Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
File:                     OCSsXuAEOe7aIaGhAQnov3bk-rg.mft (raw, json)
Hash identifier:          hKAoQfUAK7/w0SE9z2wLmFFpe7dTX0sZ3/+n9wSuY6g=
Subject key identifier:   DF:9F:8A:87:58:46:ED:93:AE:19:26:0E:1C:84:53:75:2E:B9:E3:10
Authority key identifier: 38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8
Certificate issuer:       /CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
Certificate serial:       0515
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
Manifest number:          0513
Signing time:             Thu 21 Nov 2024 01:31:41 +0000
Manifest this update:     Thu 21 Nov 2024 01:31:40 +0000
Manifest next update:     Sat 23 Nov 2024 01:31:40 +0000
Files and hashes:         1: OCSsXuAEOe7aIaGhAQnov3bk-rg.crl (hash: IodsXyym6rrvF7DftrniXBsAe685Hv4FGIZ8nWtomMw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1301 (0x515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361ED63AF/serialNumber=3824AC5EE00439EEDA21A1A10109E8BF76E4FAB8
        Validity
            Not Before: Nov 21 01:31:40 2024 GMT
            Not After : Nov 23 01:31:40 2024 GMT
        Subject: CN=673e8d7d-63b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6d:c5:66:30:00:75:d2:97:62:3a:17:a8:7a:
                    4a:e4:e6:ca:bd:0e:65:59:18:97:e9:64:38:2d:75:
                    84:9e:d9:9f:b5:e7:3f:5e:2c:b6:f2:7d:e4:1c:84:
                    75:f3:8d:a7:80:cf:d9:e6:80:57:72:94:d9:9f:25:
                    59:d0:5e:9f:95:11:1f:48:8c:72:d8:0f:c4:2b:21:
                    10:54:73:97:cb:1d:eb:9b:c2:40:c5:f3:39:ce:67:
                    ec:11:d1:67:25:11:87:ab:92:3c:d3:b1:c1:ac:d5:
                    cf:de:de:0e:2a:24:e4:0b:1b:10:f8:35:1b:f1:6b:
                    12:77:47:5c:42:0a:e3:a0:f6:46:73:ec:d7:25:ee:
                    bc:db:65:cd:45:e0:fe:9e:b7:d3:63:bd:08:ec:7c:
                    e9:8a:9d:89:04:f2:d0:19:54:96:04:91:10:54:4e:
                    a8:d7:fe:4f:60:b3:9d:aa:5a:7c:9e:08:54:ca:f5:
                    3d:49:c6:86:45:d3:bd:1b:12:0a:92:1b:69:86:6c:
                    30:4f:62:c8:2e:0a:54:46:2a:2e:75:29:b5:54:75:
                    ed:fd:13:f2:cf:6f:e4:db:f3:c4:3a:a3:31:c1:65:
                    91:84:e7:47:88:22:0c:7c:2b:c2:00:04:a9:07:2f:
                    74:45:bd:41:b4:ad:37:72:ab:57:5a:e5:d7:a4:2f:
                    5d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:9F:8A:87:58:46:ED:93:AE:19:26:0E:1C:84:53:75:2E:B9:E3:10
            X509v3 Authority Key Identifier:
                keyid:38:24:AC:5E:E0:04:39:EE:DA:21:A1:A1:01:09:E8:BF:76:E4:FA:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OCSsXuAEOe7aIaGhAQnov3bk-rg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361ED63/BC72D6B6CAA411EB9C2A4A52F8AEA228/OCSsXuAEOe7aIaGhAQnov3bk-rg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:aa:dc:22:29:a4:e1:93:07:5a:d8:41:5e:35:ba:86:a8:6f:
         b3:62:e9:33:e2:67:e9:c0:1e:de:f1:f4:39:76:2c:c3:77:a8:
         3d:42:54:72:7c:14:20:7b:7d:e1:95:11:8a:84:57:c8:83:80:
         22:61:a7:d9:4a:c7:9f:ee:1f:1d:80:9a:86:ec:f0:94:1c:65:
         74:91:b6:fe:28:75:ee:d2:0e:a8:8a:ab:c4:f1:61:a9:39:73:
         60:d9:f3:22:de:e4:74:71:93:45:e6:5a:02:ec:b4:07:e8:7e:
         ee:19:82:06:cb:9b:28:2c:92:67:28:df:6d:25:38:d7:cc:30:
         6d:0e:bf:7f:e1:75:63:d5:44:66:90:76:07:f6:a4:9e:62:7c:
         7a:b0:3a:ec:20:93:ba:b5:d0:39:0d:5c:fd:70:74:3e:97:28:
         1c:84:58:ba:19:ef:5e:e7:9f:fe:d6:fb:ec:6f:d7:61:00:21:
         ed:6c:42:4f:2e:f7:4b:0f:1f:38:7d:f8:53:54:86:aa:25:dd:
         3f:75:0d:a2:f2:4a:e9:e1:fb:3d:64:5b:1c:61:dd:9a:e1:8b:
         f1:d5:6f:c0:39:42:e8:cd:75:bb:53:32:92:cd:64:93:36:73:
         e9:49:dc:9e:79:5b:8a:69:db:06:54:c7:fc:1f:f7:9c:be:bf:
         d1:0a:04:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:19:36 2024 by rpki-client on console-ams.rpki-client.org