Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
File:                     GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft (raw, json)
Hash identifier:          3FrTtAHgRUrII5UaMOF5Ti6ljVxx9TM9R9uW9/MDrLM=
Subject key identifier:   96:90:28:18:A7:3B:27:14:ED:34:C5:A9:46:96:FD:73:A5:70:A2:84
Authority key identifier: 18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3
Certificate issuer:       /CN=F361E99DAF/serialNumber=18DA682C1E3EC3464D391D9B71A5B852A6C9B6E3
Certificate serial:       058F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
Manifest number:          058D
Signing time:             Fri 22 Nov 2024 01:22:59 +0000
Manifest this update:     Fri 22 Nov 2024 01:22:59 +0000
Manifest next update:     Sun 24 Nov 2024 01:22:59 +0000
Files and hashes:         1: GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl (hash: Kzs4hwmeetRJV3jLzGpcbItI8m8zxFsIWrKAWkVErec=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1423 (0x58f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361E99DAF/serialNumber=18DA682C1E3EC3464D391D9B71A5B852A6C9B6E3
        Validity
            Not Before: Nov 22 01:22:59 2024 GMT
            Not After : Nov 24 01:22:59 2024 GMT
        Subject: CN=673fdcf3-264d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:98:87:93:18:4c:85:58:a4:0d:00:fe:0f:8a:
                    73:c0:62:74:bb:bc:51:42:26:ca:f9:6f:38:d7:5c:
                    63:e6:fc:dd:aa:f9:c3:a8:db:0b:63:fb:42:e0:8b:
                    4a:48:37:69:bb:59:2f:0b:fd:14:82:b9:45:ed:b3:
                    5e:5c:70:6f:d4:ff:af:89:77:75:7f:2d:23:bc:8a:
                    b9:a1:0f:7c:4c:69:f0:fb:b7:f4:bc:99:ed:c2:32:
                    4f:44:0d:49:e4:f6:a9:63:d4:73:8a:6a:e3:c9:92:
                    8a:d2:8e:1e:29:dc:df:cf:3f:c0:d4:c5:cf:28:5f:
                    e9:59:ed:38:ea:91:7b:f8:02:78:9d:50:29:e0:c3:
                    e3:f1:be:13:c2:0e:57:3d:94:68:54:13:6a:08:5f:
                    99:21:be:32:e4:17:c5:8f:3b:ce:6a:a9:8a:41:4b:
                    74:25:e1:e7:66:9a:d9:17:3a:ec:91:62:bc:36:1a:
                    e4:01:9a:8f:a2:17:46:cd:15:41:dc:08:7c:0a:c8:
                    45:0b:9f:f8:bb:ce:dd:d8:c0:a0:32:7b:ba:b7:dc:
                    c2:ab:43:e9:a0:24:b3:86:8d:3f:3b:d9:be:57:56:
                    5d:a6:b2:8a:95:e4:ff:5f:b4:46:ce:bb:88:81:22:
                    c9:38:77:ef:d4:29:6d:f7:e7:4f:8f:a2:ef:cf:94:
                    2a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:90:28:18:A7:3B:27:14:ED:34:C5:A9:46:96:FD:73:A5:70:A2:84
            X509v3 Authority Key Identifier:
                keyid:18:DA:68:2C:1E:3E:C3:46:4D:39:1D:9B:71:A5:B8:52:A6:C9:B6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E99D/87DF1A466A0411EB9094717DF8AEA228/GNpoLB4-w0ZNOR2bcaW4UqbJtuM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:5b:66:aa:15:c0:d7:81:af:fc:7a:b9:66:54:42:83:0b:69:
         09:06:da:c9:d2:04:99:ed:a9:33:a2:33:ae:51:bf:09:ef:64:
         bc:ff:aa:91:14:f6:4e:23:0f:95:b4:e6:d3:96:5b:96:53:3a:
         59:07:bd:34:09:21:e7:1c:29:44:da:8e:43:d0:66:f4:0d:e8:
         e2:da:da:7d:35:6b:9c:1f:da:ae:6b:f0:8d:37:68:a5:67:9e:
         7f:af:7d:29:0c:57:92:a8:8d:a7:e5:c3:e3:67:19:0c:60:2b:
         ff:ec:b6:6f:ae:6c:a0:eb:4c:af:f3:a7:c8:b5:4d:5b:53:18:
         e8:24:49:26:97:0d:50:8d:69:a1:62:77:fc:2e:a8:aa:42:a1:
         5e:62:8c:b7:21:8d:ae:a8:99:53:03:24:ea:be:6f:d8:9a:3b:
         89:45:de:ca:2a:db:c0:1f:17:3b:08:fb:7f:0d:a4:c6:55:28:
         51:13:4f:5b:33:50:79:a6:57:99:53:c5:33:68:ca:b1:5d:3a:
         cc:fd:f0:ac:6b:01:3a:50:ae:f0:db:20:2e:8f:d2:af:61:cd:
         82:c1:da:c8:5a:e3:93:1f:3b:78:18:92:88:17:3c:5d:47:81:
         a4:1a:8d:cb:90:e9:11:e7:79:2d:93:de:cf:e4:a5:2f:3a:f4:
         55:03:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:51 2024 by rpki-client on console-fra.rpki-client.org