Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
File:                     6J7-NR5gJSomJW2N7o9p53JMrVo.mft (raw, json)
Hash identifier:          WVCfDXsXjLiVoeXqeGBAYnxsA2Ef65IkZMMyxnzElrw=
Subject key identifier:   B2:46:30:86:AC:14:E1:9D:F8:5C:B3:C4:B2:56:43:F3:BE:44:DD:78
Authority key identifier: E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A
Certificate issuer:       /CN=F3644FF0AF/serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
Certificate serial:       0211
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
Manifest number:          020B
Signing time:             Mon 03 Jun 2024 02:04:50 +0000
Manifest this update:     Mon 03 Jun 2024 02:04:49 +0000
Manifest next update:     Wed 05 Jun 2024 02:04:49 +0000
Files and hashes:         1: 6J7-NR5gJSomJW2N7o9p53JMrVo.crl (hash: sEmt3gf8BqzJA0nqeE3NmeTBg+RxfKBxuckfpBEFsF8=)
                          2: 8CBD7AB6CB7811EEB21DC966775412E6.roa (hash: 7LTqBOZdvx1x400JTuLrmGfbiQtHV4MfHLi7uJCZUpg=)
                          3: 21B47314CB7811EEBA542266775412E6.roa (hash: 0ojuwYcEOwgzKTIrlc1k6YRbS0hpoIl7oRt+4VpWBiY=)
                          4: D47EE42ACB7811EE8C9C3767775412E6.roa (hash: Dx5slGiNObgUVruc7hEebMCJv6ZcwSLJi+h5RAHJyoQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 529 (0x211)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644FF0AF/serialNumber=E89EFE351E60252A26256D8DEE8F69E7724CAD5A
        Validity
            Not Before: Jun  3 02:04:49 2024 GMT
            Not After : Jun  5 02:04:49 2024 GMT
        Subject: CN=665d24c1-d63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:29:0a:e9:ff:67:98:15:bd:68:10:70:72:88:
                    46:73:f5:52:d9:c7:e8:ce:91:c4:50:99:8b:98:2a:
                    43:78:cd:fd:f8:02:ce:6e:76:c3:e4:4f:c5:90:aa:
                    c9:f0:54:e0:4f:62:cc:53:24:c1:0a:f1:09:de:1f:
                    20:71:3d:dc:39:cb:53:d1:41:6d:13:56:fc:4c:8a:
                    cd:87:df:3c:4b:c9:d1:be:0d:93:4d:77:e7:94:90:
                    16:9e:54:ca:95:ba:c3:1b:cb:6c:88:ff:2a:c2:43:
                    f5:13:98:ca:e1:1e:6e:28:83:f2:c3:8f:92:f4:13:
                    6a:b2:fc:f1:63:0d:df:4e:30:48:cd:3f:bc:ad:43:
                    5c:2b:c9:7b:9a:6d:3e:dd:13:ae:e1:d6:d2:73:f5:
                    3b:35:bf:30:3c:fa:12:19:39:48:63:14:e9:39:36:
                    d0:6f:26:4f:be:b8:4b:ba:e6:57:0c:44:ea:aa:9f:
                    2b:cf:65:0a:d9:88:7a:b5:b9:35:4e:9e:4f:4a:13:
                    6f:1c:8b:82:e3:96:2f:d2:7e:a8:8f:6b:de:2d:35:
                    8c:9c:3e:3a:cb:36:3c:62:1d:70:03:11:d6:f3:63:
                    ba:83:f0:e1:3b:c9:32:70:f1:77:1a:71:c5:10:7c:
                    68:54:5e:5a:94:f1:10:fb:c1:d1:87:64:42:18:b7:
                    6e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:46:30:86:AC:14:E1:9D:F8:5C:B3:C4:B2:56:43:F3:BE:44:DD:78
            X509v3 Authority Key Identifier:
                keyid:E8:9E:FE:35:1E:60:25:2A:26:25:6D:8D:EE:8F:69:E7:72:4C:AD:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6J7-NR5gJSomJW2N7o9p53JMrVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FF0/745F62409B4511ED93C950AEF1222468/6J7-NR5gJSomJW2N7o9p53JMrVo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:9e:ad:2e:65:8a:c9:8a:ae:e9:da:11:b0:a1:38:93:b7:ba:
         8f:c0:fa:de:7f:d6:b7:2d:6f:a3:00:31:71:5d:6b:47:fa:6f:
         75:cb:5d:45:33:48:23:9d:a5:3b:8f:e0:e6:3e:b2:df:8b:17:
         10:04:f2:5d:f7:4d:3d:f8:63:aa:5b:b2:1a:6d:bc:46:14:9c:
         88:1c:f5:46:3c:c6:62:ba:34:42:b3:bc:fb:5a:fa:88:7d:71:
         13:da:b2:c0:95:90:6a:dd:de:9a:e8:fa:ed:ff:ff:88:e4:71:
         42:45:af:99:fd:fc:cc:6a:21:ba:c6:9b:f9:e4:c2:6b:04:51:
         08:62:e7:bd:ba:61:c8:90:98:55:3c:83:1c:96:54:23:fc:ef:
         fc:3e:6b:75:28:b3:4c:bc:99:16:3b:99:da:0c:2f:7d:9a:3e:
         8c:23:e2:98:fa:ba:bd:0c:08:7d:39:bc:02:fc:ab:c0:b7:4b:
         d3:f1:5a:dd:32:ae:12:32:2a:a7:d9:7a:26:f6:5f:2f:23:92:
         17:5a:28:d8:e2:b2:a3:40:9d:84:ff:eb:8f:b7:38:92:44:20:
         91:1c:66:9d:c1:51:d9:b5:57:b3:be:95:f8:e1:f1:a0:aa:d5:
         19:46:e3:a2:e1:f6:22:0f:90:0f:64:79:1f:63:6c:93:3e:f8:
         e7:b2:cf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:06 2024 by rpki-client on console-ams.rpki-client.org