Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
File:                     G-LsVuSB2cQGqMGrnFIvumhbdwk.mft (raw, json)
Hash identifier:          DstxNrQvVHua0BoMxxg4zYRx6j7osxFGoIZmCqGjWr8=
Subject key identifier:   A1:E8:EB:0B:01:E8:4B:AE:98:22:02:0C:54:F8:FD:4E:3E:73:D8:93
Authority key identifier: 1B:E2:EC:56:E4:81:D9:C4:06:A8:C1:AB:9C:52:2F:BA:68:5B:77:09
Certificate issuer:       /CN=F36C8DB2AF/serialNumber=1BE2EC56E481D9C406A8C1AB9C522FBA685B7709
Certificate serial:       083A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
Manifest number:          0835
Signing time:             Mon 03 Jun 2024 00:51:21 +0000
Manifest this update:     Mon 03 Jun 2024 00:51:21 +0000
Manifest next update:     Wed 05 Jun 2024 00:51:21 +0000
Files and hashes:         1: G-LsVuSB2cQGqMGrnFIvumhbdwk.crl (hash: TqT7ZV2Q5OLvtGrYyNJlXfClR2ATBIrZ2tgGRz+L4ec=)
                          2: 3A5D54C8064011EF8CD97956017001B1.roa (hash: 9/mp/JPe+mMfGz2E8/eg18PGdN/V1h9ltv/VJ2aQXwQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2106 (0x83a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8DB2AF/serialNumber=1BE2EC56E481D9C406A8C1AB9C522FBA685B7709
        Validity
            Not Before: Jun  3 00:51:21 2024 GMT
            Not After : Jun  5 00:51:21 2024 GMT
        Subject: CN=665d1389-f778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:61:1c:43:ca:e7:69:b6:dd:b4:a3:1d:f4:34:
                    f1:20:b3:4c:1a:4c:10:4f:aa:d5:fb:a4:ab:ea:72:
                    cb:76:f0:ba:d1:ea:8d:54:41:01:69:94:fa:cd:34:
                    eb:7c:8f:79:97:6d:d7:7f:10:63:7b:0e:be:51:56:
                    52:10:df:1f:6f:48:d5:f1:a9:33:5f:14:29:81:f5:
                    fb:68:54:93:d0:e7:d4:90:94:d8:fe:6a:ae:90:1a:
                    ba:d6:32:a2:39:a2:f1:0e:3e:10:e7:89:7b:94:7c:
                    e0:47:54:55:f6:10:93:05:61:8f:f6:f3:59:cb:01:
                    fc:89:b1:d5:69:b7:cf:81:3e:cf:b8:c3:2c:28:06:
                    37:58:80:da:ce:ac:28:a0:03:e2:a7:f5:56:51:ff:
                    ce:bd:94:66:06:5b:ba:72:64:d7:8b:cf:f4:f4:51:
                    fa:0a:c1:89:00:d3:bd:d1:16:c7:0c:b6:01:5c:68:
                    29:69:06:f8:77:8c:a8:c1:a5:74:c7:36:f9:5c:d6:
                    ec:cd:34:67:db:d0:42:70:d4:1e:d2:be:6e:52:c3:
                    59:a3:de:89:d7:8b:06:45:b9:be:48:4a:c4:3f:c0:
                    04:88:c5:ee:30:af:26:90:23:1b:1e:03:48:43:a5:
                    53:2f:72:51:46:53:51:fc:21:fc:f8:1e:ae:be:a1:
                    6d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E8:EB:0B:01:E8:4B:AE:98:22:02:0C:54:F8:FD:4E:3E:73:D8:93
            X509v3 Authority Key Identifier:
                keyid:1B:E2:EC:56:E4:81:D9:C4:06:A8:C1:AB:9C:52:2F:BA:68:5B:77:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:5e:0c:e5:af:9b:7f:8e:5c:a5:f3:21:9d:96:6c:7a:dd:7b:
         ea:4d:be:dd:d0:ca:ae:65:9e:ce:85:5a:ca:a3:d1:53:4a:dc:
         de:1c:b9:4f:a9:fb:5d:b8:ff:87:56:6a:52:54:78:93:19:dd:
         c5:a7:c5:60:53:8b:27:05:29:f4:20:2a:f5:7b:ab:af:a9:98:
         fa:18:1c:96:29:a2:45:12:80:92:23:f1:d8:2f:5c:a6:0a:ad:
         4b:d8:46:78:85:9c:74:f1:26:11:b4:80:00:ab:65:3d:e0:3e:
         e6:b6:63:01:61:ad:1b:cf:97:79:8d:8a:6a:ac:03:77:8e:a3:
         18:b1:9c:67:21:91:69:b1:aa:1a:1d:ae:af:86:8b:72:f6:dd:
         df:7f:49:81:d2:0c:e7:93:22:15:2e:5f:64:8e:a3:27:81:9c:
         4a:37:01:a7:4e:9e:61:bf:96:4a:08:da:7b:70:3c:08:c4:db:
         3f:00:4f:01:b8:47:7a:d1:9b:a5:13:cd:91:d9:b8:f3:93:96:
         1e:f2:7c:12:95:6a:32:f7:da:d5:a2:09:46:c4:d6:4f:66:ab:
         3d:8d:26:69:78:8c:57:b2:c5:1b:61:95:37:93:6e:11:9a:53:
         02:57:6c:33:dc:59:9b:18:a2:c9:28:89:52:f8:78:e9:1a:21:
         8b:69:9c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 02:23:40 2024 by rpki-client on console-fra.rpki-client.org