:c9:9d:
         46:83:7f:f3:bf:6b:14:c9:68:2a:4c:92:1a:02:61:06:f8:12:
         51:e7:ac:ea:79:8c:ca:9a:26:3c:54:85:4b:25:c4:96:9b:33:
         20:1f:ae:d3:1d:53:ba:80:24:a9:ef:a7:92:2c:42:06:3c:4e:
         a3:d7:9e:67:d6:55:20:91:74:4b:70:91:15:6f:d8:90:11:cb:
         32:b3:14:54:61:84:98:e0:40:de:35:f0:56:a5:f6:d3:99:59:
         61:53:c6:14:73:a1:3f:47:9c:5d:96:d4:20:8c:b8:05:d8:da:
         e9:03:60:e1:e8:b6:f5:98:97:7b:65:a2:22:f2:b0:96:c3:75:
         2b:00:f4:30:9a:ff:93:bf:d1:8c:b2:0b:59:08:21:a6:40:47:
         41:2b:65:25:1b:15:88:cd:cf:3c:17:70:88:88:39:f5:f4:63:
         b1:91:5a:a0:c6:fc:ee:a0:26:0b:a7:6a:f6:a6:90:36:bf:49:
         cd:9a:3b:a7:e3:e5:b6:ff:b5:63:f0:2d:1f:a1:10:ba:2f:5c:
         2f:df:00:50:ef:07:42:6c:07:45:32:52:43:7c:0b:05:b5:56:
         ad:d2:6a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:07:40 2025 by rpki-client on console.sobornost.net