Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
File:                     yD3GjOK-QyU6qlUariL5Wh8drSs.mft (raw, json)
Hash identifier:          4cIxpU0W9yYAnaHipadA+fOwcrkLajKhsB9i4urQtrA=
Subject key identifier:   DE:2C:5A:55:49:E0:BD:47:AA:75:87:A8:4E:DA:DF:8E:03:7B:93:E3
Authority key identifier: C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B
Certificate issuer:       /CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
Certificate serial:       02BD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
Manifest number:          02BB
Signing time:             Mon 03 Jun 2024 01:53:08 +0000
Manifest this update:     Mon 03 Jun 2024 01:53:08 +0000
Manifest next update:     Wed 05 Jun 2024 01:53:08 +0000
Files and hashes:         1: yD3GjOK-QyU6qlUariL5Wh8drSs.crl (hash: +ZDvaY2m4ZiOo9GtDcy98mggzoKq1iMCkd0vUIhp5D0=)
                          2: B1BFBFEA278711ED8808E3CDF1222468.roa (hash: Assvrj8OD6s30X7gj/5howMI7VisH2Gq7WxHn9j6+kQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                          rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 701 (0x2bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671DBDAR/serialNumber=C83DC68CE2BE43253AAA551AAE22F95A1F1DAD2B
        Validity
            Not Before: Jun  3 01:53:08 2024 GMT
            Not After : Jun  5 01:53:08 2024 GMT
        Subject: CN=665d2204-3ab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9d:0d:d8:09:a3:7b:7a:54:df:96:84:06:6c:
                    e9:cb:b6:d9:6e:77:3e:df:29:50:fa:6a:6c:a6:1d:
                    cf:ce:28:b7:2d:65:50:07:00:d8:e8:6d:2b:ab:86:
                    1b:80:b2:ea:1d:ba:b7:1c:e8:3a:75:f2:ab:05:ef:
                    25:73:8f:6a:53:fd:97:ac:60:6a:e9:62:07:56:b2:
                    05:31:de:d9:63:e8:e9:89:1b:5c:e7:6a:25:00:f6:
                    2a:3a:2e:26:a3:bb:2a:af:f5:a0:9e:21:56:f9:48:
                    e1:73:d8:94:d5:c8:29:d1:5c:15:cd:3f:d2:bd:92:
                    48:58:f7:ba:93:e6:eb:f0:49:6d:da:50:fe:ef:30:
                    d3:2b:8a:11:19:1b:76:e7:7a:99:db:d4:ec:17:b1:
                    74:e1:55:73:21:d7:af:db:39:62:7a:c5:1a:cf:3c:
                    75:2a:b6:03:7c:dd:4e:20:ab:df:9b:ba:2c:42:0f:
                    bf:f3:5a:e9:39:d5:32:b5:9e:30:1d:9e:59:f8:3e:
                    62:d6:85:29:c5:8f:13:08:5c:12:39:8f:97:a8:c1:
                    3a:c1:14:a3:2c:12:57:56:75:5b:c7:fe:5b:25:c7:
                    8d:a2:4e:ce:3a:d7:bb:fd:c9:31:65:5d:02:b3:36:
                    0c:f6:76:be:84:83:e4:94:b4:8e:40:5d:2b:ce:6d:
                    7f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2C:5A:55:49:E0:BD:47:AA:75:87:A8:4E:DA:DF:8E:03:7B:93:E3
            X509v3 Authority Key Identifier:
                keyid:C8:3D:C6:8C:E2:BE:43:25:3A:AA:55:1A:AE:22:F9:5A:1F:1D:AD:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/yD3GjOK-QyU6qlUariL5Wh8drSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671DBD/3EE102DE124411ED9F6268B4F1222468/yD3GjOK-QyU6qlUariL5Wh8drSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ab:cf:ec:1f:32:ad:ef:d9:e6:1e:f9:e6:d0:5d:84:53:c0:
         6c:0f:84:82:34:71:36:99:88:08:af:04:06:48:99:f1:d2:b2:
         62:30:c2:f9:9d:53:e3:53:c4:05:f5:56:81:0c:2f:f4:1f:09:
         3e:21:98:89:83:b5:55:c1:32:09:ec:63:87:38:60:6c:8a:c6:
         5f:56:dc:36:d8:01:4e:4f:12:5f:d2:bd:97:b0:0d:9d:30:30:
         47:82:8d:2f:74:03:8c:0e:ad:a2:5e:24:1f:31:99:30:bd:40:
         f9:1f:9a:a4:a3:3e:63:f3:c8:23:c6:ca:f6:d9:61:8f:6f:97:
         2d:ab:11:4e:db:36:26:2c:5c:82:8c:b9:8f:18:5b:50:58:90:
         8d:47:86:ee:05:c6:cb:fc:dc:ae:44:ec:78:b2:a1:4e:d8:99:
         56:10:ec:f9:f5:23:cd:a6:39:1d:b0:6d:55:b8:ad:63:7a:ba:
         9e:6a:c5:72:c0:1b:bf:4b:0b:72:31:c0:c9:d5:5a:98:a0:2f:
         92:a4:1a:b8:d6:62:89:1b:15:20:5c:cf:a3:82:69:85:18:9a:
         c8:10:8b:a3:7f:c6:6e:9c:02:7b:0d:da:dd:a5:ff:1b:32:c2:
         89:87:3e:2f:4d:53:8c:01:16:7f:67:4e:d8:b1:36:ad:b1:6b:
         a9:c9:72:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:08 2024 by rpki-client on console-ams.rpki-client.org