Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
File:                     HNlmJ3URky060f0tMBT24WjMSOU.mft (raw, json)
Hash identifier:          AsCGzKuZ9Q9eaRehfth957h8iMA0+1BOwhhXtkH0SAQ=
Subject key identifier:   EE:C5:DA:5F:91:A4:CB:3A:01:87:C8:08:80:82:BC:7E:B3:46:60:F2
Authority key identifier: 1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5
Certificate issuer:       /CN=F36E2B69AF/serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
Certificate serial:       018C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
Manifest number:          018B
Signing time:             Mon 03 Jun 2024 02:14:03 +0000
Manifest this update:     Mon 03 Jun 2024 02:14:03 +0000
Manifest next update:     Wed 05 Jun 2024 02:14:03 +0000
Files and hashes:         1: HNlmJ3URky060f0tMBT24WjMSOU.crl (hash: J1a2IZyQqe4gmSN4XlMFpfdg+RQMZmrNs7VSDstKDYQ=)
                          2: 14217AF4FD4611EDACE0A4484AD9E6FC.roa (hash: scusLfpX0zDQtYPg/Gz0vTNJwugRyOQOlFnS4UEvDsE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B69AF/serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
        Validity
            Not Before: Jun  3 02:14:03 2024 GMT
            Not After : Jun  5 02:14:03 2024 GMT
        Subject: CN=665d26eb-601f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ec:db:6d:e5:cf:53:9c:da:28:f7:0a:77:3f:
                    c1:6b:9b:4f:57:90:01:c7:01:ae:c4:78:fc:ce:52:
                    88:78:ae:48:03:7d:da:24:9a:69:8d:96:10:b5:94:
                    a5:63:7e:28:df:7e:9d:a3:9e:c8:08:10:7d:f9:08:
                    ee:6e:a1:b8:87:34:a8:29:ec:27:37:75:ed:85:81:
                    44:44:f9:9d:0c:72:1e:9d:c9:e7:ea:26:72:9e:8f:
                    0f:ec:75:37:51:32:02:fc:0b:4f:52:f4:95:42:d1:
                    8e:44:c6:ef:c5:96:2e:e2:af:95:95:35:d7:83:69:
                    b9:7f:52:83:12:88:01:43:79:a8:55:32:7a:92:8c:
                    21:a3:44:e9:3d:22:82:e9:df:f7:9d:10:9f:48:76:
                    f2:c9:b7:3e:29:a1:15:d8:32:33:d0:83:cd:3f:64:
                    b3:5d:cb:0a:76:96:3b:9f:28:c7:40:83:10:1c:e6:
                    39:43:d2:81:30:1d:33:57:0b:b1:30:df:cd:aa:4a:
                    06:48:07:d0:2d:a6:1c:aa:d4:13:b8:61:e4:35:67:
                    36:09:5b:65:4f:81:65:01:4e:5b:6d:22:84:40:22:
                    0a:d8:5f:fd:51:68:7a:53:bb:5a:54:f7:02:50:27:
                    7a:6e:c1:46:95:a0:4b:4b:c6:02:78:6e:41:ea:85:
                    ac:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C5:DA:5F:91:A4:CB:3A:01:87:C8:08:80:82:BC:7E:B3:46:60:F2
            X509v3 Authority Key Identifier:
                keyid:1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:cb:3e:07:ac:18:c9:08:79:bf:98:b5:d6:07:48:73:b6:4e:
         df:13:f4:09:62:3a:01:68:88:87:54:ce:a9:50:22:ac:e1:02:
         ec:61:d2:06:4c:51:7f:17:6e:a3:f6:b1:67:b4:e1:f3:73:26:
         9e:88:64:ab:d0:eb:ba:80:76:69:73:05:4c:82:bf:4b:c6:fd:
         5d:b2:c2:ba:6c:00:b9:2a:e0:4f:f5:4c:bd:ec:33:4e:e2:00:
         09:b5:88:b7:3b:77:43:93:c9:6c:07:be:69:02:06:58:63:3f:
         45:6f:d3:42:c5:fc:bf:12:d8:78:3c:bb:7d:72:98:e4:0b:54:
         f6:b1:bb:69:d8:53:fb:1f:b1:67:6b:5e:58:77:c7:43:d9:0b:
         85:27:4a:61:ab:bd:17:9f:a3:fd:a4:61:9e:b7:95:04:46:c0:
         5b:f0:05:ef:bf:66:47:b4:1f:f7:e8:b4:c3:cb:dc:26:28:27:
         16:71:77:44:94:a8:c3:9c:c5:1e:35:68:0c:6e:ed:c1:0f:d8:
         a9:0e:32:bf:fb:18:83:7f:9e:87:fa:27:22:90:06:bf:79:54:
         d2:02:9c:84:8d:4f:8d:99:e6:36:47:32:34:67:fb:0b:d2:4e:
         45:ba:54:df:31:6a:5e:b6:a3:8a:5c:01:27:93:1c:1e:64:c9:
         88:78:c3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:58 2024 by rpki-client on console-ams.rpki-client.org