Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
File:                     LJfYJaoVfLyDVnkqObq3O2s8epE.mft (raw, json)
Hash identifier:          dtDDj+m65PTqUZYJPSeoRvKvPP/hcdHTWAKRjQjdE88=
Subject key identifier:   A0:8F:21:20:22:F7:83:20:1D:91:FC:6B:7F:58:9C:4C:30:3B:04:B7
Authority key identifier: 2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
Certificate issuer:       /CN=F3614F54AF/serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Certificate serial:       04F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
Manifest number:          04F4
Signing time:             Sun 24 Nov 2024 01:32:01 +0000
Manifest this update:     Sun 24 Nov 2024 01:32:00 +0000
Manifest next update:     Tue 26 Nov 2024 01:32:00 +0000
Files and hashes:         1: LJfYJaoVfLyDVnkqObq3O2s8epE.crl (hash: w7u1YJfsxsVajOVG4j3HLJLOLSiYjI0jXEM4VpdRi68=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1268 (0x4f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614F54AF/serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
        Validity
            Not Before: Nov 24 01:32:00 2024 GMT
            Not After : Nov 26 01:32:00 2024 GMT
        Subject: CN=67428211-572c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:65:61:f4:60:a7:d1:2e:54:b7:ce:1d:c9:45:
                    c8:b3:ec:38:2c:4e:00:b7:f0:f8:77:6f:1c:85:aa:
                    a5:58:05:ab:28:d1:4e:6a:4a:0f:7f:ff:48:3d:a9:
                    66:29:0a:58:8a:76:f9:50:3d:65:a8:14:ea:ce:4d:
                    56:15:8e:33:72:ef:0c:bc:cd:3f:ea:a2:9e:c1:86:
                    2b:6d:99:79:58:56:83:93:6b:f7:6f:0a:a2:d1:f2:
                    72:b3:17:f6:ff:36:39:96:0e:5e:ca:0d:9c:27:09:
                    8d:3e:53:7e:83:0e:ea:cf:c5:45:2b:c4:aa:16:e5:
                    11:d6:f5:da:f2:21:60:8c:c6:cc:37:20:62:21:e6:
                    04:a4:ce:b3:8f:60:52:9f:ed:a9:a8:98:d1:af:61:
                    dd:eb:43:6f:ad:0c:c0:56:f0:01:b5:ca:1e:0a:d5:
                    a6:ec:4a:c8:0a:c9:79:bf:49:cc:dd:75:14:66:00:
                    df:92:df:30:c7:58:70:91:3a:cc:f1:b8:2c:cd:d4:
                    ea:58:12:a0:52:17:16:41:0c:6b:0e:e2:a9:78:90:
                    5c:cc:22:c8:e1:4d:cd:3e:79:fe:92:e2:bb:e9:7e:
                    6b:13:81:f2:fe:9d:1e:b6:79:81:58:3f:5c:5a:79:
                    a7:de:fd:53:88:a5:fe:cb:74:66:28:56:d7:a8:31:
                    41:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:8F:21:20:22:F7:83:20:1D:91:FC:6B:7F:58:9C:4C:30:3B:04:B7
            X509v3 Authority Key Identifier:
                keyid:2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:eb:e1:17:3b:1c:9f:ea:18:0a:df:af:d9:64:73:32:3c:91:
         ae:04:f6:02:1c:67:99:2c:fa:e7:a8:4d:d1:58:7b:e4:9f:60:
         ca:7c:64:2a:d2:e8:7f:85:a5:99:d4:68:32:73:f7:cb:4b:71:
         88:01:30:6a:23:1e:dd:df:b7:97:e3:35:b4:3b:6e:e2:67:fe:
         f6:98:01:7f:ed:ce:4e:b0:c6:8f:19:eb:69:f6:b5:72:44:bb:
         74:04:5c:d6:b6:62:8f:ba:bb:f3:f9:ec:69:c1:ff:ea:96:e8:
         2e:7a:0c:3c:f0:c0:a9:e9:ff:18:63:a2:f6:46:f4:b6:8d:21:
         c4:27:91:cc:5a:25:2c:90:26:2e:63:3a:85:e4:b1:c7:4f:e1:
         7d:9e:65:74:21:d2:ed:eb:c1:0f:87:9b:bd:d0:78:44:7b:8d:
         ca:49:b0:3d:ac:ef:5a:f0:86:f2:75:2c:ee:84:f6:e5:4b:a7:
         f7:b2:73:b8:cb:3c:cb:a6:fe:7c:46:5b:39:e8:76:50:42:1a:
         d6:82:dc:1d:d6:4a:aa:f7:11:94:41:57:34:4c:eb:62:b0:2e:
         8a:4c:90:72:11:04:8d:87:45:4a:91:a0:b8:f5:3d:ad:2e:38:
         4d:41:80:48:b9:c0:08:e6:78:6a:2a:2d:f3:be:f3:b4:25:2a:
         1f:82:68:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:12 2024 by rpki-client on console-fra.rpki-client.org