Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File:                     lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier:          uew7bMaiv/u9G5xUMFXYn++mIDL157Qa/qT6Ete0C5A=
Subject key identifier:   21:2C:09:70:C5:9F:29:58:4C:9C:53:A2:48:EA:C0:97:9C:75:6A:81
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer:       /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial:       0289
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number:          0288
Signing time:             Mon 03 Jun 2024 01:58:07 +0000
Manifest this update:     Mon 03 Jun 2024 01:58:06 +0000
Manifest next update:     Wed 05 Jun 2024 01:58:06 +0000
Files and hashes:         1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: FZM8O4tO3Vv2tQLu+5w3w4v22ZrABS3GrUO/gbUCIHY=)
                          2: 8FD98C2038B311EDAAA5E7DFF1222468.roa (hash: UXAWeOCC1criU7XL7P2zWbiZAhjMbu4dS0oFzWgmmoM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                          rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:16:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 649 (0x289)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
        Validity
            Not Before: Jun  3 01:58:06 2024 GMT
            Not After : Jun  5 01:58:06 2024 GMT
        Subject: CN=665d232f-453b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:cc:4e:d4:07:c7:59:37:cf:f6:96:c1:40:
                    4f:46:28:67:e3:a9:32:d8:c9:96:8b:af:96:29:a5:
                    14:d8:df:0e:19:b6:46:69:56:6f:7a:7d:08:d4:90:
                    30:8a:89:25:c0:7d:f5:c3:c5:cb:a6:20:4f:e2:c6:
                    08:66:70:4e:fe:67:75:8f:7e:9f:ba:f2:bc:2e:17:
                    c4:d5:3e:1c:01:a3:d7:96:e3:31:2c:d2:36:40:7a:
                    30:7c:5a:a5:19:68:38:ed:da:88:74:2c:9a:b1:e5:
                    44:d3:85:35:0a:3a:4a:f9:07:e3:55:f2:2c:26:d7:
                    f5:e4:36:42:aa:55:3a:d7:8a:1c:96:4a:e0:d4:e1:
                    12:15:00:0b:8c:8d:ae:82:4e:b3:b3:4c:40:7c:83:
                    08:7d:99:84:9e:7a:54:74:ea:2e:ac:28:94:88:1b:
                    fd:69:23:5e:bc:c8:7f:86:82:0d:9d:25:93:b5:db:
                    77:f2:47:f9:5e:94:22:a8:78:ea:66:b6:92:54:63:
                    05:7c:b2:65:6d:75:29:bf:77:46:ee:e5:49:00:df:
                    72:f1:35:8b:e6:8b:79:70:50:4a:6e:47:4a:2a:05:
                    af:21:88:ca:a1:d9:1b:e8:db:94:de:43:1b:b5:99:
                    4f:91:c6:71:ca:5a:7f:95:07:f2:d3:72:c3:c7:90:
                    9f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2C:09:70:C5:9F:29:58:4C:9C:53:A2:48:EA:C0:97:9C:75:6A:81
            X509v3 Authority Key Identifier:
                keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:3c:06:82:a6:f5:f2:3e:98:97:1f:73:e0:dc:41:0b:39:f9:
         dc:5b:ee:29:f4:fd:32:56:77:11:31:21:7d:6e:ef:19:47:72:
         c7:ee:a7:12:e1:ad:74:d4:cd:c9:fc:9f:2c:e5:e5:95:59:e0:
         c3:66:59:21:4a:04:05:94:bf:7e:a3:f8:8b:9e:3b:f1:92:ab:
         1d:7a:0a:66:ca:4e:6f:8c:ef:02:ba:77:76:46:af:88:8f:ce:
         cb:a9:cb:3d:fd:c8:99:de:42:24:2b:ee:22:8d:9d:dd:18:64:
         40:7c:a4:52:4a:6b:b5:45:c5:b5:a3:1a:19:e4:25:e4:3e:cb:
         b8:c9:f7:93:6e:f4:9c:c6:83:a7:66:8b:8d:78:6e:b3:9a:7f:
         c5:4a:9c:ff:ec:32:87:bd:b5:7f:85:c1:75:4d:58:86:8a:b5:
         2b:8b:a9:94:2a:26:58:62:bd:a2:99:aa:60:43:ea:5f:d7:f3:
         67:24:39:b4:b5:db:8c:4c:82:ce:4e:23:58:3f:f3:1d:dd:42:
         e4:5b:1e:51:e3:c6:54:7c:f8:18:4f:44:1f:62:6a:4a:33:71:
         46:3c:a7:19:4c:77:65:f6:26:65:30:45:34:26:92:68:2e:05:
         85:db:56:c0:07:7b:96:e4:a0:36:37:0c:29:41:ee:07:8a:f8:
         b1:65:8e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 04:15:00 2024 by rpki-client on console-ams.rpki-client.org