Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft
File:                     KT5c_1MDCLfw9rieE_cMZPXhCZo.mft (raw, json)
Hash identifier:          lOfvbBHQGmn3skj2kpbrhuU3nkGaPxe5Fl/C7VoQjq4=
Subject key identifier:   C1:F1:3B:E2:F5:30:AA:EF:41:D3:FF:1B:AC:18:2C:EE:FC:6F:E3:AF
Authority key identifier: 29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A
Certificate issuer:       /CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
Certificate serial:       0223
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft
Manifest number:          021A
Signing time:             Mon 03 Jun 2024 02:04:14 +0000
Manifest this update:     Mon 03 Jun 2024 02:04:13 +0000
Manifest next update:     Wed 05 Jun 2024 02:04:13 +0000
Files and hashes:         1: KT5c_1MDCLfw9rieE_cMZPXhCZo.crl (hash: 5Eytc0D930wi/h40lTTuIRqHcUYiKefM7YqcVtTxRag=)
                          2: B6548B58C8B711EEB36FF975775412E6.roa (hash: 3kel/ff953pTb6lX7OnFNZIHqiULDXIWcEQcRIdsUPA=)
                          3: 47D4CC10C8B711EE87CD4075775412E6.roa (hash: J31xrW16WKZn701fFMVb71cZYUCs5oxGgcow3BDnBBQ=)
                          4: 72E7E8FEC8B911EEB89ACB78775412E6.roa (hash: Pvc4b/7NdS42QY2a3R0WX4U0kcVQNihp6t9Dz0zhwVA=)
                          5: 42D8842AC8B911EEB1A16678775412E6.roa (hash: C3mZs5QHOXfC0IsvIIhi5X1Y2fyChZBjo50YoxUFcOU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 547 (0x223)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
        Validity
            Not Before: Jun  3 02:04:13 2024 GMT
            Not After : Jun  5 02:04:13 2024 GMT
        Subject: CN=665d249e-03b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:72:28:76:d1:48:65:a9:b2:9f:6f:f9:c0:eb:
                    50:f4:d2:b0:66:24:d5:bb:e2:3e:b6:79:03:c6:15:
                    3d:30:0a:61:c5:e4:45:f8:3c:d2:7e:c7:63:ad:1c:
                    44:12:6e:db:2f:27:66:f4:7a:22:67:69:f6:57:72:
                    e4:93:24:1e:c1:6f:e1:51:ad:65:e0:56:4c:b0:34:
                    4f:79:17:0b:64:f6:88:51:14:26:c4:cc:64:e1:24:
                    d9:16:02:9b:cc:90:78:91:a3:10:88:91:cb:2d:5d:
                    94:a6:cc:88:a0:6e:8b:da:f7:6f:f4:5a:2c:e9:fb:
                    2b:45:45:2a:fb:cc:2c:b4:4b:88:40:90:98:8d:8c:
                    6e:90:41:63:1a:55:a1:49:53:db:4a:36:0a:e7:63:
                    e9:e4:dd:b0:67:f9:c9:99:eb:eb:39:04:7e:f6:03:
                    bc:f3:d7:29:50:cf:38:f4:a2:3b:84:f7:31:39:bf:
                    cc:91:56:cd:db:c3:ef:83:4a:de:21:e3:c6:14:99:
                    6c:21:f3:fa:c7:87:02:e2:13:b9:34:6f:9c:3f:3a:
                    77:eb:a9:03:8b:cb:d2:77:02:64:03:84:a8:af:6a:
                    d5:c6:a2:fc:83:3d:73:f5:3a:48:ae:cb:0a:6c:7f:
                    84:45:a4:c6:30:b4:cf:a0:42:7f:37:23:4c:3d:f7:
                    7e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F1:3B:E2:F5:30:AA:EF:41:D3:FF:1B:AC:18:2C:EE:FC:6F:E3:AF
            X509v3 Authority Key Identifier:
                keyid:29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:b1:6e:5f:e1:fd:6f:74:5c:67:1f:1c:4c:15:2b:bb:3e:85:
         be:e6:0b:5f:03:58:aa:9c:91:60:f0:fe:47:ec:0d:fd:73:19:
         ff:70:3c:3b:7f:75:7e:e6:30:af:5b:94:24:e0:80:94:ef:b4:
         3d:fe:cb:43:b7:33:5f:a7:40:5c:e2:57:41:a2:ce:2e:31:b6:
         b3:f8:97:2f:66:5b:2d:f6:97:6c:74:57:a5:e7:e2:8d:8e:83:
         ef:f3:a4:8d:ed:3e:5a:09:e1:ba:39:6b:98:98:33:3a:c7:9b:
         aa:75:a0:ca:6c:54:f2:94:23:d2:2b:ce:2e:61:79:37:29:35:
         22:77:53:b3:76:2b:29:ba:f1:97:cb:5a:43:9e:c2:49:14:27:
         7b:78:fa:02:ca:7e:03:95:3e:c9:69:b4:ec:d2:dd:50:c4:1d:
         c6:3f:1d:2e:03:7f:18:01:8f:c5:39:37:1b:dd:bc:f2:da:71:
         78:f0:6a:0a:01:8c:e5:71:10:14:f0:20:96:d8:15:0c:ca:61:
         72:31:5f:40:0c:17:4e:ee:a2:bf:ef:67:84:f8:1a:10:69:4f:
         46:80:2c:91:5b:22:67:7d:c5:d5:9d:89:b1:ae:17:d8:ae:4d:
         27:3b:bf:f3:9e:16:b5:f1:e5:5f:d9:eb:c5:39:58:47:60:e9:
         da:67:9f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:51 2024 by rpki-client on console-ams.rpki-client.org