Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
File:                     POdKxSWrybUFEx5W069Lqgyoa8c.mft (raw, json)
Hash identifier:          RTUVoPRmWOifhALvJzPYdFOq4Bog17MyCNcKlXy6SPc=
Subject key identifier:   51:01:99:AC:A4:46:87:E1:B3:06:BC:6D:BC:33:5A:33:D0:41:28:84
Authority key identifier: 3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7
Certificate issuer:       /CN=F3614DFDAF/serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
Certificate serial:       DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
Manifest number:          D8
Signing time:             Sun 19 May 2024 02:23:53 +0000
Manifest this update:     Sun 19 May 2024 02:23:52 +0000
Manifest next update:     Tue 21 May 2024 02:23:52 +0000
Files and hashes:         1: POdKxSWrybUFEx5W069Lqgyoa8c.crl (hash: IoG+DL9waAm3KMhAhqjnEEjg1dP/XSgt6sBE8bbF+5Y=)
                          2: AF323FA6BEB611EE92751B56775412E6.roa (hash: GK2/9/UfmXeWntRnu6M2Z7FCwh1Nn+0g0buRneYltSM=)
                          3: 40F84818776811EEA27107754AD9E6FC.roa (hash: nFqZ/v55EZimpFy2xDwmiE1oDV8eSlURy0csO3fvt1E=)
                          4: BEC2B6AE7FD611EEA15ECB6C4AD9E6FC.roa (hash: fJFVTiESI7QrywlkzoasbC83KVzfgYWTl7sxxTe7Lrk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                          rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614DFDAF/serialNumber=3CE74AC525ABC9B505131E56D3AF4BAA0CA86BC7
        Validity
            Not Before: May 19 02:23:52 2024 GMT
            Not After : May 21 02:23:52 2024 GMT
        Subject: CN=664962b8-d80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e0:48:d9:71:6f:6c:e4:84:88:36:15:d5:1f:
                    e3:9c:72:65:41:26:4e:9f:ef:f4:8f:be:d8:e8:cd:
                    20:2e:0d:22:4d:bb:86:ed:41:d2:94:d2:18:2a:02:
                    e1:6f:ec:ae:cd:a0:0d:09:92:fb:64:23:10:3c:58:
                    1b:c2:2f:d8:15:7b:b3:b2:f5:a8:dc:f8:76:35:f0:
                    a4:77:e9:1d:14:c4:84:d5:91:07:0c:20:e0:b8:74:
                    28:c6:31:1a:a8:da:d2:c1:63:bb:8f:37:51:84:0f:
                    52:60:f5:d4:5d:9a:62:8b:d8:c6:48:73:8f:48:a3:
                    68:a7:0e:7e:49:cb:60:0d:66:e6:6d:36:4d:52:76:
                    6b:df:4d:0a:6a:0c:7d:22:e9:91:ba:c2:0a:c2:37:
                    5b:f2:83:bb:f6:94:31:3d:6c:68:b4:ba:6c:b3:59:
                    7e:c2:93:ff:d6:cb:e0:b8:a9:bf:61:07:51:d7:85:
                    13:b3:7e:f9:86:69:38:b5:e2:c9:d2:19:fa:01:75:
                    26:e4:55:1f:e3:8a:a1:c1:6d:f7:dc:6f:84:79:64:
                    7a:7f:8b:bc:a9:8e:7d:31:c7:0d:2c:2d:fd:d1:f2:
                    af:ed:9f:ad:7d:ea:48:b5:1e:32:d0:b8:2c:ba:e7:
                    47:f5:a8:f9:7c:ce:5e:84:2f:a7:9e:94:67:f8:8d:
                    e2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:01:99:AC:A4:46:87:E1:B3:06:BC:6D:BC:33:5A:33:D0:41:28:84
            X509v3 Authority Key Identifier:
                keyid:3C:E7:4A:C5:25:AB:C9:B5:05:13:1E:56:D3:AF:4B:AA:0C:A8:6B:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/POdKxSWrybUFEx5W069Lqgyoa8c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614DFD/9187C5D4776711EE99DFD9724AD9E6FC/POdKxSWrybUFEx5W069Lqgyoa8c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:70:f3:0b:b7:ef:99:fc:69:15:f9:f8:6c:56:0b:97:61:49:
         b8:c3:24:d2:cc:f7:1c:c8:b2:de:09:21:2a:2d:21:ee:b6:66:
         0e:05:1c:ca:14:f4:93:5c:be:4b:85:77:35:ff:d6:ba:ac:b2:
         aa:ad:92:0f:85:70:fc:f7:6c:af:ea:e9:a3:30:63:3b:d8:be:
         4b:25:bd:fc:23:b7:31:88:62:17:20:ab:b5:a8:a7:d7:6a:3a:
         11:3c:37:a6:7f:ae:1d:4f:3a:b9:91:e4:e9:3e:08:76:4f:e8:
         7c:e8:79:b8:f5:86:36:02:39:30:f8:50:98:b6:63:9f:8d:30:
         58:97:4b:74:6f:f9:cc:76:28:35:96:d0:5f:2a:10:56:4c:dd:
         6e:4f:49:68:2a:69:4b:3c:01:2e:57:d8:f5:a4:5b:8a:52:6b:
         23:56:4e:7b:fb:0d:64:42:ac:c4:44:27:5c:64:a8:21:ee:8a:
         4e:98:c2:6a:05:2a:cf:d8:ef:da:2c:80:aa:42:e5:62:f3:e1:
         d1:43:e8:b4:2a:9c:43:ed:33:aa:a5:38:f8:79:67:d9:27:cf:
         b9:05:9c:cc:9c:e3:b0:99:4b:dc:d0:76:c1:1e:b0:47:66:60:
         a3:27:af:c3:ab:57:8d:b4:62:14:2d:2b:e3:09:f1:2a:44:87:
         2b:b3:db:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:49 2024 by rpki-client on console-ams.rpki-client.org