Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
File:                     poVzBBtD85x4jvNbdksxjIhJyf4.mft (raw, json)
Hash identifier:          NiEhkG3umq0PLphiBxljX4XCvVvtSepsXNjMsn8WF0Y=
Subject key identifier:   5B:05:75:A3:2C:90:FB:20:F0:69:A5:6B:0C:FB:DB:F9:DC:CB:0F:F1
Authority key identifier: A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE
Certificate issuer:       /CN=F3632159AF/serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
Certificate serial:       026F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
Manifest number:          026F
Signing time:             Mon 03 Jun 2024 01:59:39 +0000
Manifest this update:     Mon 03 Jun 2024 01:59:38 +0000
Manifest next update:     Wed 05 Jun 2024 01:59:38 +0000
Files and hashes:         1: poVzBBtD85x4jvNbdksxjIhJyf4.crl (hash: TicWaLNaymiaO8Yo/lQGCEzZM8lDUeo1NpOKDVxgu7U=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 623 (0x26f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632159AF/serialNumber=A68573041B43F39C788EF35B764B318C8849C9FE
        Validity
            Not Before: Jun  3 01:59:38 2024 GMT
            Not After : Jun  5 01:59:38 2024 GMT
        Subject: CN=665d238b-04dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:68:f9:08:56:ee:d1:b6:11:79:2b:e8:65:99:
                    52:d3:ac:e1:df:16:0b:f7:78:8e:bb:d0:c6:a6:e3:
                    c0:2f:a8:bb:80:ea:77:06:cf:4a:5f:40:17:8b:5f:
                    3f:1f:78:a5:bb:8b:7a:a4:ff:e7:a0:d9:17:b0:48:
                    4b:d2:96:61:37:fb:9c:d3:df:f0:33:7e:84:8c:79:
                    bb:26:8e:e2:e5:d5:ac:fd:c7:61:44:b2:76:5c:85:
                    43:f6:f5:4b:b8:0c:32:6b:96:00:9f:c3:5a:cf:bf:
                    0f:c9:42:0e:23:6e:e6:9a:8d:94:98:7a:25:4c:30:
                    96:4a:23:d4:0d:0a:ee:a1:5b:13:04:12:6b:82:68:
                    1a:6f:8d:1b:0a:84:c2:b9:24:79:16:a2:67:57:fc:
                    21:1b:3c:b7:14:79:c7:77:7b:cd:f6:2f:a5:5d:7a:
                    45:53:ec:0e:e4:4e:c2:b2:c8:e1:cc:9b:90:1b:bf:
                    ea:13:b4:f4:a0:05:50:a7:c2:5d:ee:c4:ca:ae:a1:
                    3d:ea:91:17:a3:43:50:de:13:40:b3:c6:1d:04:0f:
                    3f:ea:28:f7:a0:46:e6:d4:b9:a5:e4:51:3f:80:88:
                    b6:41:dc:96:70:42:54:72:9a:61:c1:bb:ce:1c:f7:
                    de:e6:47:3c:69:ab:cc:04:77:89:8d:5f:b0:7e:15:
                    91:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:05:75:A3:2C:90:FB:20:F0:69:A5:6B:0C:FB:DB:F9:DC:CB:0F:F1
            X509v3 Authority Key Identifier:
                keyid:A6:85:73:04:1B:43:F3:9C:78:8E:F3:5B:76:4B:31:8C:88:49:C9:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/poVzBBtD85x4jvNbdksxjIhJyf4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/A24C983C4ABC11EDA0F57084F1222468/poVzBBtD85x4jvNbdksxjIhJyf4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:16:bc:8b:02:e2:7b:59:7c:8e:01:e1:68:4b:12:70:4f:44:
         70:f2:96:26:24:78:fa:f0:7c:f5:96:a3:ce:79:9a:f5:5a:1d:
         87:7a:d7:b1:d5:82:f9:4b:40:3b:c1:e8:f8:d9:13:37:6c:02:
         af:b7:12:5c:b3:e5:4a:d2:2c:02:1c:32:da:e5:6d:d5:c5:df:
         f6:97:02:eb:ff:71:f6:29:b0:13:39:8f:0c:49:b2:bf:89:c0:
         84:41:5f:22:98:3b:75:80:70:9e:ff:7d:45:bb:fa:7d:33:91:
         e2:a1:31:c1:ea:32:e2:5c:16:24:2d:df:c3:f5:18:6e:e9:b1:
         6e:29:51:d6:33:7e:91:5c:f4:f7:a7:dd:98:a5:48:47:7d:fd:
         e9:0c:8f:d0:f5:cb:38:84:f6:45:ad:09:32:ba:bb:f5:ad:b6:
         cd:b7:71:b1:e0:9f:e3:9e:f8:76:c6:ca:6d:d4:f6:58:f4:b6:
         27:45:07:70:24:b5:96:4c:de:cd:b4:5a:04:53:59:82:04:4a:
         93:ad:c8:49:58:1d:de:9d:d2:b6:81:99:63:6f:35:55:e7:3e:
         82:4f:ac:49:da:4c:f0:4b:43:20:32:6c:2d:fe:72:66:6b:f7:
         66:12:40:77:8f:92:20:e9:5d:67:c1:de:7d:a3:e1:40:61:55:
         ca:ab:43:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:05 2024 by rpki-client on console-ams.rpki-client.org