Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
File:                     165kWvnltuIirj4ZQpl0u9hlaUE.mft (raw, json)
Hash identifier:          lDUt5ogsDpXsQE4pygcTgMhS/IBBje+zj/OKsUlTFsw=
Subject key identifier:   04:24:5E:69:0E:78:70:40:B7:68:22:DA:1B:A5:E6:E2:FA:C0:79:84
Authority key identifier: D7:AE:64:5A:F9:E5:B6:E2:22:AE:3E:19:42:99:74:BB:D8:65:69:41
Certificate issuer:       /CN=F36A9688AF/serialNumber=D7AE645AF9E5B6E222AE3E19429974BBD8656941
Certificate serial:       041A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
Manifest number:          0419
Signing time:             Mon 03 Jun 2024 01:32:34 +0000
Manifest this update:     Mon 03 Jun 2024 01:32:33 +0000
Manifest next update:     Wed 05 Jun 2024 01:32:33 +0000
Files and hashes:         1: 165kWvnltuIirj4ZQpl0u9hlaUE.crl (hash: oRprHKqhibYbYVJJ2nZFGq/boWY+fkqIqqZOGGsEGLQ=)
                          2: 2A3F25CA461211EDA2ED7DD4F1222468.roa (hash: lvPd6VTKcLMhU/3Nl8dyjCE5frGwG4hqXNXwJymfNBg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1050 (0x41a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9688AF/serialNumber=D7AE645AF9E5B6E222AE3E19429974BBD8656941
        Validity
            Not Before: Jun  3 01:32:33 2024 GMT
            Not After : Jun  5 01:32:33 2024 GMT
        Subject: CN=665d1d32-5ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e3:5d:37:d4:92:0b:ac:85:26:d6:d8:a5:9a:
                    e1:cc:b9:99:1a:d0:cd:a8:2f:3e:51:65:3b:58:e5:
                    44:19:1f:9b:c0:32:6a:86:ca:da:16:8a:93:8c:61:
                    d4:58:7f:50:50:ce:bc:0f:02:23:36:79:ba:72:dc:
                    98:1b:fd:05:3e:32:1c:c7:81:bf:c8:a2:e3:61:cd:
                    9e:15:f0:49:64:87:42:36:f8:20:8e:41:1a:cf:4f:
                    e1:47:b2:d0:fa:0b:e7:66:30:57:2e:c9:b8:11:91:
                    1b:71:a2:14:0b:d7:04:36:43:b8:4e:4a:e8:57:4e:
                    2a:41:75:ed:59:1e:6f:96:35:bb:8f:c7:66:58:dc:
                    1d:c3:bf:83:0a:d4:d7:8f:d4:1a:b6:05:bb:a3:31:
                    77:76:f4:45:17:bb:9f:ec:27:c6:17:10:16:60:f4:
                    8b:1c:fc:28:bd:e9:d5:75:f9:2e:dd:89:89:eb:17:
                    71:03:5f:ff:f1:a1:37:82:dd:c5:8c:50:68:c6:89:
                    d4:6d:1f:45:b1:4a:57:4b:a0:a7:22:d9:a8:2a:7d:
                    5f:38:cb:83:2c:c0:2a:bd:3f:13:d2:ae:79:dd:cf:
                    48:bd:b9:6d:2b:04:f5:a1:e9:94:0e:8d:70:bc:65:
                    78:65:b0:71:6a:52:81:68:0b:87:38:50:66:ab:1f:
                    39:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:24:5E:69:0E:78:70:40:B7:68:22:DA:1B:A5:E6:E2:FA:C0:79:84
            X509v3 Authority Key Identifier:
                keyid:D7:AE:64:5A:F9:E5:B6:E2:22:AE:3E:19:42:99:74:BB:D8:65:69:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:7e:56:1b:38:40:89:a1:92:85:3e:df:6d:f0:f7:cb:d2:31:
         31:b9:1a:41:44:0c:04:34:d9:10:38:4c:3c:3c:27:9f:58:df:
         71:81:72:87:fa:a5:5b:f8:fc:f8:f8:5c:92:bd:fe:df:fe:e9:
         66:ce:25:0e:43:3c:75:31:b8:de:24:e1:c6:1b:4c:bc:91:1a:
         18:6c:e1:3d:b8:19:cb:47:50:aa:65:ee:2b:b1:0d:30:69:6d:
         11:64:45:c6:39:2a:25:99:76:a2:03:2d:81:b4:da:49:3b:5d:
         47:9e:73:8b:9c:3c:ea:dc:9d:f9:19:01:51:42:66:b0:fe:92:
         c5:fe:1c:f8:57:dd:7b:4a:b5:60:be:4f:a0:2d:90:90:a8:cb:
         a1:fc:82:72:44:7c:c6:44:02:40:8d:83:45:b7:64:e9:bf:7e:
         9b:fe:46:e6:db:75:28:48:11:f1:69:92:8c:a5:fe:16:55:f6:
         5e:d2:18:19:e3:21:a6:09:66:f7:c2:f1:71:fd:ee:5e:cf:87:
         77:10:25:e2:ae:3c:7a:e6:52:a5:93:45:b8:cd:34:b9:91:6c:
         59:31:9c:d1:87:12:10:c8:1f:d9:e7:16:d9:0d:e9:32:4c:d7:
         9b:ed:d5:e4:dc:4a:b2:a6:a9:70:2b:97:ee:4a:c7:80:73:0c:
         a8:f7:71:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:50 2024 by rpki-client on console-ams.rpki-client.org