Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
File:                     xkc2Jerv1nNskH0jHdnF29ufXqs.mft (raw, json)
Hash identifier:          I8LKuJACXiLImnQqV5cSuk6FWEMLnc67L5eq95d17pw=
Subject key identifier:   3B:54:CB:41:9C:70:76:34:3C:9B:DF:B1:DD:B0:7D:47:42:98:3D:7F
Authority key identifier: C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB
Certificate issuer:       /CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
Certificate serial:       0134
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
Manifest number:          0134
Signing time:             Mon 03 Jun 2024 02:21:15 +0000
Manifest this update:     Mon 03 Jun 2024 02:21:15 +0000
Manifest next update:     Wed 05 Jun 2024 02:21:15 +0000
Files and hashes:         1: xkc2Jerv1nNskH0jHdnF29ufXqs.crl (hash: AOlaQgtJsgo1kFmQxPnoKDUDmdZbj66zShPsGRNPGAw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
                          rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F731FAR/serialNumber=C6473625EAEFD6736C907D231DD9C5DBDB9F5EAB
        Validity
            Not Before: Jun  3 02:21:15 2024 GMT
            Not After : Jun  5 02:21:15 2024 GMT
        Subject: CN=665d289b-e689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:63:bd:cc:6a:79:94:e4:21:98:da:48:0d:f0:
                    17:84:ff:46:30:57:fb:72:44:cc:9d:43:c8:58:c0:
                    23:d6:7e:08:2e:22:67:f4:7f:c8:43:bc:69:61:10:
                    60:5d:bd:75:5b:24:bd:fb:8e:0f:15:aa:34:ee:e3:
                    be:a6:9a:d8:50:5e:96:15:b9:a5:f0:a4:8e:58:af:
                    f4:45:1a:5c:2f:4f:95:3b:df:b1:ee:c3:c8:55:4e:
                    98:58:ca:93:a8:bb:a2:f4:7e:23:22:96:61:ae:74:
                    eb:24:e6:ca:71:f2:c7:e4:b5:a0:db:9c:48:00:e3:
                    b0:ee:3f:92:dd:ed:51:9a:4b:f2:b0:dc:4f:0d:49:
                    8e:9a:b6:2e:c3:27:14:3f:d7:bf:c7:80:da:6d:b2:
                    c6:9a:b3:6a:c0:69:94:89:4b:90:c6:d0:17:3a:dd:
                    14:2f:cf:df:4e:a1:40:8b:3e:d3:96:5d:d7:0b:0a:
                    28:9a:30:ea:1c:f1:f1:72:91:fd:c1:f1:97:d4:7d:
                    7b:6d:d7:40:e5:cd:a7:4d:b4:45:8f:79:56:c5:f4:
                    47:c0:e5:2f:7e:2d:66:8d:7d:2d:e4:6d:ac:7b:bb:
                    8f:b3:01:ac:02:50:53:d1:96:22:a9:76:b7:bd:33:
                    11:ca:a7:8c:0a:5c:0e:68:58:47:74:62:0b:15:22:
                    6d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:54:CB:41:9C:70:76:34:3C:9B:DF:B1:DD:B0:7D:47:42:98:3D:7F
            X509v3 Authority Key Identifier:
                keyid:C6:47:36:25:EA:EF:D6:73:6C:90:7D:23:1D:D9:C5:DB:DB:9F:5E:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xkc2Jerv1nNskH0jHdnF29ufXqs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F731F/9340D826379711EE96FB7A314AD9E6FC/xkc2Jerv1nNskH0jHdnF29ufXqs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:96:37:c3:28:51:0d:4a:32:fd:29:a2:95:ee:aa:20:8c:8c:
         bd:65:4e:2e:b8:da:d1:15:e0:4d:49:7e:7e:58:0d:d6:7d:ab:
         24:64:45:fd:46:95:26:c0:a3:fa:17:71:7d:05:a4:56:cd:50:
         69:bf:6d:70:33:c9:4a:5e:a8:b1:eb:c5:ed:ab:51:e4:ae:f4:
         61:2b:d4:2c:06:df:36:15:9f:99:ec:f3:63:ad:e2:26:e1:fc:
         44:69:03:99:a1:2b:91:d7:66:9b:59:2c:5d:43:40:d2:43:6a:
         e8:73:99:6e:66:8a:ee:63:2a:56:a7:7c:1f:4f:6a:c1:42:bb:
         9a:2e:ad:c0:22:2a:bf:d3:6d:35:f3:72:80:ac:de:8f:71:2f:
         c9:db:e8:ff:f6:f8:76:fa:5e:ff:94:67:d7:f3:b5:5b:73:34:
         35:33:34:43:f0:f0:e6:4b:03:bd:42:64:a8:2a:ac:ab:b4:5a:
         90:7d:98:d5:f1:6a:34:23:e8:4a:7a:64:fe:63:40:96:c5:f2:
         b8:47:78:ed:f4:94:1c:25:35:a5:61:8a:4e:f3:00:93:46:28:
         ec:39:32:70:ef:1a:9c:9f:94:16:35:5b:aa:f8:bf:75:07:b5:
         1a:b2:93:b3:15:ac:c9:29:b1:48:73:43:b0:98:23:16:05:df:
         cb:6e:f6:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:14:59 2024 by rpki-client on console-ams.rpki-client.org