Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
File:                     ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft (raw, json)
Hash identifier:          9Vux6wsfupWiosCmR+jE5rCReNpaok5wK8q/xhpYIEk=
Subject key identifier:   3B:F0:0F:3E:44:90:50:F2:BF:1F:E2:17:92:17:EE:64:3F:0D:3C:FC
Authority key identifier: 92:D1:59:24:23:09:09:F2:9C:02:4B:8D:5F:62:D6:58:97:4A:28:C6
Certificate issuer:       /CN=F367EEA2AF/serialNumber=92D15924230909F29C024B8D5F62D658974A28C6
Certificate serial:       014A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
Manifest number:          0147
Signing time:             Mon 03 Jun 2024 02:19:22 +0000
Manifest this update:     Mon 03 Jun 2024 02:19:22 +0000
Manifest next update:     Wed 05 Jun 2024 02:19:22 +0000
Files and hashes:         1: ktFZJCMJCfKcAkuNX2LWWJdKKMY.crl (hash: 9odpb+Lt3RFWrESK1v19r1j6yrbU19g26+WzJDWFgD4=)
                          2: F59C135AD57111EE98F3334E775412E6.roa (hash: DlLkA76T6/DZ7xEc77ZbObEHLYWet3TzWSKSqOWWlnU=)
                          3: 43172C202F6711EEBE578C1B4AD9E6FC.roa (hash: olt87M5UNUaEOcxzcw5wRYVy43osgJdjsy53S5VrdrA=)
                          4: EA6262822EB411EEA85FC5794AD9E6FC.roa (hash: k3VP3qw0EwdYjKV3iUtgdfKB+KXoIlF7qnyQ2hPvZY8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367EEA2AF/serialNumber=92D15924230909F29C024B8D5F62D658974A28C6
        Validity
            Not Before: Jun  3 02:19:22 2024 GMT
            Not After : Jun  5 02:19:22 2024 GMT
        Subject: CN=665d282a-0133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ff:0c:58:64:59:dd:7b:d8:32:9d:3c:2f:a9:5d:
                    e9:4e:0f:ea:2b:eb:e6:2a:ec:78:40:b2:3c:52:eb:
                    22:db:f5:8d:dd:c3:63:bf:35:8d:9d:7a:93:69:c5:
                    17:a7:3c:e5:f5:87:08:03:21:81:f0:f0:78:42:bd:
                    ef:7a:87:0b:96:00:35:8f:26:39:08:7e:81:9d:9c:
                    b1:3d:11:c9:fd:86:db:a6:dc:4a:af:23:a5:9e:97:
                    2f:9c:7c:42:41:78:24:fb:73:37:ea:e2:e3:41:c0:
                    df:cc:ef:8b:59:f6:74:5f:b0:47:36:d0:19:c1:2e:
                    27:31:de:75:9e:02:62:79:93:a7:6d:74:fc:e3:9b:
                    fb:bb:2c:45:eb:ad:0d:37:4f:47:d5:8c:b3:92:b5:
                    7e:2c:41:e4:a3:57:89:d8:fa:d3:75:0e:1e:4c:76:
                    44:cc:82:62:81:9c:97:2d:a5:4f:3e:e4:91:64:38:
                    31:b9:88:3e:61:bd:6f:ca:00:b6:ba:43:e4:2b:6a:
                    9b:bd:23:9d:9d:38:cb:f5:d6:45:d5:d7:03:34:07:
                    0e:bd:f8:52:05:fa:b3:60:43:a8:7c:46:b6:cd:37:
                    15:e9:46:12:98:e4:8c:83:c3:00:9e:cf:ea:f9:90:
                    5d:93:68:da:8a:0e:35:a9:be:53:62:e3:47:7f:35:
                    da:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F0:0F:3E:44:90:50:F2:BF:1F:E2:17:92:17:EE:64:3F:0D:3C:FC
            X509v3 Authority Key Identifier:
                keyid:92:D1:59:24:23:09:09:F2:9C:02:4B:8D:5F:62:D6:58:97:4A:28:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ktFZJCMJCfKcAkuNX2LWWJdKKMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367EEA2/908F26B42EB411EE82869D784AD9E6FC/ktFZJCMJCfKcAkuNX2LWWJdKKMY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:cb:65:50:ad:29:0b:b6:d6:1a:73:b1:4d:49:33:3a:78:86:
         43:91:84:f3:07:08:69:13:a4:38:fa:56:ce:51:91:07:65:a0:
         1b:79:b5:21:4b:38:1f:17:1a:ab:c3:a2:30:36:23:d0:5c:fd:
         c4:bf:90:b0:82:16:99:ba:40:77:03:9b:8f:b3:2e:04:37:95:
         3c:0c:a7:6a:b8:41:ee:c8:60:be:7f:8e:b5:40:7f:95:17:c7:
         0f:99:57:b1:6a:11:e0:36:bb:22:cc:b0:f7:b5:42:c4:5e:ca:
         f6:d6:4f:ac:49:92:d7:45:85:25:28:82:7c:b3:36:d7:2a:8c:
         fc:2d:5c:5f:91:15:4d:78:64:02:1d:f9:0d:d1:d1:6b:cf:38:
         a4:41:c3:9d:60:d9:e6:ca:db:30:a5:34:e1:1b:05:5a:a5:6c:
         bd:80:af:83:5a:aa:8c:38:1c:5d:6b:f6:42:72:7e:2a:44:12:
         29:96:7c:b3:28:a0:57:c6:d2:46:6a:7e:20:d6:a6:26:39:7a:
         5c:41:de:8c:56:ef:b5:29:41:6d:c7:a5:70:f7:fe:0e:a7:5e:
         ad:90:d6:11:ea:08:02:d7:53:f4:de:04:65:4e:2c:ab:e3:71:
         94:3a:c3:e6:78:c6:49:12:60:98:b1:c2:50:5e:4e:ca:77:ef:
         57:37:26:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 03:36:59 2024 by rpki-client on console-fra.rpki-client.org