Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
File:                     NSunHRHXakg8nsebSWRvi0XYOLo.mft (raw, json)
Hash identifier:          wK0nM5h7Dxubg4W2vM49xe9GL7CCprypV5DcFVFIytU=
Subject key identifier:   D7:68:EE:AF:62:9B:12:0A:28:00:11:61:9C:91:E8:9E:05:78:B7:58
Authority key identifier: 35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
Certificate issuer:       /CN=F3633396AF/serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Certificate serial:       0413
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
Manifest number:          0412
Signing time:             Mon 03 Jun 2024 01:32:49 +0000
Manifest this update:     Mon 03 Jun 2024 01:32:49 +0000
Manifest next update:     Wed 05 Jun 2024 01:32:49 +0000
Files and hashes:         1: NSunHRHXakg8nsebSWRvi0XYOLo.crl (hash: xmzunpEp200R5IuOylvZPWUtYFeVSZ7sng9dsUPVVnc=)
                          2: 19B37868088911ECBD02C81ED8A014CE.roa (hash: ftsx6sqCnGy9hfgGucWr2xatiRuWyYW7ArMelWiLknk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1043 (0x413)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3633396AF/serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
        Validity
            Not Before: Jun  3 01:32:49 2024 GMT
            Not After : Jun  5 01:32:49 2024 GMT
        Subject: CN=665d1d41-8378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:aa:63:59:89:7e:84:4e:c7:89:d7:ba:70:28:
                    0e:62:df:4b:d1:a3:bc:08:7f:7c:17:fe:a7:79:a9:
                    b8:99:2c:91:c1:32:5b:15:8b:95:e4:23:4e:f5:15:
                    fb:c7:a2:9a:37:a2:b5:48:69:11:ec:02:ef:d5:9d:
                    6c:f8:30:a6:71:8c:19:05:e4:0d:c1:ea:f3:b5:3e:
                    f4:08:ab:43:28:70:4c:15:24:4b:40:fe:32:16:46:
                    05:04:fb:1e:2e:db:fa:86:9c:d8:05:36:c4:ea:d3:
                    17:a5:f5:67:c1:bd:ad:6a:d0:8e:7b:ad:0d:6c:71:
                    30:bd:1c:e5:07:42:a0:68:9b:5c:ef:1d:45:e3:a3:
                    eb:ff:f8:81:42:91:b8:19:7c:26:47:09:6d:bc:18:
                    52:1a:37:07:23:7c:aa:81:bd:78:d5:b2:bd:6d:3a:
                    b8:66:00:bc:e7:18:4a:fa:6b:4b:72:a7:26:cd:e1:
                    9a:cb:b5:c0:42:d6:8c:dd:d7:da:ff:19:30:18:a7:
                    be:08:99:eb:0c:0c:c7:ec:56:99:bc:71:1c:a8:e9:
                    98:b1:ba:39:e6:42:de:b0:97:ef:f0:99:c4:c9:34:
                    b4:c9:88:be:1a:52:04:37:a9:09:93:4e:85:30:05:
                    9b:4d:3d:31:91:d2:c8:22:58:80:94:68:eb:85:a0:
                    5c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:68:EE:AF:62:9B:12:0A:28:00:11:61:9C:91:E8:9E:05:78:B7:58
            X509v3 Authority Key Identifier:
                keyid:35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:0d:61:14:08:28:e2:4d:29:8b:34:38:db:83:2f:2b:4b:9c:
         14:71:c0:23:00:04:4d:cb:0b:c5:07:63:4b:8b:38:39:55:51:
         9e:bb:a9:82:27:de:e6:a8:87:7e:00:ca:7b:c0:f7:cf:9c:fc:
         22:7b:36:4c:cf:bd:50:78:0d:60:71:12:e8:79:13:4e:4a:be:
         36:31:8d:6a:14:59:93:27:09:f9:79:77:39:57:e0:49:0b:17:
         bf:66:2b:c4:83:a3:9a:61:98:74:69:0f:06:67:42:e8:c2:e0:
         63:cf:e3:07:61:8b:29:f5:7a:2e:07:6e:d3:ac:9d:23:b6:86:
         0d:1b:bf:ea:09:26:e1:d7:e0:b6:60:64:9c:ef:f0:a7:7f:4b:
         1d:84:b0:7f:eb:a5:51:14:4c:99:70:2d:a3:2c:42:42:a7:34:
         2d:8c:25:0d:60:40:27:96:4d:2f:39:b5:a9:5e:37:61:29:95:
         c9:a3:d3:05:7c:31:9e:d7:4b:ee:2c:6b:d8:fc:66:73:aa:3e:
         25:eb:0b:0b:58:c6:59:34:f8:30:cf:3c:27:2c:11:c2:e5:17:
         09:e4:f5:dd:e2:cc:43:c1:aa:b1:66:f2:91:8f:c7:b8:00:3b:
         f7:cc:bc:6d:b9:41:9b:42:48:12:94:bf:b2:fb:d5:e6:ad:3b:
         75:43:4a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:05 2024 by rpki-client on console-ams.rpki-client.org