Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
File:                     xSvyehTUxJuqAvCZWQ287LDgS5c.mft (raw, json)
Hash identifier:          GoDuTjNYdAvY4SZRNVhw51PHoUr52S7+iH9GEct+kyg=
Subject key identifier:   AB:90:D6:0F:E4:69:A7:4B:AD:8A:B6:34:10:18:42:01:94:85:99:90
Authority key identifier: C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97
Certificate issuer:       /CN=F36E8936AR/serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
Certificate serial:       0217
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
Manifest number:          0216
Signing time:             Mon 03 Jun 2024 02:03:30 +0000
Manifest this update:     Mon 03 Jun 2024 02:03:30 +0000
Manifest next update:     Wed 05 Jun 2024 02:03:30 +0000
Files and hashes:         1: xSvyehTUxJuqAvCZWQ287LDgS5c.crl (hash: m4FS40rUUwVRlDvkYXLGFTIB+RnQ6sKkNyehpcLyYno=)
                          2: DC60099290ED11EDA023F07CF1222468.roa (hash: 9KneDc8AxCXKlLKwihUlSkgU/m9aNJKS4oxTHOBZ0ns=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
                          rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 535 (0x217)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8936AR/serialNumber=C52BF27A14D4C49BAA02F099590DBCECB0E04B97
        Validity
            Not Before: Jun  3 02:03:30 2024 GMT
            Not After : Jun  5 02:03:30 2024 GMT
        Subject: CN=665d2472-be3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:8b:ec:1b:cd:49:23:d7:b7:c6:18:a4:95:ce:
                    c0:01:d7:79:1d:0c:8e:bc:99:5d:f9:0c:01:6a:1c:
                    9a:54:0e:ae:dd:18:49:97:f1:af:6d:13:30:f0:2c:
                    08:16:f5:70:8a:ba:3f:bb:a4:41:bc:31:59:93:83:
                    77:b7:85:83:8f:3d:31:5b:96:d1:ed:bb:d4:79:c5:
                    91:06:0b:63:1f:c5:e0:c1:7a:5e:d2:fd:c2:fd:d1:
                    87:cc:2d:84:78:b1:5e:06:a5:84:8f:d2:0e:4d:00:
                    07:15:ff:99:20:34:4f:87:a9:1a:2f:dd:0e:22:6e:
                    4e:2f:57:bc:78:45:b3:77:a9:2a:5b:d9:c6:17:82:
                    aa:e5:d0:68:55:34:ed:a7:a8:3c:2d:49:30:f4:45:
                    24:e8:6b:65:f1:e0:9c:36:64:d8:e3:d8:ab:95:21:
                    67:99:55:a5:5b:7f:70:eb:d0:e8:75:c0:0c:02:6e:
                    a5:cc:e5:c8:94:5b:57:88:d4:76:b7:b4:ea:a5:9a:
                    69:bf:59:06:da:90:d3:95:7e:02:3d:24:c9:20:66:
                    9b:c1:af:91:26:d1:23:19:dc:98:a7:72:da:42:7d:
                    ac:f6:c5:90:78:76:45:62:b9:c6:f2:5c:e6:ef:9c:
                    74:2d:51:fd:bb:48:44:16:f9:24:4d:2f:92:5f:83:
                    9e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:90:D6:0F:E4:69:A7:4B:AD:8A:B6:34:10:18:42:01:94:85:99:90
            X509v3 Authority Key Identifier:
                keyid:C5:2B:F2:7A:14:D4:C4:9B:AA:02:F0:99:59:0D:BC:EC:B0:E0:4B:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xSvyehTUxJuqAvCZWQ287LDgS5c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8936/91B48D0690EC11EDA9E342F8F1222468/xSvyehTUxJuqAvCZWQ287LDgS5c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:fe:7a:00:2d:52:d2:07:f4:b6:f6:92:9d:81:a7:6d:3d:96:
         40:4b:d5:37:6c:a0:d5:71:a5:36:7d:41:ae:9e:64:95:e2:aa:
         9c:89:b9:ec:78:75:03:c6:b4:c3:7e:a9:4b:f3:fa:d8:90:7c:
         be:27:3c:a6:54:d6:7d:07:76:7e:3d:ca:01:45:5a:10:99:aa:
         24:37:5b:ea:19:45:da:32:71:9f:4e:0f:51:b2:d9:43:9d:70:
         01:12:90:2a:b0:5b:13:90:fa:85:36:71:d2:90:b1:8c:1d:44:
         a4:0b:4c:e2:db:4e:97:98:c3:31:d4:39:16:13:61:06:e4:4c:
         78:85:ce:44:b3:b4:12:f6:e4:a4:bd:9b:36:83:ea:37:0a:53:
         4e:69:4a:e0:08:2b:ec:e2:a9:49:5b:3c:82:90:6f:ba:d4:f4:
         e1:b6:52:1d:c8:ce:b5:91:ea:f8:6f:d5:6f:24:dc:a8:4f:4d:
         52:72:0c:43:28:a8:0f:98:6f:50:98:f0:d0:a9:10:6e:36:46:
         e7:4c:6f:7f:a6:aa:12:2b:72:99:ef:d2:99:8b:22:97:61:c1:
         12:00:f4:fe:6a:90:fb:9c:f0:ec:6a:09:08:55:7e:3b:65:ac:
         75:60:b9:e1:6e:f9:40:d2:fd:54:31:73:3f:c5:c7:0c:54:6b:
         9e:0e:06:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:58 2024 by rpki-client on console-ams.rpki-client.org