Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.mft
File:                     eAFgO7LzcEbg-v3Xp0_LBuPECBg.mft (raw, json)
Hash identifier:          3Hi2sydc0BoGvdSQBO2zEybzeo16lEX3LHKHi75znP8=
Subject key identifier:   59:D8:4B:7A:27:E1:20:11:52:C0:5D:73:A2:E9:59:C2:69:3E:E8:ED
Authority key identifier: 78:01:60:3B:B2:F3:70:46:E0:FA:FD:D7:A7:4F:CB:06:E3:C4:08:18
Certificate issuer:       /CN=F3614ABBAF/serialNumber=7801603BB2F37046E0FAFDD7A74FCB06E3C40818
Certificate serial:       0221
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.mft
Manifest number:          021C
Signing time:             Mon 03 Jun 2024 02:02:47 +0000
Manifest this update:     Mon 03 Jun 2024 02:02:47 +0000
Manifest next update:     Wed 05 Jun 2024 02:02:47 +0000
Files and hashes:         1: eAFgO7LzcEbg-v3Xp0_LBuPECBg.crl (hash: TxukMbpAoSfpyLCRQ0ms1RPRbMmDo8QTZFUJBjMypvc=)
                          2: C1DD39CACFBF11EEA8FB4574775412E6.roa (hash: Q5pUSksntCvIgKgWSWWYT5WZcxdon8uSCDfTyZBPILk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614ABBAF/serialNumber=7801603BB2F37046E0FAFDD7A74FCB06E3C40818
        Validity
            Not Before: Jun  3 02:02:47 2024 GMT
            Not After : Jun  5 02:02:47 2024 GMT
        Subject: CN=665d2447-ae4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f9:bf:36:8d:fb:89:c7:a4:cf:04:86:1e:24:
                    61:19:a5:a3:6b:4a:4c:78:1f:d6:62:79:aa:78:65:
                    71:36:fb:ff:45:26:c3:fd:09:d6:32:a7:8c:db:34:
                    20:c8:2e:d5:cb:10:ca:71:41:e3:f3:18:ff:b3:3c:
                    14:cc:26:c0:7a:16:86:8b:5b:c9:4a:91:cc:4e:6e:
                    60:50:ce:ab:41:ca:cb:7d:fe:c7:d3:52:55:17:57:
                    09:b9:5f:9a:d8:f3:dd:ee:71:c1:4a:55:a4:36:bb:
                    2f:d4:68:df:8b:b7:92:43:90:26:0c:18:b8:64:2e:
                    d6:dd:72:78:cb:a1:d2:92:42:00:36:8a:4d:a3:e2:
                    14:7a:4e:01:c0:e7:47:14:5c:c8:b6:71:60:a8:ff:
                    ab:53:df:98:d1:24:68:9d:c6:54:8c:92:6e:21:03:
                    e2:75:a6:f4:e3:82:a1:7f:e2:fc:cf:00:91:d0:a8:
                    fa:15:4b:53:dc:bf:db:8c:65:ec:87:c0:34:22:ec:
                    94:e7:58:cb:0a:e7:e9:ee:3f:0f:ff:ba:f6:44:7f:
                    67:04:14:4f:22:88:76:f1:85:ce:ad:b9:40:67:92:
                    bb:8d:cb:d8:17:da:eb:d6:0c:90:99:b9:ae:77:42:
                    62:62:4e:e1:64:ca:57:ea:10:2f:3e:b0:f8:48:ba:
                    0d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D8:4B:7A:27:E1:20:11:52:C0:5D:73:A2:E9:59:C2:69:3E:E8:ED
            X509v3 Authority Key Identifier:
                keyid:78:01:60:3B:B2:F3:70:46:E0:FA:FD:D7:A7:4F:CB:06:E3:C4:08:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eAFgO7LzcEbg-v3Xp0_LBuPECBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614ABB/A6BA4A94900911ED93517389F1222468/eAFgO7LzcEbg-v3Xp0_LBuPECBg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f8:fc:f9:61:0c:07:51:bd:9c:43:63:a1:32:d2:13:d6:6f:
         e9:04:f5:5d:a0:db:4e:ad:0d:35:94:d7:87:8e:59:f7:28:4b:
         7b:7a:ae:fb:e2:a4:51:6a:6b:74:8f:bc:6a:dc:85:fa:2e:3b:
         45:aa:1b:ca:54:af:b2:11:e3:a5:8e:c4:2d:c8:fd:aa:62:bb:
         92:b5:fc:a0:a1:20:26:a1:1a:d8:97:b8:f0:ec:a6:22:40:54:
         3b:d3:4b:8a:f8:d2:2e:a7:ce:c6:5f:3d:2c:b6:c4:82:d2:f0:
         31:34:00:6e:5c:39:ae:80:8b:d9:36:4e:59:4b:87:87:18:5e:
         c9:e6:64:a4:9c:ec:06:fc:ea:df:e6:4d:3e:6e:c7:c0:37:89:
         5c:6c:9a:df:35:f2:c9:0a:15:9b:f7:f4:0a:39:8a:d0:bb:bf:
         17:bc:ef:7b:64:51:5d:1e:08:9e:00:27:42:a8:43:6a:98:9f:
         ea:5a:66:62:cb:2b:29:72:01:bc:de:55:46:2b:33:df:24:5d:
         29:10:09:12:4a:bf:06:15:fd:a8:ac:a1:ae:bf:6f:5b:40:27:
         e3:af:58:ad:a2:6f:73:cb:a0:b2:48:66:46:77:be:5f:18:fb:
         9e:ca:88:b8:85:ee:b6:f5:b8:0a:45:92:d4:41:33:4a:9d:6f:
         c5:aa:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:04 2024 by rpki-client on console-ams.rpki-client.org