Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
File:                     _ESm2CkBQzmKHfvvhvwdrjRBoro.mft (raw, json)
Hash identifier:          MlGEAJZSAxncXsu2DjPzEqx/yN6WuaHQzsRqjjjgt50=
Subject key identifier:   9F:0A:0E:9B:9B:B8:88:3B:55:66:A6:B1:42:C4:39:B2:E7:2B:16:C4
Authority key identifier: FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
Certificate issuer:       /CN=F3636ECFAF/serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
Certificate serial:       83
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
Manifest number:          7F
Signing time:             Mon 03 Jun 2024 02:34:40 +0000
Manifest this update:     Mon 03 Jun 2024 02:34:39 +0000
Manifest next update:     Wed 05 Jun 2024 02:34:39 +0000
Files and hashes:         1: _ESm2CkBQzmKHfvvhvwdrjRBoro.crl (hash: Ja2J/JO5KfYjQzQoS8i/vCvUSVzX5kgqam/AXboPJEc=)
                          2: C60E9F12D17B11EE815AA4C5775412E6.roa (hash: 5YXTBSw7uzdx3vRUA+gQh5qR5NxHkOoXC7p9EbcWemI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636ECFAF/serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
        Validity
            Not Before: Jun  3 02:34:39 2024 GMT
            Not After : Jun  5 02:34:39 2024 GMT
        Subject: CN=665d2bc0-c0c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:66:93:ee:1b:98:ae:c1:e5:8c:58:5e:be:2f:
                    dc:63:6f:0f:4b:7f:dc:db:b5:05:c5:cf:52:aa:a5:
                    fd:9c:e3:9f:a3:b8:32:a5:a3:6c:46:a5:f7:17:da:
                    6b:23:93:a3:54:63:25:99:c6:38:d0:01:f2:ce:46:
                    9d:6a:da:10:72:cc:b5:d5:f4:d6:64:ae:0c:9b:7a:
                    ad:b1:69:1b:5a:57:1e:19:f9:e9:aa:04:07:e8:85:
                    96:c0:76:f1:b3:17:69:8e:99:7c:e2:81:94:23:95:
                    3d:82:49:ac:69:be:b5:31:5f:9e:59:8e:b6:8c:7f:
                    42:17:95:0c:06:80:68:5d:0c:f3:18:b4:5e:27:d8:
                    50:0e:c1:a9:e1:71:29:c2:88:16:f3:4a:40:bf:60:
                    53:73:50:1d:64:1b:c2:cf:ab:df:fa:93:ba:ca:8a:
                    a4:27:7b:9c:3c:c3:f4:a2:be:2a:7f:a6:6b:35:8b:
                    9c:0b:a9:74:d9:33:ac:65:49:6f:98:4c:d3:df:16:
                    41:0e:77:ac:36:c6:ab:2b:34:c4:72:7a:ae:15:c3:
                    79:6d:1b:94:b4:6f:02:1e:4f:54:ae:3c:ad:24:ba:
                    be:f5:7d:81:ed:a5:19:86:0f:09:c0:54:63:1f:b0:
                    8c:d8:41:7c:75:cf:98:aa:18:85:9c:64:cd:d8:c9:
                    2d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0A:0E:9B:9B:B8:88:3B:55:66:A6:B1:42:C4:39:B2:E7:2B:16:C4
            X509v3 Authority Key Identifier:
                keyid:FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:f9:ac:15:e3:57:f9:cc:5c:72:94:d7:3a:73:c9:6f:79:d0:
         8a:43:15:48:0b:e5:99:1d:97:8a:12:62:d0:f2:54:2a:ad:e1:
         ca:36:d8:35:27:5c:a3:05:90:c9:51:db:86:ac:c6:f6:dc:51:
         10:36:dc:5b:ec:76:85:81:b7:2d:ff:3e:6e:75:b8:ab:bc:b9:
         d6:96:a6:a3:cc:66:2e:86:f0:3b:76:21:ee:8e:2e:34:7b:d6:
         a7:f9:e9:39:13:cd:ea:43:73:34:80:20:df:a9:05:c9:8a:b8:
         2c:2f:0a:32:1b:26:0e:be:13:47:73:1a:26:2a:19:d4:d1:ad:
         d1:97:77:59:10:65:6e:db:d4:f5:b1:1e:75:4e:ec:49:08:eb:
         d7:eb:18:d7:ed:1e:27:55:88:8b:2e:59:81:1a:ba:44:65:b3:
         65:d1:d2:91:79:4e:66:1e:ad:c7:39:e1:b7:ca:5f:5e:3b:53:
         c9:bf:b0:a5:e7:7b:12:95:b8:02:9b:b9:11:89:c4:aa:77:05:
         d3:19:12:9f:23:3e:dd:ee:28:de:89:55:03:d8:de:f3:50:b1:
         8a:8e:7e:83:71:7f:d9:46:71:e7:f7:60:d7:06:7a:e0:86:c4:
         b7:01:c7:b3:92:c1:3c:d3:d7:14:d6:ce:29:55:f0:b6:cd:88:
         1c:b5:ea:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:06 2024 by rpki-client on console-ams.rpki-client.org