Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
File:                     F9XbYUvL122qn_GpMVkVxH-Je_M.mft (raw, json)
Hash identifier:          ZBYDL/6KB6syoqZ+sS0ZK9E/8mhtBtzkzdbl5DBDYy4=
Subject key identifier:   40:BB:B5:F7:DA:14:A3:D1:DC:00:28:56:0F:67:07:F3:56:F8:2D:55
Authority key identifier: 17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3
Certificate issuer:       /CN=F361153AAF/serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
Certificate serial:       0385
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
Manifest number:          037E
Signing time:             Fri 22 Nov 2024 01:55:21 +0000
Manifest this update:     Fri 22 Nov 2024 01:55:21 +0000
Manifest next update:     Sun 24 Nov 2024 01:55:21 +0000
Files and hashes:         1: F9XbYUvL122qn_GpMVkVxH-Je_M.crl (hash: ga4visiYlXWx/VrRFvvwcliEo2D3tkYkpl4CDI82L+E=)
                          2: B6AEA76A386E11EFB22C58AC762E951A.roa (hash: 5SrWot373DcY7xlbNxOXtSFJ3m3pxtYBX1fR6afzMgw=)
                          3: 92CDFA08386E11EFADDF70A8762E951A.roa (hash: GCRLgKm5X2GHGAFRzdRTrZrvQldSY5LhNqpgJgS8KK8=)
                          4: E775739C386E11EF9B6A87AC762E951A.roa (hash: 9EDzyq3NU8VbeJb4xTqQLA3QihMtcHzWeBDxSXelft0=)
                          5: 23856708386E11EF995BECA7762E951A.roa (hash: FIO2lhhCB7uaoW8hHqlVZE9HJQhcLZ9RTHnddvwwt7Y=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901 (0x385)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361153AAF/serialNumber=17D5DB614BCBD76DAA9FF1A9315915C47F897BF3
        Validity
            Not Before: Nov 22 01:55:21 2024 GMT
            Not After : Nov 24 01:55:21 2024 GMT
        Subject: CN=673fe489-c658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:11:19:f4:0b:60:2f:98:7f:fb:50:9c:dc:db:
                    af:99:1d:26:45:16:50:0b:e7:da:b4:0e:03:1e:ee:
                    74:7d:b3:ef:12:8c:90:cf:0b:6f:d7:62:ee:1f:4f:
                    bd:59:ba:7f:19:e8:89:8f:a8:51:8a:36:3e:4b:d9:
                    a9:e1:79:ce:92:7e:47:02:51:c1:bd:c3:dc:2f:2f:
                    a4:b4:c2:7b:86:e5:cf:5d:b2:e3:90:9c:1c:49:26:
                    2c:fc:18:1a:8c:9b:8f:db:7f:8d:f3:6b:3a:bc:50:
                    f2:9c:c6:e1:d4:89:a1:c9:5c:ad:5b:72:47:3a:7c:
                    a4:7f:b4:f8:4a:14:92:74:4a:5a:81:c0:a1:94:82:
                    55:25:4e:e5:d9:ce:04:77:a0:a1:74:05:53:4a:ed:
                    a7:13:25:93:6a:76:bb:d9:49:d1:da:31:73:75:a3:
                    83:bb:20:ae:92:68:51:e9:c4:67:e8:02:e4:c8:92:
                    c5:1e:2d:4a:2e:e9:cd:7b:9d:28:ae:b6:33:cd:ea:
                    ca:d0:7c:92:57:bd:78:fc:3d:ee:23:c1:02:5f:b3:
                    a9:9e:38:c0:84:7d:5e:57:7e:0e:c2:73:bb:61:84:
                    35:2a:bf:85:37:aa:49:d7:da:f6:a7:7e:65:9d:d9:
                    d3:02:28:7a:41:82:fa:ba:b3:a9:46:77:c1:11:35:
                    bd:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:BB:B5:F7:DA:14:A3:D1:DC:00:28:56:0F:67:07:F3:56:F8:2D:55
            X509v3 Authority Key Identifier:
                keyid:17:D5:DB:61:4B:CB:D7:6D:AA:9F:F1:A9:31:59:15:C4:7F:89:7B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/F9XbYUvL122qn_GpMVkVxH-Je_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361153A/80C7DFF806B211ED9B0617E9F1222468/F9XbYUvL122qn_GpMVkVxH-Je_M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:12:8e:3a:ec:51:97:ca:2d:a4:09:0e:68:3b:8c:f8:9b:ec:
         b1:e2:97:95:95:94:a9:60:59:df:1f:d6:d5:3c:15:27:e1:ff:
         b7:df:b0:69:8f:b4:62:c9:7d:72:c7:27:54:ef:a7:34:75:60:
         9e:37:43:1d:95:3d:98:b9:fa:ed:5d:d5:fd:b7:0c:7b:1e:9f:
         ad:d6:4b:d4:1d:bf:9e:47:88:a9:99:b7:4b:0b:e7:92:9d:3a:
         c4:09:82:f2:8c:ec:b9:b4:1a:16:ca:ff:a4:65:84:b1:98:db:
         d8:c2:58:16:bc:fd:3c:8e:58:f8:92:7d:e1:e7:9b:8a:db:0d:
         e0:fd:a4:06:d4:7e:74:15:44:4b:81:58:34:78:e4:40:2a:df:
         53:8e:38:cf:60:df:91:4d:36:ee:e8:80:9a:ca:50:bb:00:14:
         b0:5e:50:86:8d:90:b3:f3:4f:9e:94:27:26:e6:26:1e:79:7b:
         a6:03:39:bc:2f:15:da:d6:f2:6e:43:33:90:d1:4e:dc:88:a6:
         d1:93:0a:2a:78:4d:c4:b1:50:3c:0d:e9:30:d0:1d:eb:08:af:
         65:1c:76:79:40:4c:08:f9:7f:3f:53:67:15:28:af:0e:1c:83:
         be:f2:f1:de:4c:58:cb:21:85:be:1d:17:f3:79:5c:a9:d1:32:
         0a:2f:86:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:52 2024 by rpki-client on console-fra.rpki-client.org