Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
File:                     X2s0EhZiPYWnTyzopeKbXurPolM.mft (raw, json)
Hash identifier:          tz4w2DXLsyMdUoD8JhQ2nBXEZe5pWnpz9mXrKGoqDEE=
Subject key identifier:   3B:56:0F:C1:C4:AE:D8:7A:DB:28:29:D9:1F:8D:01:05:C0:59:90:88
Authority key identifier: 5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53
Certificate issuer:       /CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
Certificate serial:       0287
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
Manifest number:          0285
Signing time:             Sat 18 May 2024 01:55:01 +0000
Manifest this update:     Sat 18 May 2024 01:55:01 +0000
Manifest next update:     Mon 20 May 2024 01:55:01 +0000
Files and hashes:         1: X2s0EhZiPYWnTyzopeKbXurPolM.crl (hash: rf4GUCnRgl3UyRqGuLAASQseLHMJChPFYZTGNmqU4CY=)
                          2: 55A54EE42E9611EDA379C780F1222468.roa (hash: 92dmko5SHijeHZEqNigi1tIoOa55D1fkpQHQwRV5fc8=)
                          3: 189309602E9611ED8FED3480F1222468.roa (hash: 9thUVnLZZ7EOpFloeIsOWtyUvJheIIw/Jl2bg+WHMIM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 647 (0x287)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369C632AF/serialNumber=5F6B341216623D85A74F2CE8A5E29B5EEACFA253
        Validity
            Not Before: May 18 01:55:01 2024 GMT
            Not After : May 20 01:55:01 2024 GMT
        Subject: CN=66480a75-1588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:f4:94:3e:77:c5:3d:ce:1a:8e:06:bd:71:
                    53:ed:18:6e:fe:1e:3c:d9:a1:9d:6b:c7:5e:c6:52:
                    2e:a1:81:a0:03:49:14:35:d5:0e:69:84:ed:03:f0:
                    20:33:0b:79:32:5e:d8:36:3d:a0:c6:36:65:ee:3d:
                    53:e9:18:60:4c:2d:5c:bb:5b:64:08:d3:94:df:dc:
                    0a:bf:9e:bf:ad:77:57:7a:d9:6c:f0:92:3b:af:0a:
                    45:d2:2f:76:bf:e3:74:0a:cb:17:12:47:f3:be:91:
                    9e:ba:6e:2a:eb:39:76:b6:f3:eb:16:dc:3b:43:c0:
                    db:15:f6:93:a3:73:67:7e:7a:0f:53:83:b2:e1:63:
                    15:78:bc:18:a5:1e:2a:5a:e6:39:4e:cd:26:8f:d3:
                    2d:cb:79:d7:70:dd:c8:9c:bb:a8:02:a6:93:be:d3:
                    f6:20:a7:1e:cb:a0:de:d3:ad:ba:31:eb:91:f5:b6:
                    a0:c8:fc:a8:63:06:9a:58:49:fc:13:e6:db:ad:ba:
                    ea:bf:70:ce:e2:bd:6b:1f:fb:21:a9:e5:82:a6:2d:
                    1d:ce:40:0e:ad:99:97:1b:cd:51:03:57:3a:b5:77:
                    9e:7e:b0:2a:ee:c1:cc:a6:e9:d1:ab:bf:2e:68:23:
                    e9:d5:3a:52:70:13:51:41:bc:f0:d4:14:fa:ee:96:
                    5e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:56:0F:C1:C4:AE:D8:7A:DB:28:29:D9:1F:8D:01:05:C0:59:90:88
            X509v3 Authority Key Identifier:
                keyid:5F:6B:34:12:16:62:3D:85:A7:4F:2C:E8:A5:E2:9B:5E:EA:CF:A2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X2s0EhZiPYWnTyzopeKbXurPolM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369C632/364C4FF82E9511EDA659BB7DF1222468/X2s0EhZiPYWnTyzopeKbXurPolM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:ac:f5:ac:b3:44:ae:42:9d:1a:b5:a9:36:59:9d:b6:f5:e1:
         f2:05:d5:af:eb:97:74:05:88:d6:58:b7:95:dc:e8:ec:3b:10:
         c3:6f:1b:d4:87:a0:e5:32:cd:4b:05:4e:e5:2d:83:e4:84:ee:
         6e:b6:77:1c:74:83:c8:9c:17:b4:70:23:aa:aa:7f:f8:73:50:
         70:18:b6:f5:1c:81:e1:89:60:d8:4e:eb:d9:07:55:be:f7:71:
         4c:fd:f0:bb:b3:c1:22:d3:92:49:1c:27:00:bc:96:1c:72:fa:
         e6:56:97:95:cb:c6:76:42:79:f9:d3:24:25:b4:ec:80:50:d7:
         79:6a:ac:a6:9c:54:59:22:42:ee:77:90:cd:39:80:64:d5:c5:
         37:ae:a9:ba:d7:01:ad:4a:4a:27:48:11:c7:dd:90:82:7b:1a:
         f9:ea:c3:bd:2e:f5:a7:ed:ff:af:3d:29:8e:fe:8d:de:cc:dc:
         bb:5f:3d:b1:6d:d7:31:8a:86:2d:ee:ca:6c:5d:19:28:44:e5:
         f4:71:1d:db:09:5d:b5:fb:68:25:c0:8b:9c:9b:9e:6b:5d:f9:
         ca:8a:a8:f7:81:17:55:27:e3:d3:a3:ba:9d:94:f9:46:26:9d:
         47:34:10:81:2f:d4:24:1f:b2:9f:b1:12:25:bc:a7:3d:ce:5b:
         f7:76:a9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:49:24 2024 by rpki-client on console-fra.rpki-client.org