Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
File:                     dF3XcQDluqV1XTuTwPQnTCebbdc.mft (raw, json)
Hash identifier:          ShkIVIKhzI0FmnCimGMfo2acw34S+wUPst1eqB/hhbE=
Subject key identifier:   6D:79:56:C7:32:37:E6:A8:03:E9:FE:09:B2:6C:FD:ED:5E:96:8C:F7
Authority key identifier: 74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7
Certificate issuer:       /CN=F36A39CEAR/serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
Certificate serial:       016E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
Manifest number:          016E
Signing time:             Mon 03 Jun 2024 02:16:14 +0000
Manifest this update:     Mon 03 Jun 2024 02:16:13 +0000
Manifest next update:     Wed 05 Jun 2024 02:16:13 +0000
Files and hashes:         1: dF3XcQDluqV1XTuTwPQnTCebbdc.crl (hash: oLH7qetdSr+CDsClJWEZL7YF+TpnRA+9xt2jQ2Rf9Ok=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
                          rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 366 (0x16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A39CEAR/serialNumber=745DD77100E5BAA5755D3B93C0F4274C279B6DD7
        Validity
            Not Before: Jun  3 02:16:13 2024 GMT
            Not After : Jun  5 02:16:13 2024 GMT
        Subject: CN=665d276e-cc04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:92:73:ae:e0:f7:5d:f7:93:24:27:00:a1:e4:
                    b3:78:f8:cf:71:91:e9:65:d7:26:7f:5c:7e:ab:db:
                    4e:87:f4:64:24:ed:63:09:8b:8e:21:19:0c:f3:44:
                    f5:55:47:9a:fc:ca:71:1f:68:fa:45:2f:ec:2c:a8:
                    03:85:35:4a:11:aa:ed:47:76:0c:24:39:f7:d5:1a:
                    2f:09:9f:23:7e:b7:cb:bc:17:0a:c7:cd:b5:65:7b:
                    c3:2c:87:74:e6:1a:65:81:82:53:36:9d:d1:1e:2d:
                    77:a9:27:fb:de:51:65:ac:02:4f:4d:4c:c1:35:08:
                    e5:1a:5e:c8:e9:f9:80:25:d5:fd:41:19:dd:57:d9:
                    be:91:0a:01:39:6b:57:58:ed:44:c9:ec:79:fb:40:
                    6d:94:df:cb:1e:55:ce:77:ec:e1:3a:24:a3:cf:9e:
                    ac:4c:5a:31:da:41:cd:ff:ec:f8:99:09:d9:80:6c:
                    f9:a3:1d:29:f5:14:55:e5:36:75:15:37:d6:9e:44:
                    ee:fe:81:cf:7a:73:b0:7b:dd:16:e3:58:bd:a1:43:
                    39:c6:3f:42:3a:af:24:67:53:d2:4c:7e:2f:f4:d6:
                    ac:48:c3:21:88:c3:c1:91:a3:d4:e6:37:9b:d8:cb:
                    69:95:3a:20:85:d3:a0:5c:65:1e:a4:f9:cd:70:ab:
                    d7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:79:56:C7:32:37:E6:A8:03:E9:FE:09:B2:6C:FD:ED:5E:96:8C:F7
            X509v3 Authority Key Identifier:
                keyid:74:5D:D7:71:00:E5:BA:A5:75:5D:3B:93:C0:F4:27:4C:27:9B:6D:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/dF3XcQDluqV1XTuTwPQnTCebbdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/621AB4EE0B5311EE9B4D135D4AD9E6FC/dF3XcQDluqV1XTuTwPQnTCebbdc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:af:d1:5c:62:a6:1e:b8:86:ec:5e:cc:0a:5f:41:30:db:93:
         0f:9d:7d:b2:cc:2a:ab:39:32:b9:18:c4:13:1b:c9:5e:56:a9:
         4c:fe:fc:31:32:33:8b:72:03:2e:90:5f:59:30:96:aa:ab:70:
         d3:6a:00:1a:0e:96:1a:d2:59:5a:48:fd:65:5f:64:c6:84:5a:
         ea:cd:9b:b6:0a:7a:c5:79:75:f7:0c:bb:be:79:82:f1:34:4c:
         7c:41:05:7b:cd:65:52:d2:af:75:56:f3:18:77:5b:a9:a2:cf:
         24:60:a0:70:b4:2b:93:87:80:28:e1:6d:f5:96:cf:4a:70:82:
         cc:f4:c6:d8:5e:1a:86:96:eb:34:78:dd:85:86:1c:78:61:ad:
         ed:7d:ff:6c:f5:ec:81:85:4d:e9:3e:6c:d8:2a:ff:e7:cf:6b:
         6b:7e:43:d8:61:16:91:30:95:50:26:1f:60:ee:0d:da:43:09:
         4b:dc:bb:77:99:0e:69:96:ca:8a:6d:ef:4a:92:15:54:dc:48:
         9d:b8:d1:77:d7:e2:f0:aa:90:ba:a1:4f:7c:9f:5c:cf:f3:7a:
         4f:23:71:d5:68:88:68:77:9e:0f:f1:89:be:cb:eb:16:91:90:
         6b:a6:01:5e:cc:8a:62:57:c1:42:9d:24:87:88:a2:88:cb:66:
         c9:6c:94:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 03:37:13 2024 by rpki-client on console-fra.rpki-client.org