Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/W6sl6CIJkNVzzHXHuaKwqb9142A.mft
File:                     W6sl6CIJkNVzzHXHuaKwqb9142A.mft (raw, json)
Hash identifier:          islLQg3pZRMJh/f6oHtKAKX5keGkg7AyMEfOhKStses=
Subject key identifier:   AE:A2:52:91:39:49:F4:B9:E9:AA:33:81:22:4A:D6:A9:4E:66:56:70
Authority key identifier: 5B:AB:25:E8:22:09:90:D5:73:CC:75:C7:B9:A2:B0:A9:BF:75:E3:60
Certificate issuer:       /CN=F3618F6DAF/serialNumber=5BAB25E8220990D573CC75C7B9A2B0A9BF75E360
Certificate serial:       0507
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/W6sl6CIJkNVzzHXHuaKwqb9142A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/W6sl6CIJkNVzzHXHuaKwqb9142A.mft
Manifest number:          0506
Signing time:             Fri 03 May 2024 01:18:44 +0000
Manifest this update:     Fri 03 May 2024 01:18:43 +0000
Manifest next update:     Sun 05 May 2024 01:18:43 +0000
Files and hashes:         1: W6sl6CIJkNVzzHXHuaKwqb9142A.crl (hash: QVfhitPgk8kezUknVztNIEE/QzfkulQRdDRFXMyACRM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/W6sl6CIJkNVzzHXHuaKwqb9142A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/W6sl6CIJkNVzzHXHuaKwqb9142A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/W6sl6CIJkNVzzHXHuaKwqb9142A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1287 (0x507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618F6DAF/serialNumber=5BAB25E8220990D573CC75C7B9A2B0A9BF75E360
        Validity
            Not Before: May  3 01:18:43 2024 GMT
            Not After : May  5 01:18:43 2024 GMT
        Subject: CN=66343b74-8e8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:10:fa:17:cd:de:a7:db:47:b9:7b:a8:f4:5b:
                    a5:69:0d:b4:c0:6d:d7:db:8f:71:10:25:e3:a3:c8:
                    29:70:8d:db:d1:6e:ff:26:d7:00:ba:a4:ef:9d:90:
                    c9:2b:97:e7:75:3c:67:0f:92:29:55:1b:3d:d1:e9:
                    37:55:2a:f5:66:e3:c0:46:52:9a:df:ba:52:a6:00:
                    ce:14:d7:33:ce:99:85:68:8d:f4:b6:ec:2e:7a:60:
                    0d:2a:c5:8d:ae:8d:00:ea:47:b7:1e:f8:d9:37:7b:
                    ff:ab:b7:31:24:d3:40:30:e4:87:c4:3e:0a:a7:41:
                    4d:78:25:c7:00:8e:2a:7e:b4:2c:26:cf:71:f1:b3:
                    78:97:a9:b3:69:e0:3b:ad:75:55:66:72:f3:77:17:
                    d6:7a:56:b6:33:fb:38:2b:8a:67:6f:5c:33:cc:e4:
                    a1:5d:6a:52:02:0c:25:b4:90:f4:5b:e9:1c:cf:2d:
                    21:a9:da:6b:0c:cf:75:af:ac:81:3b:d3:32:60:14:
                    a7:c7:31:02:a9:88:19:4c:5f:dc:8f:e0:42:30:96:
                    66:68:53:c6:2d:99:f9:9d:84:39:ff:96:31:a6:ec:
                    62:d6:e9:db:2b:d3:15:5b:01:24:0e:1a:b6:97:c4:
                    ef:f3:9a:4c:f1:a9:3c:fb:44:5f:cd:72:9f:dc:d3:
                    dc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A2:52:91:39:49:F4:B9:E9:AA:33:81:22:4A:D6:A9:4E:66:56:70
            X509v3 Authority Key Identifier:
                keyid:5B:AB:25:E8:22:09:90:D5:73:CC:75:C7:B9:A2:B0:A9:BF:75:E3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/W6sl6CIJkNVzzHXHuaKwqb9142A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/W6sl6CIJkNVzzHXHuaKwqb9142A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618F6D/EF68296832EC11EB887FBC3BF8AEA228/W6sl6CIJkNVzzHXHuaKwqb9142A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:26:5f:25:db:43:8b:71:bc:98:fc:ed:b7:d0:ce:88:10:3f:
         17:62:4b:d8:76:36:cd:20:f7:79:84:04:2d:b9:9f:5a:6f:9a:
         45:9e:f1:21:81:eb:e6:87:d9:7e:93:1d:07:a2:8b:37:4f:13:
         df:4b:aa:d7:5f:72:4a:fe:42:f5:d5:ee:32:20:64:0c:bb:a7:
         68:1a:2f:3b:b6:3f:74:c1:89:a2:98:34:9f:7c:92:e6:9b:82:
         5d:7f:18:d8:df:17:ab:0a:3a:1d:4d:a7:d8:11:9d:50:8c:e9:
         cf:35:2a:23:17:36:17:32:5b:b9:7a:62:0b:0d:a0:81:71:f1:
         6d:50:d1:e9:ec:37:32:6d:a8:96:4a:72:0d:89:c7:41:cd:b6:
         99:b7:d0:30:d5:a0:6e:55:5f:90:e9:08:0a:07:ba:8f:ec:e5:
         f1:c8:88:a6:39:d5:0a:48:f6:c9:f5:cc:a5:3e:26:d9:9e:56:
         36:23:01:a3:7c:bc:3f:80:d3:40:e6:4a:0a:b9:bd:f3:cf:80:
         4e:e8:2d:fa:3b:88:89:f4:3c:b9:a9:52:6c:cd:92:9e:0d:26:
         4b:fc:4f:66:37:08:58:15:53:ea:95:52:4e:0f:f6:ff:fb:f1:
         32:ef:35:45:db:67:4c:13:f3:9c:bc:3d:64:57:36:7c:8b:27:
         e4:b8:d0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:04 2024 by rpki-client on console-ams.rpki-client.org