Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
File:                     C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft (raw, json)
Hash identifier:          TBwhqmQaB6tR13isPJJRiGvYVL+l3o7sRIjkQ1OQpxA=
Subject key identifier:   30:26:BD:FC:57:07:92:9C:22:8F:36:04:26:10:C1:CF:F6:7A:E7:90
Authority key identifier: 0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F
Certificate issuer:       /CN=F3645501AF/serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
Certificate serial:       0600
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
Manifest number:          05FC
Signing time:             Mon 03 Jun 2024 01:11:52 +0000
Manifest this update:     Mon 03 Jun 2024 01:11:52 +0000
Manifest next update:     Wed 05 Jun 2024 01:11:52 +0000
Files and hashes:         1: C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl (hash: WKMi85ZW/kvLchKFYm1LwAzicasgxydhgpFfmiDU2lM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1536 (0x600)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645501AF/serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
        Validity
            Not Before: Jun  3 01:11:52 2024 GMT
            Not After : Jun  5 01:11:52 2024 GMT
        Subject: CN=665d1858-74bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d1:61:a3:78:db:5b:42:fc:6e:67:5b:28:b4:
                    08:ce:05:7b:04:c0:1e:8c:6d:aa:4f:a1:e8:0b:72:
                    c2:26:2d:f8:b5:74:36:3d:95:23:cd:c1:6f:ff:b2:
                    38:16:84:18:cb:b2:03:df:d9:e2:85:76:4a:3b:88:
                    da:92:53:15:04:52:17:0a:3e:7a:78:8b:ba:e1:f7:
                    81:e3:d1:31:f2:86:29:56:5c:4f:f3:3e:d1:9f:6f:
                    57:09:dd:f6:b1:ed:69:97:b7:8d:19:0a:43:12:3b:
                    b5:3a:fe:b2:60:23:fa:0e:c6:81:ce:55:46:22:0d:
                    c9:b6:c2:a3:26:c1:31:4f:ab:88:f8:7c:4c:ff:46:
                    15:c6:4f:82:70:5e:4a:a3:27:63:f0:18:40:1e:d6:
                    4e:1e:bf:ba:da:51:96:3a:73:23:4e:58:80:dd:8e:
                    e6:80:7a:51:3c:07:d2:d6:5a:ad:0c:53:82:86:e6:
                    b6:38:f8:10:46:f6:b2:4e:36:26:99:65:7f:a3:72:
                    10:95:9f:7f:05:e2:ff:77:0b:fa:20:f5:28:fb:d7:
                    23:a0:2a:fe:05:4c:79:c6:eb:fb:ab:a6:d1:ad:53:
                    f3:8f:6a:13:db:32:cc:6d:0a:d6:0c:17:94:a4:36:
                    6f:48:36:25:ee:67:39:c0:41:a3:01:b3:ed:88:6e:
                    d6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:26:BD:FC:57:07:92:9C:22:8F:36:04:26:10:C1:CF:F6:7A:E7:90
            X509v3 Authority Key Identifier:
                keyid:0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:34:b4:9e:3e:b9:ff:41:1b:80:d2:33:70:00:b7:f1:b0:d8:
         23:b5:ef:cf:5b:34:4f:62:3f:ce:0a:be:09:a1:6a:dc:92:dc:
         09:5a:45:52:e5:e3:ac:74:c2:a4:a9:11:f4:2e:89:27:1e:70:
         5e:97:33:5c:f4:d3:2c:2a:b0:d6:d7:0f:7f:44:29:c3:ba:5b:
         82:31:0d:6a:d9:10:fa:ac:f5:14:92:c4:b3:18:56:66:1e:26:
         be:c8:8c:b1:97:62:87:db:05:de:1d:c9:6a:b2:39:3f:86:03:
         53:d1:f0:e3:6e:5e:83:cb:94:46:d6:ae:a4:b5:bf:6a:32:09:
         85:6e:15:3a:a7:05:12:e4:b8:ad:ce:4a:a4:92:30:18:04:22:
         1a:fc:98:56:18:f1:75:39:ca:7d:53:70:7d:19:b4:81:23:0c:
         d4:30:0f:f1:97:e8:32:54:26:6b:ef:b2:52:fe:7b:6a:17:94:
         8b:89:53:f2:5b:b4:2c:69:ab:0e:95:c6:a5:b6:d3:aa:e6:72:
         d4:ce:2a:a0:d5:9c:c4:d0:80:12:d8:69:d7:65:58:e6:c8:1a:
         d2:ba:24:c9:2c:22:d9:e4:e9:fe:aa:04:05:a4:19:0e:c0:63:
         bd:2d:25:93:7b:d5:91:17:de:24:5c:1d:d3:f4:78:20:a9:f7:
         46:a1:ba:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 02:23:11 2024 by rpki-client on console-fra.rpki-client.org