Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft
File:                     m1ZovBMhETHfDtPunCXTEUxUspM.mft (raw, json)
Hash identifier:          ckaxXIAoTCFOvJoyt69E+jFoJBBx94qv460y7vEG+kY=
Subject key identifier:   0F:FA:5B:0D:25:74:BB:DA:A7:57:B0:A0:00:D1:76:91:92:AF:99:3F
Authority key identifier: 9B:56:68:BC:13:21:11:31:DF:0E:D3:EE:9C:25:D3:11:4C:54:B2:93
Certificate issuer:       /CN=F36A42DFAF/serialNumber=9B5668BC13211131DF0ED3EE9C25D3114C54B293
Certificate serial:       011B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/m1ZovBMhETHfDtPunCXTEUxUspM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft
Manifest number:          011A
Signing time:             Mon 03 Jun 2024 02:23:33 +0000
Manifest this update:     Mon 03 Jun 2024 02:23:33 +0000
Manifest next update:     Wed 05 Jun 2024 02:23:33 +0000
Files and hashes:         1: m1ZovBMhETHfDtPunCXTEUxUspM.crl (hash: +Wf+yFCgUx95Y/80czF/gZ15sIZecFm5Ozp2Yh66Itc=)
                          2: 63EB76DE4D6411EEB8D5BE834AD9E6FC.roa (hash: fbwi/jtS6FeTqYdpHpFLvs6qADWyxrzMpo/5QspGOXI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/m1ZovBMhETHfDtPunCXTEUxUspM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A42DFAF/serialNumber=9B5668BC13211131DF0ED3EE9C25D3114C54B293
        Validity
            Not Before: Jun  3 02:23:33 2024 GMT
            Not After : Jun  5 02:23:33 2024 GMT
        Subject: CN=665d2925-0271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:f6:29:6d:fa:67:e5:08:7a:3c:99:8a:4a:
                    54:dc:aa:38:66:c7:5b:3e:86:a2:ae:36:76:21:57:
                    4b:c3:a4:9f:28:0c:1b:39:f3:37:ca:a4:f4:d1:9a:
                    b7:e7:5e:c4:43:fd:a8:30:f3:c9:8f:e9:23:c9:9f:
                    9a:42:19:76:67:7d:02:ec:95:bb:94:6d:4f:33:a7:
                    1e:07:45:70:90:53:1b:3f:c3:70:5c:14:85:5b:db:
                    6c:33:c9:2f:96:c7:17:38:0f:21:48:11:24:ca:c3:
                    32:af:75:ad:22:8a:ff:26:6c:f5:11:91:be:be:3b:
                    4c:44:70:4a:48:2c:7a:fa:94:2e:c5:60:07:0b:97:
                    68:71:10:e6:93:44:e1:cd:fe:4d:3d:de:07:86:ea:
                    39:e5:3c:e8:68:09:06:94:58:cd:20:bb:c7:17:86:
                    c0:15:c1:0c:18:95:5c:a6:f2:b3:a6:d1:51:e2:cb:
                    7f:ed:01:07:55:26:04:b5:70:06:c7:cf:cc:84:a7:
                    7b:f5:9f:98:7d:e5:76:fd:fc:18:99:43:3c:de:32:
                    36:f1:1f:9b:1a:99:e0:aa:33:4c:3d:31:5c:ee:fa:
                    13:28:62:ad:1c:61:17:6c:d3:79:b7:56:1a:d3:4d:
                    f4:e6:26:70:9b:00:fc:cf:ed:d4:93:27:51:d1:f6:
                    b0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:FA:5B:0D:25:74:BB:DA:A7:57:B0:A0:00:D1:76:91:92:AF:99:3F
            X509v3 Authority Key Identifier:
                keyid:9B:56:68:BC:13:21:11:31:DF:0E:D3:EE:9C:25:D3:11:4C:54:B2:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/m1ZovBMhETHfDtPunCXTEUxUspM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A42DF/9EF3DB824D6311EEA36358814AD9E6FC/m1ZovBMhETHfDtPunCXTEUxUspM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a3:11:08:a2:69:63:6d:7b:dc:09:d9:a0:9b:d9:3f:89:d5:
         58:f5:5b:ea:4f:76:3b:ac:83:b4:f4:0f:fb:c3:82:a4:ce:7f:
         aa:6d:80:74:e1:5d:f7:63:c6:d1:da:86:0f:a4:0d:ac:3e:2e:
         42:82:82:87:57:31:d0:40:17:72:9b:25:54:85:bf:01:e8:db:
         29:1a:44:c7:45:55:09:91:9b:3d:b0:00:1f:01:f4:e3:7a:ae:
         13:82:16:60:ee:2f:c8:1e:ef:c0:03:cd:64:6c:99:45:00:31:
         27:af:02:80:7a:8b:4a:fd:aa:cd:ba:d3:32:86:b1:b9:12:ac:
         69:b8:56:96:ea:c2:d3:e6:ac:6e:f2:77:ea:79:cc:ee:06:96:
         6c:46:d0:88:3a:a9:be:84:19:8d:38:79:4f:00:4f:af:7e:28:
         e4:f3:55:f5:d7:63:20:6a:ee:fc:fd:7d:04:ad:81:e3:8b:69:
         ef:1c:b8:60:2c:ea:71:47:04:43:40:cb:c0:6e:6f:4b:38:c6:
         12:68:13:a1:71:e6:f1:c4:98:8f:1d:b0:02:a1:cf:31:f1:4c:
         b7:98:ab:7b:9d:74:47:35:01:52:2a:6e:6c:4e:58:55:7a:0f:
         30:74:99:9a:39:fa:10:f5:60:57:42:c3:05:52:05:dc:c6:8b:
         15:67:ce:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:49 2024 by rpki-client on console-ams.rpki-client.org