Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
File:                     YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft (raw, json)
Hash identifier:          2ojOTINyKSMlRswjz8A6Smr+bGfiOqT8xVMW7kBc5rY=
Subject key identifier:   4A:D6:FD:54:D2:A1:FA:B2:DE:C5:C6:C9:93:AC:B5:B0:11:CA:DF:68
Authority key identifier: 62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59
Certificate issuer:       /CN=F36FAF9BAF/serialNumber=627533ECBAB7D89BD9570B20054666053669A759
Certificate serial:       046E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
Manifest number:          0468
Signing time:             Mon 03 Jun 2024 01:27:34 +0000
Manifest this update:     Mon 03 Jun 2024 01:27:33 +0000
Manifest next update:     Wed 05 Jun 2024 01:27:33 +0000
Files and hashes:         1: YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl (hash: b+MDP5CpWOB4bHv3yolRfsCdz82YW3nHs6rNn9cTFzw=)
                          2: 2D2708F6CC2A11EB97CFD22AF8AEA228.roa (hash: XeVu0P9Nd9zY+QntGG6Z2ZTJviS6Sz4HHhq7O1QS9sw=)
                          3: C54E19D822A311EC90664B16D8A014CE.roa (hash: S4ZF6FWOA8WU+IlkBebTTGuItZqjsyF/6HiGxB7bOuM=)
                          4: 954F64EAFFC811ED8FCE30624AD9E6FC.roa (hash: dfhGabIAAHxuN6e18OQhuqwD7Wt4GKbIL/xRCP/tZwE=)
                          5: 5561B7F8DAED11ECA54A8396F1222468.roa (hash: vLjSdhCmLer54968GqLaX3fP0+rzPHJ4Ex+Bjc7yIXY=)
                          6: BB347E28DAEB11EC81FC9691F1222468.roa (hash: 6gsgx7DxEzqoXkYw7Xs1C83YWv7zKqmZvViXYneFQZg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Jun 2024 00:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1134 (0x46e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FAF9BAF/serialNumber=627533ECBAB7D89BD9570B20054666053669A759
        Validity
            Not Before: Jun  3 01:27:33 2024 GMT
            Not After : Jun  5 01:27:33 2024 GMT
        Subject: CN=665d1c05-3b54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:44:e4:15:0e:52:83:a0:63:9a:81:d6:42:e7:
                    2f:7a:a3:fc:18:81:68:e4:6b:68:70:46:00:1c:43:
                    4b:68:98:2d:d0:99:4c:47:3a:d7:ef:74:3f:64:bd:
                    bf:09:9b:76:a7:85:b3:21:a2:40:4c:f8:68:3d:06:
                    52:78:27:32:af:f8:3f:c2:b3:49:87:74:9f:06:cb:
                    5e:d1:43:0e:65:06:2f:b9:11:7e:47:d3:3c:f5:53:
                    59:49:7a:f4:96:5b:10:12:ed:62:a3:63:1f:3d:71:
                    3f:0e:18:e2:b7:63:eb:92:80:19:2d:b8:d1:f2:68:
                    9a:cb:d0:fe:df:f2:74:c3:0f:38:87:61:ba:bd:26:
                    d8:dc:ec:49:6d:49:ea:2b:55:b5:07:00:e3:50:91:
                    de:39:a9:5b:84:f3:41:ed:7f:aa:ae:43:8d:35:bd:
                    a3:b9:b3:ca:dc:d0:1c:b4:d3:d1:ba:49:3b:99:ed:
                    e9:bf:1a:44:79:27:4c:cf:04:5f:57:5d:2c:76:af:
                    4d:17:73:4c:40:09:b0:e0:d1:e2:46:5d:b5:7f:c0:
                    1e:0a:63:79:23:ce:f5:a8:de:70:b6:ab:85:dc:d4:
                    4d:49:c7:e3:11:72:b7:c6:f4:a3:39:26:22:b0:2b:
                    57:4f:d9:a4:8f:1c:11:2f:3e:90:4d:1c:7b:1a:f7:
                    f3:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D6:FD:54:D2:A1:FA:B2:DE:C5:C6:C9:93:AC:B5:B0:11:CA:DF:68
            X509v3 Authority Key Identifier:
                keyid:62:75:33:EC:BA:B7:D8:9B:D9:57:0B:20:05:46:66:05:36:69:A7:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YnUz7Lq32JvZVwsgBUZmBTZpp1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FAF9B/5E26B79CCC2711EBA4EA1627F8AEA228/YnUz7Lq32JvZVwsgBUZmBTZpp1k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:2e:a0:d8:ac:0b:7b:82:ba:00:10:09:68:3c:8e:64:17:5a:
         31:77:82:2a:7e:5e:52:52:15:9c:60:a7:11:2f:cb:cf:3e:e0:
         ba:60:6b:09:c2:7b:af:f4:82:b1:eb:a9:8e:f3:ad:9a:22:f2:
         fb:20:1e:a2:df:da:39:e8:01:89:db:90:e0:5e:95:98:4f:9e:
         6a:4b:ca:af:07:d0:23:c1:20:c7:26:3f:3e:13:cb:94:9a:ff:
         9d:bd:7f:84:e8:95:25:5d:ac:3e:64:ac:63:c2:bc:d4:b6:82:
         a8:1a:73:3e:28:01:47:27:66:68:67:dd:40:7c:a9:e2:4d:f2:
         07:12:a1:90:54:49:a0:90:85:6c:91:e5:8a:4d:a3:b4:3c:90:
         6d:cf:67:80:7a:ea:34:e5:64:41:6a:63:bb:2a:02:10:25:e1:
         74:4a:33:09:fd:5b:b4:f5:a8:85:4c:29:55:bd:c7:0f:49:b3:
         80:5b:c2:27:5d:91:2d:80:7e:d7:ad:ec:af:62:88:20:25:64:
         f7:0a:3c:73:dc:3d:d6:41:57:0c:39:c8:6d:d4:9f:0b:c9:15:
         0a:11:67:42:5f:b1:62:09:f6:c0:17:df:23:06:7c:67:a1:b7:
         0b:fc:55:1e:79:df:29:d4:53:49:6c:4d:65:54:d8:44:4e:a7:
         0e:12:ac:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 02:23:42 2024 by rpki-client on console-fra.rpki-client.org