Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
File:                     LJfYJaoVfLyDVnkqObq3O2s8epE.mft (raw, json)
Hash identifier:          u5JF7fVXJplnQI/b4mOhrm819bB2/mNpzp1DLh/KJuY=
Subject key identifier:   13:FD:EC:20:2C:1F:BA:13:2D:0B:7E:13:9E:8E:EE:B5:9D:6D:D2:E7
Authority key identifier: 2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
Certificate issuer:       /CN=F3614F54AF/serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Certificate serial:       041D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
Manifest number:          041D
Signing time:             Sat 27 Apr 2024 01:46:27 +0000
Manifest this update:     Sat 27 Apr 2024 01:46:27 +0000
Manifest next update:     Mon 29 Apr 2024 01:46:27 +0000
Files and hashes:         1: LJfYJaoVfLyDVnkqObq3O2s8epE.crl (hash: H3hOWeTjpxNd5I5P5C+jGJZMOc6zJHB7ZpI3ZBcv72k=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 11:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1053 (0x41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614F54AF/serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
        Validity
            Not Before: Apr 27 01:46:27 2024 GMT
            Not After : Apr 29 01:46:27 2024 GMT
        Subject: CN=662c58f3-00f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:05:55:2e:3a:58:63:d2:e4:99:dc:b2:f0:84:
                    15:e6:f6:72:b5:a0:6e:ae:63:b9:7d:b4:85:88:d3:
                    57:34:22:7d:88:50:1a:9b:63:26:9d:15:cc:5f:96:
                    7c:2d:5b:26:c9:8f:98:a1:65:dd:5e:70:a1:a6:51:
                    8e:3b:e3:d9:f4:64:74:be:71:4d:6b:bc:33:be:8e:
                    4d:ed:c6:19:28:7e:cd:1b:2b:f0:a9:4e:a1:d6:63:
                    f8:3e:ce:3e:78:a3:89:a4:6d:bd:e4:05:28:84:7a:
                    e8:fc:95:fa:b4:0d:6c:99:c0:e1:34:1e:e4:b2:b0:
                    7e:52:db:37:04:26:59:15:e0:68:e2:13:e0:03:b9:
                    b6:10:63:30:e9:70:2b:b8:d6:f2:fa:56:55:2d:df:
                    1f:f2:14:fe:da:90:60:56:52:af:60:ba:34:1c:29:
                    f0:be:4a:37:99:2e:8b:37:ae:2d:dc:66:14:a5:0b:
                    a0:43:62:48:b3:5c:16:88:a9:97:f7:96:97:26:06:
                    f0:a7:b8:31:6e:d3:46:19:a1:6f:38:a6:e3:1a:6a:
                    58:25:ab:6e:64:60:42:38:47:bb:8e:b0:26:b8:1a:
                    fb:78:4f:eb:0f:1f:fe:a1:4f:17:21:f3:d9:9e:38:
                    6c:0a:32:8b:e7:4d:19:90:02:d5:cf:69:6c:cf:1e:
                    09:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:FD:EC:20:2C:1F:BA:13:2D:0B:7E:13:9E:8E:EE:B5:9D:6D:D2:E7
            X509v3 Authority Key Identifier:
                keyid:2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:1f:d0:65:44:04:3a:06:f9:be:71:31:cb:ee:46:e3:79:68:
         21:51:fb:d9:80:5d:57:9d:c6:11:3f:8e:9f:52:54:45:f3:74:
         e1:a2:11:2a:6f:61:36:ef:8b:2d:27:98:d3:ed:d1:01:47:90:
         f5:2a:31:10:29:89:86:c0:dd:11:ec:6e:d5:12:26:98:d6:f9:
         33:bd:47:34:59:f3:c8:7c:bc:4a:19:de:41:62:a7:70:22:ad:
         79:b1:14:d5:99:7a:56:aa:74:a6:65:4a:73:7c:4c:c9:b5:19:
         47:24:9c:c4:5c:8f:a1:37:98:ed:5f:e5:04:2b:fc:21:e0:d7:
         4c:57:e7:c5:59:a8:96:b1:cb:4c:18:c2:28:9f:c1:96:9a:5a:
         e3:fa:71:02:97:e6:d9:83:a1:27:0e:b1:d6:7d:d1:01:bd:74:
         ee:7e:7d:61:88:8d:46:9f:53:ed:ea:41:47:c7:fc:04:1f:1d:
         79:31:a2:c7:e5:cf:e3:24:78:a2:5e:13:85:23:ce:76:71:9f:
         9d:f5:d5:c8:36:d6:43:83:4a:30:bf:0d:35:46:84:57:49:28:
         47:8e:6a:8a:0b:46:10:3e:a6:e6:1c:b2:85:cb:f3:b7:06:6b:
         ea:8f:9a:f1:d3:61:10:4c:22:d5:e5:ad:33:a6:87:8b:68:6c:
         8f:a3:37:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:17:29 2024 by rpki-client on console-ams.rpki-client.org