Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
File:                     DD2lBSocT7aPxjEmUGBjsCoEIWY.mft (raw, json)
Hash identifier:          nS+2wGXD8Ac7UpfVcvWOILI0QhZXsatNFId0xJe+XH8=
Subject key identifier:   1D:43:3C:B2:F2:E8:AB:00:E7:AC:48:59:E7:AC:AB:26:13:C3:D7:3E
Authority key identifier: 0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66
Certificate issuer:       /CN=F3674DA7AF/serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
Certificate serial:       02BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
Manifest number:          02B8
Signing time:             Mon 03 Jun 2024 01:53:37 +0000
Manifest this update:     Mon 03 Jun 2024 01:53:37 +0000
Manifest next update:     Wed 05 Jun 2024 01:53:37 +0000
Files and hashes:         1: DD2lBSocT7aPxjEmUGBjsCoEIWY.crl (hash: PhOp/gQRjMYfat98zueNFcMKVhkw+2mmY6QJHimkays=)
                          2: 85DF150A4A0111EDBC8B019BF1222468.roa (hash: J0Z0C8a+DkOgBeapJ5WKsqyTDXB+uEMzdHyF0iz3ZIY=)
                          3: 89BEE5CE14B411EDB752D0F4F1222468.roa (hash: gxHiaz+MfliBB76QRhqTW1JJeJt0mkLpc0IJlrSjQm0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698 (0x2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674DA7AF/serialNumber=0C3DA5052A1C4FB68FC63126506063B02A042166
        Validity
            Not Before: Jun  3 01:53:37 2024 GMT
            Not After : Jun  5 01:53:37 2024 GMT
        Subject: CN=665d2221-27c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:13:56:e4:a3:09:de:a6:c3:0d:9a:92:45:44:
                    b7:42:22:e6:78:cb:51:89:4f:13:77:64:d8:ce:85:
                    e0:81:23:09:a5:59:82:ce:c3:a9:39:3a:f1:e3:42:
                    ec:d7:19:87:4d:aa:39:28:e7:14:9d:6c:c9:b8:ab:
                    ef:67:45:ed:83:25:6e:96:92:78:63:4a:47:99:7f:
                    33:13:b7:5e:f1:2b:75:1d:b9:28:77:d2:2d:cf:e1:
                    22:0e:16:54:0b:4e:56:51:a4:82:c8:e0:93:27:13:
                    a4:ff:8e:d8:a8:14:d9:25:38:57:2e:00:e6:28:91:
                    6c:fc:eb:72:e6:ad:6f:e1:35:6b:24:89:27:3b:78:
                    e0:e8:f8:6a:34:36:e6:ea:5f:f6:39:43:8b:f4:79:
                    f0:57:da:0c:fe:2d:f0:c9:40:f9:39:04:e8:8d:14:
                    da:d7:4e:76:16:15:0a:a6:9b:7b:a6:e2:59:58:fb:
                    09:18:6a:bf:ff:5d:cc:11:99:a0:bb:62:00:c5:37:
                    25:65:5d:05:c8:f7:fe:a3:eb:04:e7:f4:a8:ca:9b:
                    c1:30:7e:d2:02:12:79:60:12:e0:b9:76:30:5f:d1:
                    68:e6:25:d4:4f:0c:f5:97:21:7e:83:c7:03:72:fc:
                    5a:54:bd:0a:a6:61:9a:cc:3f:75:fb:f9:19:b6:3e:
                    ab:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:43:3C:B2:F2:E8:AB:00:E7:AC:48:59:E7:AC:AB:26:13:C3:D7:3E
            X509v3 Authority Key Identifier:
                keyid:0C:3D:A5:05:2A:1C:4F:B6:8F:C6:31:26:50:60:63:B0:2A:04:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DD2lBSocT7aPxjEmUGBjsCoEIWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674DA7/C661EE6E14B311EDA12368F2F1222468/DD2lBSocT7aPxjEmUGBjsCoEIWY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:b0:ec:d6:57:94:2a:a1:2d:d1:c4:2f:8a:1f:35:4d:80:a0:
         b8:4c:80:c3:0e:2a:15:59:7b:a6:b6:02:99:cb:e2:2c:c2:89:
         11:b2:c7:92:9f:88:43:72:38:f1:18:61:fe:ba:dd:54:83:9c:
         1e:68:8a:f4:8c:d3:e7:86:26:5e:7a:da:0c:b4:09:e1:7d:bf:
         ef:83:f2:dc:49:b1:a8:14:ae:fe:92:62:b4:8f:67:fa:f3:2e:
         58:ce:b5:9f:ac:a0:76:98:e6:23:7a:49:3e:c8:14:68:a7:45:
         bf:ad:e4:d2:02:b1:fb:af:04:9c:5b:4d:e3:a7:1d:0e:8f:70:
         cf:4f:62:8c:5f:bd:3e:1f:ae:a2:f7:8f:a1:a0:e5:93:03:1c:
         b9:e8:c7:14:6d:da:4a:11:5c:f8:db:ee:24:fa:6e:31:75:29:
         f8:84:81:f5:2c:1c:57:c8:d3:72:dc:fd:d2:17:72:b9:d6:96:
         d9:f8:fb:19:8f:98:08:5f:97:1e:d1:bb:5a:f1:5e:10:cd:1a:
         ee:fc:72:29:3d:96:82:1b:bf:22:2c:97:9c:9b:34:97:e9:0a:
         8a:fb:37:a0:b3:b2:05:04:f7:99:00:fa:48:61:fc:c6:c8:74:
         28:7a:d1:74:98:d9:30:9a:86:05:21:78:77:c9:66:02:19:4b:
         0a:b0:61:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 02:23:12 2024 by rpki-client on console-fra.rpki-client.org