Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
File:                     cJAIrccXkY_f_PFnQftbEwunxDA.mft (raw, json)
Hash identifier:          tko0of+mHOlKX5j94fkKaqAoaG5HVdgJY+rY7qQedbo=
Subject key identifier:   B5:5A:A1:E2:C4:20:08:91:3A:EE:F9:B2:2B:A2:6A:60:FA:D3:7E:94
Authority key identifier: 70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30
Certificate issuer:       /CN=F36111C6AF/serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
Certificate serial:       58
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
Manifest number:          58
Signing time:             Sun 19 May 2024 02:33:14 +0000
Manifest this update:     Sun 19 May 2024 02:33:14 +0000
Manifest next update:     Tue 21 May 2024 02:33:14 +0000
Files and hashes:         1: cJAIrccXkY_f_PFnQftbEwunxDA.crl (hash: 7Xbo/f+uWErKMrxqfodYaqD7Hya+KPbuuHsVQWA66hM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36111C6AF/serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
        Validity
            Not Before: May 19 02:33:14 2024 GMT
            Not After : May 21 02:33:14 2024 GMT
        Subject: CN=664964ea-1328
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:11:87:ac:b6:24:4a:d1:ad:09:51:5c:c7:5c:
                    14:0b:49:95:5d:47:48:1d:41:72:3f:6d:b5:aa:0f:
                    06:67:8d:83:53:4a:ff:1a:7f:20:d0:16:67:ab:43:
                    43:0f:10:ae:c0:7b:e7:db:15:38:7c:16:13:08:8e:
                    e5:11:a6:fe:d6:a9:d5:cd:06:a3:2f:fa:51:de:4e:
                    22:90:a7:5f:c4:41:03:41:b2:9b:bb:74:ba:6a:65:
                    17:a8:ee:d3:71:17:58:da:b1:37:90:83:a3:c7:03:
                    53:60:6e:1e:df:24:14:ba:ef:68:09:dd:b6:70:24:
                    5e:52:12:13:68:84:08:d6:2c:28:85:8b:54:84:b6:
                    ea:73:09:59:a0:c2:6f:f9:47:21:91:9a:67:08:ab:
                    9b:c4:37:56:5b:f4:62:b6:92:fd:f9:b4:7b:0d:6e:
                    5d:04:95:31:cd:4c:9a:ba:d5:af:50:4c:0d:0c:8d:
                    50:7e:2a:eb:05:7b:c0:e4:45:cf:94:02:f6:66:6b:
                    e3:b9:58:96:d8:5f:24:f3:bd:b9:79:6b:86:f4:88:
                    47:2a:4f:80:94:38:bc:29:8d:10:d6:28:c7:ef:2c:
                    ba:70:c0:99:db:8e:cd:cb:5e:b6:40:ce:92:3b:bc:
                    2d:c9:86:8c:90:57:ff:fd:ad:51:4c:8b:3f:df:45:
                    c3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:5A:A1:E2:C4:20:08:91:3A:EE:F9:B2:2B:A2:6A:60:FA:D3:7E:94
            X509v3 Authority Key Identifier:
                keyid:70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e1:74:15:c9:78:f3:e6:2a:b5:f7:be:d9:c3:9a:77:1e:96:
         e7:a6:8b:0b:a5:ee:74:5d:6e:71:d7:9c:26:f6:aa:b1:6a:90:
         6a:f3:61:d9:cb:d7:fb:48:b8:30:a7:17:7e:43:ff:83:40:de:
         ca:52:2e:84:be:1e:db:f4:1b:14:93:5d:0b:31:2b:46:1b:fa:
         74:43:b4:2d:6c:e4:95:02:46:e7:d5:b0:b4:2a:3e:98:11:21:
         0d:42:85:17:fb:c4:58:ca:da:be:42:d5:75:52:fc:1f:38:a0:
         81:d4:f6:78:8a:95:55:7f:4f:b9:f9:50:26:05:6b:8a:8c:2b:
         12:f5:29:01:65:6d:10:73:a4:f8:cf:c7:a5:f1:95:12:b2:a5:
         54:59:10:a4:78:e6:fd:b5:ba:97:d7:22:13:f8:a5:5e:16:b3:
         3b:6c:84:47:94:8e:ad:fb:4e:93:dd:2c:27:86:62:67:4e:bb:
         10:ed:20:6a:bf:94:65:e9:e8:48:0d:db:9b:2e:81:ba:bd:09:
         78:9a:52:06:fe:e3:3a:1c:65:29:a4:88:ac:ab:7f:41:93:c1:
         0c:71:a7:8d:c6:23:48:7e:4b:b8:63:85:11:48:f2:f1:3d:99:
         88:ff:08:ca:e6:cb:5f:89:e6:32:b0:85:57:bf:c5:d4:d6:53:
         7e:02:48:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:38:11 2024 by rpki-client on console-ams.rpki-client.org