Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36479AF/5CFEC160C4C811E9B4DD3D1AF8AEA228/B7rWF3RYtkhAnQf1mpkQpdNAPQw.mft
File:                     B7rWF3RYtkhAnQf1mpkQpdNAPQw.mft (raw, json)
Hash identifier:          75Yd6bx14bpOlaaiw4qLu63oxosSl+zaWxz8ZRaXLJs=
Subject key identifier:   8F:B2:37:55:2D:22:4F:F3:C5:36:1E:AA:E1:6E:3A:03:96:11:23:C4
Authority key identifier: 07:BA:D6:17:74:58:B6:48:40:9D:07:F5:9A:99:10:A5:D3:40:3D:0C
Certificate issuer:       /CN=F36479AFAF/serialNumber=07BAD6177458B648409D07F59A9910A5D3403D0C
Certificate serial:       0709
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B7rWF3RYtkhAnQf1mpkQpdNAPQw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36479AF/5CFEC160C4C811E9B4DD3D1AF8AEA228/B7rWF3RYtkhAnQf1mpkQpdNAPQw.mft
Manifest number:          0705
Signing time:             Mon 03 Jun 2024 01:02:18 +0000
Manifest this update:     Mon 03 Jun 2024 01:02:18 +0000
Manifest next update:     Wed 05 Jun 2024 01:02:18 +0000
Files and hashes:         1: B7rWF3RYtkhAnQf1mpkQpdNAPQw.crl (hash: wgD5YZyqatlyC/SEIF0BTIZYI+MJ31bbk+opFsR0Z04=)
                          2: 7812D96CBE8F11EEB3FB0491775412E6.roa (hash: FPHVgrbfsrOt+ow0TZ6G1tCosW0HnXgVaFwFojSrRkk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36479AF/5CFEC160C4C811E9B4DD3D1AF8AEA228/B7rWF3RYtkhAnQf1mpkQpdNAPQw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36479AF/5CFEC160C4C811E9B4DD3D1AF8AEA228/B7rWF3RYtkhAnQf1mpkQpdNAPQw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B7rWF3RYtkhAnQf1mpkQpdNAPQw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1801 (0x709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36479AFAF/serialNumber=07BAD6177458B648409D07F59A9910A5D3403D0C
        Validity
            Not Before: Jun  3 01:02:18 2024 GMT
            Not After : Jun  5 01:02:18 2024 GMT
        Subject: CN=665d161a-bea6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:10:a4:4a:39:c1:53:0b:dc:69:41:47:8d:14:
                    69:18:d4:6b:78:2f:22:1b:cf:ec:4b:bb:30:39:ab:
                    18:83:f6:89:a5:8f:68:61:19:a9:5e:79:81:18:84:
                    91:b8:71:83:73:0d:d8:ab:93:2e:f1:6c:87:b6:9c:
                    75:f6:b7:01:b9:ab:77:ac:95:28:c8:c5:26:c0:dd:
                    3b:84:80:4c:0e:2f:8d:f3:68:45:2d:46:a0:8a:87:
                    06:cc:75:d6:6c:2d:e2:be:1d:52:d7:c8:84:16:a3:
                    3a:cb:c3:4f:fa:4f:96:44:d5:75:c6:2a:bc:07:aa:
                    22:bf:b3:f6:db:14:ea:bc:a1:1f:ca:5c:df:a8:bb:
                    76:43:2d:b6:a8:eb:d1:b2:f0:fa:7a:33:80:87:d3:
                    7e:45:01:6b:30:ae:9b:a0:5f:ab:1f:41:77:18:b0:
                    13:d2:37:b5:b7:96:e0:9a:28:f8:e5:e6:dd:0e:af:
                    9d:51:64:78:7d:2a:02:8c:60:cc:99:a3:39:34:16:
                    42:1a:f3:46:bd:3d:56:02:2b:b8:a2:a0:8a:87:95:
                    c1:12:8e:29:5c:57:5b:60:12:b8:00:50:ca:8f:4a:
                    03:b7:43:2d:59:08:1c:cd:81:ea:f0:3f:6c:87:02:
                    bb:fa:6c:a8:13:70:3e:b6:e3:21:a6:ca:26:91:88:
                    06:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B2:37:55:2D:22:4F:F3:C5:36:1E:AA:E1:6E:3A:03:96:11:23:C4
            X509v3 Authority Key Identifier:
                keyid:07:BA:D6:17:74:58:B6:48:40:9D:07:F5:9A:99:10:A5:D3:40:3D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36479AF/5CFEC160C4C811E9B4DD3D1AF8AEA228/B7rWF3RYtkhAnQf1mpkQpdNAPQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B7rWF3RYtkhAnQf1mpkQpdNAPQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36479AF/5CFEC160C4C811E9B4DD3D1AF8AEA228/B7rWF3RYtkhAnQf1mpkQpdNAPQw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:0f:38:53:06:e6:52:35:f1:c0:3a:32:9d:84:06:7a:96:9d:
         97:55:19:0d:65:81:f3:62:7a:a3:49:6d:60:34:d1:e9:c3:42:
         cf:31:27:de:21:95:4f:66:f2:21:f6:7c:f0:4c:71:0a:37:12:
         57:5c:e6:42:db:59:e8:a4:1e:99:f0:b3:04:8f:09:08:cf:5b:
         ce:64:b7:1e:41:70:99:5b:90:0d:8d:fc:09:6b:79:0a:2f:13:
         62:57:55:b7:6d:34:2c:16:36:97:f2:86:11:5a:57:1d:4a:cf:
         5b:1e:94:27:19:11:ce:d3:29:30:a4:17:f9:e0:ba:02:34:aa:
         e2:5a:48:de:a6:82:ea:64:b0:f7:7c:4b:e3:97:01:e6:ae:db:
         cf:02:e3:68:d9:b0:20:e8:db:0b:60:ca:e2:05:ca:61:7f:a3:
         66:38:f0:8a:38:27:46:8b:c3:7b:48:84:56:23:79:14:14:3f:
         15:4d:2c:c2:41:ad:9d:58:f7:9b:c5:dc:7e:b7:97:24:45:c2:
         12:15:49:4c:09:56:3d:6d:64:9d:2e:3d:68:39:e3:eb:c9:7e:
         dc:b3:43:b8:66:17:7a:95:fc:95:c3:6f:a9:d3:53:58:70:b6:
         a0:0c:da:52:12:1b:4f:6b:6b:4b:1b:5a:03:f1:b4:3a:da:00:
         b7:d1:62:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 02:23:11 2024 by rpki-client on console-fra.rpki-client.org