Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
File:                     16R0hb-cpGerJ5HbX06JVar0dkA.mft (raw, json)
Hash identifier:          HZm1O25aY+D+amJ+vDUJ/trVG7FV8VIEscKNIvLO1fw=
Subject key identifier:   46:35:15:86:3B:D9:0A:3A:E0:6C:BF:8F:0C:6E:ED:9A:A4:C0:B8:53
Authority key identifier: D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40
Certificate issuer:       /CN=F3614F54AR/serialNumber=D7A47485BF9CA467AB2791DB5F4E8955AAF47640
Certificate serial:       04F3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
Manifest number:          04F2
Signing time:             Thu 21 Nov 2024 01:33:26 +0000
Manifest this update:     Thu 21 Nov 2024 01:33:26 +0000
Manifest next update:     Sat 23 Nov 2024 01:33:26 +0000
Files and hashes:         1: 16R0hb-cpGerJ5HbX06JVar0dkA.crl (hash: 04NKjKUqdJa+Fkcw0nKI9QEHM//k23qJ6OsqydjhuA4=)
                          2: 115C93BAE16111EB96804153F8AEA228.roa (hash: vVJYRPavoXyCLCs90IUxYtns4SSgNRSaXSbPs6FZN1c=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
                          rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1267 (0x4f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614F54AR/serialNumber=D7A47485BF9CA467AB2791DB5F4E8955AAF47640
        Validity
            Not Before: Nov 21 01:33:26 2024 GMT
            Not After : Nov 23 01:33:26 2024 GMT
        Subject: CN=673e8de6-a9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c1:6b:40:16:09:7b:aa:e7:fe:17:70:ee:61:
                    ea:e0:91:38:5c:2a:40:f3:32:7d:26:d7:a8:73:40:
                    e9:ab:52:82:b6:17:fd:7e:14:f9:ac:de:4f:4b:e2:
                    7a:8d:ea:6f:5f:12:2d:54:77:6f:7c:41:c8:80:a9:
                    cd:21:d2:88:7d:73:d2:c5:8a:98:0e:c1:ce:ce:c1:
                    e8:52:69:c0:5a:d6:7f:bf:5b:bb:dc:0b:bc:20:44:
                    97:27:a9:40:1f:9b:1f:a1:28:ab:d9:f5:b4:cd:69:
                    92:e4:db:0d:2d:b4:c3:9b:74:4b:94:1c:5a:9a:a2:
                    6b:c4:db:32:58:cd:34:3c:af:3b:41:2c:f9:76:4e:
                    99:a7:2a:5b:06:81:d9:30:76:a5:3f:fe:fe:63:b1:
                    ed:c4:81:e2:11:23:7a:7f:c0:2d:60:e7:90:77:fd:
                    f6:44:f9:b0:ff:55:01:9d:c0:0c:ff:1c:89:84:67:
                    aa:50:13:61:eb:6c:6c:14:4b:fc:63:34:a7:4b:52:
                    63:d7:c9:30:5f:e2:15:e9:52:9e:b4:f7:0c:d9:e2:
                    26:3e:34:02:7a:6e:18:a6:b1:96:2b:b5:72:da:c9:
                    e5:c7:9e:51:a2:69:6a:5b:cb:0e:89:c0:98:bc:f9:
                    4b:85:a1:f1:f1:09:23:f1:b7:38:f7:ce:de:eb:3b:
                    df:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:35:15:86:3B:D9:0A:3A:E0:6C:BF:8F:0C:6E:ED:9A:A4:C0:B8:53
            X509v3 Authority Key Identifier:
                keyid:D7:A4:74:85:BF:9C:A4:67:AB:27:91:DB:5F:4E:89:55:AA:F4:76:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/16R0hb-cpGerJ5HbX06JVar0dkA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/FA09FE1AE15F11EB892EC651F8AEA228/16R0hb-cpGerJ5HbX06JVar0dkA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:2b:d5:ee:fc:02:c6:b4:15:f1:c9:e8:10:1c:e5:54:9c:7e:
         2c:52:c0:53:31:03:b0:ab:7a:a5:00:13:7c:85:ba:ae:87:70:
         75:50:e0:bf:e3:6e:47:9f:17:73:7b:0b:d4:98:10:6b:39:71:
         88:93:ab:c5:1a:a2:f1:ae:01:2e:f6:e8:0a:8e:8e:40:c5:1d:
         d6:41:d5:93:3b:ca:cc:22:85:75:62:1e:94:d2:fa:d8:0a:cd:
         9f:f5:cd:26:8c:28:52:4d:ee:97:1b:d2:20:c4:7f:2c:8a:9a:
         a4:c5:09:be:27:dc:e5:78:ed:ce:21:ad:63:ab:cd:f7:55:4d:
         9f:a6:20:d0:f0:22:2f:17:62:b3:5e:8a:4c:62:11:0a:f9:2a:
         a4:07:3b:52:2e:b9:46:15:c3:db:94:08:17:f8:46:d9:16:9c:
         db:1f:d3:5e:dc:d7:d8:1d:06:4e:0b:a2:29:2c:bd:df:19:24:
         3c:7e:9d:ed:28:9a:b0:16:05:e2:93:8c:ac:db:c6:c6:6a:dd:
         05:a4:e4:6b:46:86:40:84:b5:76:10:2d:7b:f1:36:2f:db:dc:
         90:7d:80:94:45:7c:01:86:92:d3:23:e9:1f:c8:72:e5:a4:8a:
         e9:ff:5f:dc:1b:b6:91:65:ed:98:2a:31:a1:e6:b6:cd:00:b1:
         e6:5d:61:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:19:36 2024 by rpki-client on console-ams.rpki-client.org