Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
File:                     nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft (raw, json)
Hash identifier:          8WQCYhw2HaUzc5vmi+fo8B40H28i73S8raKSI8eZDpI=
Subject key identifier:   2C:90:DD:E0:1F:85:EC:B4:9B:40:49:43:78:6B:17:6F:F8:1E:49:B3
Authority key identifier: 9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0
Certificate issuer:       /CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
Certificate serial:       0136
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
Manifest number:          0135
Signing time:             Sat 15 Jun 2024 02:20:26 +0000
Manifest this update:     Sat 15 Jun 2024 02:20:25 +0000
Manifest next update:     Mon 17 Jun 2024 02:20:25 +0000
Files and hashes:         1: nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl (hash: DCiskgSO9bZH3WCHV7xYU4s/Rn2HGFTaR4XOLXTboG0=)
                          2: CC9C343441E311EEA3DA33544AD9E6FC.roa (hash: O2w06Y8bPWrlQlM0KiCR/CDJJh42Y1TIJDGWDlX/VL0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 17 Jun 2024 00:25:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE42DRI/serialNumber=9D85DAD02FC177A40E9B907023706F3F97744DA0
        Validity
            Not Before: Jun 15 02:20:25 2024 GMT
            Not After : Jun 17 02:20:25 2024 GMT
        Subject: CN=666cfa6a-45f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b6:39:7f:ef:f6:63:fa:60:69:82:d2:5c:5e:
                    b8:60:39:99:ab:c6:85:ee:1c:d5:06:79:c2:02:a7:
                    5f:44:13:e2:4f:14:8b:c5:69:ef:68:a6:ad:81:44:
                    f0:dd:39:c2:9e:63:58:a3:6a:65:09:03:a4:7a:d7:
                    9c:e9:c6:c0:cf:28:65:2c:4a:db:36:b0:51:70:a1:
                    58:ea:09:0f:3c:54:fd:1d:8d:36:bb:2c:b9:e0:6f:
                    a5:94:5a:a9:f3:f7:3e:72:93:a0:fe:e5:66:5b:86:
                    d3:b6:47:ce:02:5c:fd:c1:cd:5e:f6:a3:e6:ec:64:
                    6c:9e:45:fe:6e:09:61:4c:d3:81:7c:83:82:01:bb:
                    0a:21:ce:40:33:89:3e:07:61:31:ae:03:1c:90:2a:
                    0d:ad:f3:70:b5:e9:b3:fc:b8:61:1a:89:a3:a1:e3:
                    0c:fc:52:1e:4b:9f:ab:3f:93:34:fe:d7:64:21:18:
                    2e:3b:05:b6:bc:c6:6c:0b:ae:95:f8:4d:a6:22:11:
                    ff:78:43:b9:61:9a:f8:63:92:b5:a3:28:47:78:89:
                    40:93:20:35:30:4f:dc:c2:3f:c5:cd:01:7d:c5:b9:
                    3f:b8:e6:6a:9e:a3:35:7b:a7:0a:75:4a:c1:ad:ac:
                    8a:c9:9b:bf:52:fb:34:ff:7d:e4:1f:91:3f:2e:85:
                    53:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:90:DD:E0:1F:85:EC:B4:9B:40:49:43:78:6B:17:6F:F8:1E:49:B3
            X509v3 Authority Key Identifier:
                keyid:9D:85:DA:D0:2F:C1:77:A4:0E:9B:90:70:23:70:6F:3F:97:74:4D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE42D/CC9AA0E641DA11EEB03EBE374AD9E6FC/nYXa0C_Bd6QOm5BwI3BvP5d0TaA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:6c:55:b0:59:4d:92:d2:22:09:23:da:b2:ea:8b:5d:5f:ec:
         2f:35:5b:69:19:75:bb:b8:b2:06:45:77:2d:37:02:ab:8d:08:
         6f:d6:e3:e7:2b:8b:35:27:93:ea:a8:a2:90:a1:c2:4b:da:af:
         32:03:8c:f0:e9:af:5a:58:d9:62:d4:20:8b:b6:e3:e5:fc:28:
         71:db:c2:6f:e7:01:82:ef:d2:5d:46:c6:a1:0a:a7:92:d9:76:
         0e:00:03:aa:eb:f0:5f:96:d9:df:d7:ab:2e:1a:8f:ee:b0:78:
         b9:af:76:44:c2:e3:ab:94:d7:14:41:0c:91:c9:31:a8:eb:c1:
         5a:7e:18:40:3b:52:66:fd:fd:15:c6:a4:59:e2:b8:5b:fa:dd:
         5a:fb:41:b2:55:cc:ad:93:6e:19:eb:b0:89:15:36:52:db:6e:
         b5:c1:cb:3e:f9:8a:05:d3:d1:92:23:41:07:40:71:74:a3:0e:
         3f:7e:87:63:54:67:5e:4c:9a:50:85:4e:9e:8a:cb:f6:9a:34:
         ae:11:8a:ff:54:e7:8f:57:85:6f:69:35:72:e6:3c:30:1a:3e:
         2b:dc:e0:f7:2f:a3:34:fd:30:de:7b:ba:73:d7:11:9b:9e:1c:
         fa:89:0d:a7:6e:17:ec:4b:e9:42:b2:e5:49:7c:3e:71:a7:04:
         f0:d9:94:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 03:05:54 2024 by rpki-client on console-fra.rpki-client.org