Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
File:                     -kNarmNKJJQBjFzfiFcJr1vONro.mft (raw, json)
Hash identifier:          8SsWQ2SOo3cXMHMbKY3LDBbQYhV4e92/S3vVzpEq8cU=
Subject key identifier:   F6:FD:D4:B4:F4:1F:EA:6A:C3:72:B4:7C:6C:2F:0B:F3:4D:8C:00:32
Authority key identifier: FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
Certificate issuer:       /CN=F36B1FB2AF/serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Certificate serial:       05E1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
Manifest number:          05E1
Signing time:             Mon 03 Jun 2024 01:12:43 +0000
Manifest this update:     Mon 03 Jun 2024 01:12:43 +0000
Manifest next update:     Wed 05 Jun 2024 01:12:43 +0000
Files and hashes:         1: -kNarmNKJJQBjFzfiFcJr1vONro.crl (hash: DdU4VcVJW+URiHdXBmAnw/DWaotYXUXlKZA24IRjiqk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1505 (0x5e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1FB2AF/serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
        Validity
            Not Before: Jun  3 01:12:43 2024 GMT
            Not After : Jun  5 01:12:43 2024 GMT
        Subject: CN=665d188b-cf10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:5c:7c:1f:0a:a3:f0:29:88:d6:90:1a:22:61:
                    11:af:49:cf:f6:65:99:57:0f:57:33:d8:33:99:c6:
                    65:95:8b:da:3e:98:d8:fa:48:f5:22:ca:a4:a3:21:
                    2a:e9:59:34:cf:05:44:8b:67:40:4b:10:f7:73:02:
                    d4:fd:92:37:a6:f9:2f:e2:5c:38:bd:ff:d9:25:d5:
                    df:fb:5d:f8:90:8b:fa:dc:f4:0e:de:d9:83:f4:cb:
                    c6:16:9c:52:f8:fe:ae:c9:19:f3:c9:70:6b:79:e4:
                    aa:a8:f4:5b:55:69:fb:57:55:e0:5a:85:6d:b0:3a:
                    38:0c:00:a9:52:f4:1f:52:76:bf:19:4d:42:df:74:
                    31:d2:a1:d2:ff:a4:a5:6c:30:8f:b0:b3:e7:76:2b:
                    30:f8:d4:31:f5:43:60:af:1e:fd:5c:1a:c8:18:06:
                    a4:0d:aa:c6:ac:38:b7:85:0e:b6:46:98:f6:97:fc:
                    03:e8:4d:df:a6:cf:f3:ca:ad:0f:73:00:c5:f4:ea:
                    cd:49:50:a9:5a:81:3b:45:89:d9:49:d7:a4:fe:06:
                    da:98:99:f4:a5:a2:25:0c:7d:a9:79:c9:40:34:5b:
                    c1:2b:f3:11:d5:88:0e:96:20:d3:b9:2c:58:d3:bd:
                    b2:9e:12:bf:9c:8d:40:4f:7c:e7:a3:cb:aa:fb:f7:
                    e1:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FD:D4:B4:F4:1F:EA:6A:C3:72:B4:7C:6C:2F:0B:F3:4D:8C:00:32
            X509v3 Authority Key Identifier:
                keyid:FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:27:37:ab:5d:e5:64:1a:20:a8:5a:bf:c7:4f:6b:42:e5:3f:
         93:41:b7:ee:60:58:17:7e:55:08:3e:fa:63:20:b9:5f:e1:e6:
         ac:dc:18:87:bc:28:ba:9e:bd:f3:ac:3f:01:7c:5a:4c:c8:5f:
         43:2f:3a:b7:50:20:41:72:2a:5c:75:99:0e:01:f4:29:41:ea:
         6f:ad:b0:6b:97:72:ca:32:a6:31:e0:5a:65:2e:7e:05:e6:14:
         ff:02:ec:1b:ea:c5:52:7f:15:fd:10:d5:6f:c1:36:b5:61:aa:
         15:28:df:bc:ae:92:0e:02:5b:af:4d:d7:d5:24:af:68:2b:bc:
         17:23:91:ac:22:8e:6d:f6:83:45:c3:c7:b2:d6:82:7a:c2:c0:
         ff:d8:06:a7:b9:ec:c6:b8:60:58:98:f8:88:5c:5a:e1:34:62:
         e0:42:dc:7b:7c:a3:fc:56:38:dd:fc:c7:ec:4f:9b:d0:c9:29:
         74:33:e3:13:b6:ec:8f:4e:c2:91:9a:cc:7f:95:f8:c7:84:4b:
         f5:78:6e:59:32:66:70:90:0b:8f:39:5b:2b:43:28:17:19:25:
         7e:32:f5:7a:2a:71:26:ac:2c:98:94:8b:7a:6b:d3:07:85:35:
         75:40:dd:cb:6f:df:0f:06:5b:68:87:4b:13:bf:e6:c5:67:81:
         c4:1e:72:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 02:23:39 2024 by rpki-client on console-fra.rpki-client.org