Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
File:                     DiXC-NXlAp5pEJ686yVczjVJFv4.mft (raw, json)
Hash identifier:          xK9+s9N6ROHRaJoo5SiZJ4thW4qp0+Jz4gws4RHX1es=
Subject key identifier:   65:62:98:A4:77:1D:1A:3D:DE:AE:03:61:BA:6A:1E:CB:F3:C4:A8:BA
Authority key identifier: 0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE
Certificate issuer:       /CN=F369CA26AF/serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
Certificate serial:       BF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
Manifest number:          BE
Signing time:             Mon 03 Jun 2024 02:29:45 +0000
Manifest this update:     Mon 03 Jun 2024 02:29:44 +0000
Manifest next update:     Wed 05 Jun 2024 02:29:44 +0000
Files and hashes:         1: DiXC-NXlAp5pEJ686yVczjVJFv4.crl (hash: QuxL0YGuA1eaPkCu1kOcde1aSC422ku84ibKFYLaonc=)
                          2: 8C7C1810938711EE9A4CB809D25BE465.roa (hash: WJPtWXyF4HbsBRlcRAZ4odD1u13hg/x2iKAvSH5H04k=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 191 (0xbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369CA26AF/serialNumber=0E25C2F8D5E5029E69109EBCEB255CCE354916FE
        Validity
            Not Before: Jun  3 02:29:44 2024 GMT
            Not After : Jun  5 02:29:44 2024 GMT
        Subject: CN=665d2a99-cfb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:99:a8:74:f4:2a:46:cc:d7:5b:c9:29:0e:33:
                    f3:ff:10:a2:83:91:97:2f:00:14:b4:ce:81:22:7a:
                    38:34:c4:6a:d1:10:de:4f:e1:cb:f8:5f:73:56:89:
                    fb:32:f7:57:e0:9c:c4:69:cc:dd:aa:10:1b:e2:a7:
                    54:b3:95:26:b2:51:9f:c3:57:04:ac:d7:2d:7e:8a:
                    fa:38:33:5d:66:df:bd:99:d6:cb:7a:32:e5:32:1f:
                    2c:46:04:23:60:e3:6a:b6:b7:d2:7c:94:39:05:5d:
                    1a:89:4c:62:91:1b:e3:d8:ba:44:aa:1a:73:1c:ba:
                    d6:25:d4:55:e8:fc:3b:c8:82:58:90:00:71:53:d5:
                    6f:eb:53:96:40:24:c8:30:e7:e9:3b:c7:91:4c:3d:
                    42:52:8c:07:7c:ca:fa:7f:dd:2b:80:9e:da:f7:dd:
                    f0:99:b5:08:29:4b:91:b3:9f:93:34:c0:61:73:9c:
                    8c:e9:46:56:e3:eb:a3:6f:36:c7:97:ec:b9:b9:8d:
                    99:d8:77:76:57:d3:25:b7:51:61:54:5e:51:41:4e:
                    fb:42:71:7e:c3:48:c9:61:29:1e:90:a1:76:94:b2:
                    c7:49:a0:cb:e7:23:14:9b:3a:5e:0b:fb:b3:02:c9:
                    55:b5:6f:fd:f2:41:a0:c3:35:a5:07:d1:da:a4:5a:
                    e6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:62:98:A4:77:1D:1A:3D:DE:AE:03:61:BA:6A:1E:CB:F3:C4:A8:BA
            X509v3 Authority Key Identifier:
                keyid:0E:25:C2:F8:D5:E5:02:9E:69:10:9E:BC:EB:25:5C:CE:35:49:16:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DiXC-NXlAp5pEJ686yVczjVJFv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369CA26/BECC4738938511EEBC777206D25BE465/DiXC-NXlAp5pEJ686yVczjVJFv4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:58:d4:46:82:7e:12:cb:17:05:cc:76:3e:c2:a1:14:8b:bc:
         fd:ad:87:ec:30:06:a8:8d:41:05:d8:ea:dc:0a:29:69:83:2f:
         30:be:bb:5e:e5:86:a7:b1:45:d2:6e:c2:28:b1:86:c7:96:87:
         1d:70:b7:c6:ce:63:32:5e:f3:b5:24:bc:3e:a3:37:5e:c6:30:
         8b:44:03:4e:5a:ef:25:2d:91:13:82:f2:de:0f:d0:26:fc:35:
         9a:56:dc:d1:a5:b6:76:b9:6f:e1:fe:54:a4:79:61:28:cf:c4:
         38:ba:61:f6:48:ae:2a:78:28:a7:5f:d4:ba:d9:fc:35:ff:90:
         06:92:4f:e9:fa:73:94:da:b1:27:93:c7:e4:4d:a3:6e:1a:e0:
         38:0d:5d:56:e1:81:f5:10:52:41:65:c1:31:61:8f:bb:a1:55:
         5b:f4:1a:06:a3:f4:9f:3e:59:39:1e:31:d9:9c:61:6f:0f:97:
         c3:60:12:ce:22:11:ab:03:43:ad:95:9f:a5:bc:cb:4c:19:92:
         81:be:0a:aa:cb:fc:24:39:5a:ef:e5:2a:b1:cb:67:38:37:e7:
         01:69:76:8f:24:4b:d5:a3:d7:13:60:99:7f:4e:07:25:08:54:
         e7:fb:a5:25:df:ad:45:e0:fc:4a:c8:bd:9e:9d:3f:ce:4c:1f:
         3f:95:f1:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 03:37:13 2024 by rpki-client on console-fra.rpki-client.org