Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
File:                     M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft (raw, json)
Hash identifier:          +1gKGMFv1/NlECDPxfgz/hRNxWrcsYVxiZBUVJlFG8s=
Subject key identifier:   79:FF:12:F2:AE:8A:2E:2D:9E:E1:87:5E:75:43:E3:34:A3:90:AB:AB
Authority key identifier: 33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92
Certificate issuer:       /CN=F36E4CC6AF/serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
Certificate serial:       2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
Manifest number:          2B
Signing time:             Mon 03 Jun 2024 02:39:57 +0000
Manifest this update:     Mon 03 Jun 2024 02:39:56 +0000
Manifest next update:     Wed 05 Jun 2024 02:39:56 +0000
Files and hashes:         1: M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl (hash: KOqsD1sQMHFUlT91dX7R42m4EvvfqpwySPp3MYWOObI=)
                          2: C0E88DD6025E11EFB5BAAD30017001B1.roa (hash: DJWXY1V0N/SZP8fVnsyyzg0SRQs5AOjIUrDn4upoYrc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E4CC6AF/serialNumber=3394DF701923443C5F98F03DB7FF0573AEB76492
        Validity
            Not Before: Jun  3 02:39:56 2024 GMT
            Not After : Jun  5 02:39:56 2024 GMT
        Subject: CN=665d2cfd-d3fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9c:2e:2e:2d:a6:11:63:5a:35:58:63:1d:be:
                    db:58:7c:1d:ef:43:8e:1f:08:de:11:6a:7e:8f:84:
                    b5:e7:8c:09:1d:1e:b8:35:74:17:04:81:1c:42:e3:
                    f9:80:14:e5:82:f9:91:a4:56:03:60:2f:99:7d:3d:
                    6a:bd:f5:8b:ec:1d:7f:de:41:f2:17:9b:91:6a:e5:
                    31:2f:ec:31:23:83:a0:35:19:73:7e:da:4a:98:28:
                    cc:21:6a:a7:bb:43:ba:cf:d8:87:02:b2:2f:74:4d:
                    6f:00:bd:8c:09:9d:65:e6:01:12:fb:68:ce:25:e6:
                    ad:95:63:2c:ec:95:84:1d:04:82:ec:ac:df:bc:cb:
                    87:56:93:6a:38:d3:5f:b2:aa:2f:9b:fa:e7:53:13:
                    29:74:d4:42:90:dc:15:9b:35:3c:1f:49:44:82:d0:
                    f4:48:93:ba:4c:bd:40:36:cd:10:c6:91:79:97:b8:
                    b7:f7:de:97:88:8c:3e:ff:35:a1:e4:07:3e:e1:4a:
                    b0:1b:f1:f3:9d:dd:3c:ec:b7:a6:ae:47:32:eb:5e:
                    7a:4f:1d:2e:b1:31:72:d2:9b:2a:ec:78:45:9f:f3:
                    0f:13:d3:df:4e:84:de:ab:c6:15:de:67:de:b9:59:
                    c5:b4:c3:78:4b:92:43:28:2d:6b:c6:bd:75:d7:12:
                    39:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FF:12:F2:AE:8A:2E:2D:9E:E1:87:5E:75:43:E3:34:A3:90:AB:AB
            X509v3 Authority Key Identifier:
                keyid:33:94:DF:70:19:23:44:3C:5F:98:F0:3D:B7:FF:05:73:AE:B7:64:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M5TfcBkjRDxfmPA9t_8Fc663ZJI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E4CC6/3FBFCE2E025711EF893557F4007001B1/M5TfcBkjRDxfmPA9t_8Fc663ZJI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:13:e3:37:8f:fd:0f:e8:3e:86:64:b0:bb:17:cf:28:9c:6b:
         fa:54:ca:82:82:c3:4a:be:85:9a:fc:a8:e8:e6:bc:68:23:4e:
         e5:96:54:cc:a4:fd:09:8f:93:51:4c:b4:48:87:fc:6f:f5:c8:
         dc:12:00:1f:11:82:c1:52:4a:43:6c:58:2c:fe:d8:72:82:d6:
         0f:7d:1e:ab:2e:8f:e5:e0:c1:bd:53:37:e9:b7:40:3c:bb:89:
         4e:ef:a8:0a:dc:94:2c:37:70:62:93:30:d7:bc:b4:67:5a:63:
         4b:5b:9b:9b:60:7a:af:fb:e1:41:ed:37:fb:9b:05:03:0a:a9:
         4f:0d:0b:75:8d:d3:0a:aa:74:2d:81:24:3c:86:cb:6f:41:e4:
         52:64:cd:c1:9c:75:48:a2:2e:cc:cc:b6:44:99:22:41:e2:4b:
         9d:a5:16:91:da:88:a5:80:08:15:b0:29:12:cf:8f:c5:e7:7c:
         b7:8c:d3:94:de:04:bf:8c:6a:21:b1:57:47:44:a0:f3:74:6e:
         a9:1a:19:d3:55:4e:d2:49:30:b3:f4:1c:2f:eb:05:b1:6f:c9:
         e5:23:57:1d:fe:13:07:e4:e7:12:82:d0:98:e5:8a:bc:5e:57:
         72:f5:4f:43:09:68:0a:38:8e:ff:12:57:3f:2d:e9:82:fd:74:
         40:bb:87:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 03:37:16 2024 by rpki-client on console-fra.rpki-client.org