Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
File:                     4TG21PnDQatckQb6eKacm4gJKw8.mft (raw, json)
Hash identifier:          YekyV29u5YseF+dHvPmwgUzTrD6kcsyLxsdMtLSjs4k=
Subject key identifier:   FA:53:96:08:C1:FF:59:5A:46:E1:77:A1:10:88:80:B7:0B:AD:00:22
Authority key identifier: E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F
Certificate issuer:       /CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
Certificate serial:       3C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
Manifest number:          3B
Signing time:             Mon 03 Jun 2024 02:38:37 +0000
Manifest this update:     Mon 03 Jun 2024 02:38:36 +0000
Manifest next update:     Wed 05 Jun 2024 02:38:36 +0000
Files and hashes:         1: 4TG21PnDQatckQb6eKacm4gJKw8.crl (hash: ZkOno8kWBAfi3KvVqy798o5PV+GEQIOdBH08AayuOjo=)
                          2: 5A1C572CF8AE11EE85EDAC3B017001B1.roa (hash: Nhi/kAnQFZgp/t5smGUgjSQeAv2V3l/PSJmDi9Vk5T0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
                          rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBC4BAR/serialNumber=E131B6D4F9C341AB5C9106FA78A69C9B88092B0F
        Validity
            Not Before: Jun  3 02:38:36 2024 GMT
            Not After : Jun  5 02:38:36 2024 GMT
        Subject: CN=665d2cad-bead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6e:ed:9b:74:d4:19:86:35:5d:88:cf:2a:89:
                    26:f2:da:ce:f2:5d:bc:74:c4:9a:69:1d:a1:15:29:
                    e1:c1:77:ef:2b:22:16:94:96:ef:7e:32:c2:3e:b0:
                    1f:07:fe:ec:9e:76:c0:07:0e:3e:6a:a0:54:2d:80:
                    9d:c6:00:de:1c:25:ea:52:0e:4b:2f:74:75:0b:ae:
                    72:36:46:f8:ab:13:2b:1f:3d:a9:04:59:f6:9f:8d:
                    cc:29:8f:0b:9f:f2:c0:aa:31:56:58:bb:3f:3f:b1:
                    2a:aa:9a:f9:54:69:fa:d2:4c:42:66:ae:f3:bb:9c:
                    50:e2:ab:a8:9a:f3:5a:3a:8b:1a:eb:af:49:1a:06:
                    38:e2:61:a5:68:57:3b:9f:af:37:d1:e1:6d:88:36:
                    b0:32:12:19:57:38:0f:2a:d0:c9:79:83:50:44:4b:
                    bf:0e:2f:4a:82:f9:63:d5:5a:e1:71:bf:88:ad:d7:
                    52:50:b5:8e:91:32:5c:d0:6d:b0:1d:c0:9a:8d:80:
                    2b:e9:e5:b7:71:42:75:44:5c:bb:bb:cc:8c:e1:28:
                    77:9f:6c:26:3f:74:88:44:33:05:65:00:76:be:30:
                    83:8e:a6:ac:ce:bd:97:99:19:73:68:0e:1d:04:24:
                    df:6d:1a:4f:86:6d:53:18:9b:88:f9:6e:98:80:6c:
                    e5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:53:96:08:C1:FF:59:5A:46:E1:77:A1:10:88:80:B7:0B:AD:00:22
            X509v3 Authority Key Identifier:
                keyid:E1:31:B6:D4:F9:C3:41:AB:5C:91:06:FA:78:A6:9C:9B:88:09:2B:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/4TG21PnDQatckQb6eKacm4gJKw8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBC4B/358103AEF8A911EE96D1BF0F017001B1/4TG21PnDQatckQb6eKacm4gJKw8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9a:1a:2c:83:f9:63:15:73:c2:c2:26:a2:66:00:17:6c:ce:
         fe:19:3b:ad:b3:a9:f6:14:84:f9:0a:86:f1:e8:04:1d:98:50:
         84:81:a8:cd:be:52:34:5c:51:9b:44:ab:c7:a4:31:c8:aa:08:
         50:cf:f2:be:a6:6e:7c:21:27:55:c8:dc:f0:5d:fa:d6:74:3b:
         45:7d:91:2c:14:93:d3:20:73:b4:03:15:d2:e2:0f:ca:a1:81:
         98:f7:98:9f:24:57:12:91:bd:73:22:9e:e5:fb:06:45:da:2f:
         e2:18:12:4b:2b:78:c1:6d:7b:81:4a:ce:5d:76:1a:12:b1:37:
         4f:76:49:3b:28:f4:2e:21:c0:fe:15:06:29:ab:fb:fd:b4:93:
         d0:cf:18:38:45:a1:51:5a:0c:0e:d9:a8:d2:5f:1b:59:20:2b:
         ad:85:3e:89:fd:80:63:97:7d:ea:bb:9f:fe:b0:82:6b:d4:6b:
         9c:c1:f7:50:f8:7f:99:e5:04:b9:e8:1f:35:82:e8:5b:f5:89:
         67:69:04:e9:d4:46:63:9d:fc:8c:83:4e:28:e9:bb:06:5f:59:
         c6:87:b2:55:3c:40:aa:36:22:49:1c:77:1c:34:04:4e:fb:d8:
         cd:6d:30:a7:81:bb:4d:f2:43:70:47:fc:21:19:e4:24:42:e4:
         05:d5:8c:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 03:37:14 2024 by rpki-client on console-fra.rpki-client.org