Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
File:                     iCYpiV2NtXslQepI-hEmMl4pAgs.mft (raw, json)
Hash identifier:          r++bR2elX9U6CTJ+gV2liuFA5vvzwY8rtuJe1AuZAFY=
Subject key identifier:   5C:78:EC:23:4E:CE:2A:8B:A8:70:33:6E:66:D4:48:80:C6:FC:32:67
Authority key identifier: 88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B
Certificate issuer:       /CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
Certificate serial:       0CB8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
Manifest number:          0CAC
Signing time:             Mon 06 May 2024 00:39:37 +0000
Manifest this update:     Mon 06 May 2024 00:39:37 +0000
Manifest next update:     Wed 08 May 2024 00:39:37 +0000
Files and hashes:         1: iCYpiV2NtXslQepI-hEmMl4pAgs.crl (hash: 4yeAjEHrrLO0BemiVanagiePGEiwQ6cp+41nyszTVr4=)
                          2: AA3A8B5E155611ECB70DA62FD8A014CE.roa (hash: oylej++hlt4CSGV5/IZZeR0C3dM4otrHkh7MutLV9Go=)
                          3: AC9E51C2D4DE11EBADC42846F8AEA228.roa (hash: 5Ggz3Te0vgHLm/Kbv+y3MXeLbDbWl36tckNnmxxM2SA=)
                          4: BE6404FAD4DF11EBBA81A747F8AEA228.roa (hash: GH3Ja4snhwLWpp5ydwcxU3wl3XfH8RIdlELqY5Zsj+E=)
                          5: 705E5CA8155611ECA3F1402FD8A014CE.roa (hash: BvaUlhFB8dhvbeBRjwtIRVfG1DlJ/s5hWEEmmbVV+rk=)
                          6: 78C71AF4D4DF11EB91BD5247F8AEA228.roa (hash: IMIVkoVO+LqKsmy3JpQMcRirZ3OyWFNrawFCvM6fDOk=)
                          7: 1C5E9EFED4DF11EB9185D046F8AEA228.roa (hash: eN89IVYVfW57zUXGRLnTAOoNL9FLLc3vgrYPZzt46O0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3256 (0xcb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620ACFAF/serialNumber=882629895D8DB57B2541EA48FA1126325E29020B
        Validity
            Not Before: May  6 00:39:37 2024 GMT
            Not After : May  8 00:39:37 2024 GMT
        Subject: CN=663826c9-3feb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:05:c3:e7:69:2b:95:54:d7:56:ca:92:16:8a:
                    ca:6e:17:1b:c5:bc:11:93:4b:a0:e8:e4:f1:b0:32:
                    49:4c:72:39:12:24:e0:84:93:a5:df:d8:04:b3:fa:
                    6f:4e:c8:b6:38:d6:eb:72:a8:87:9b:dc:06:07:96:
                    6e:ae:b1:61:4e:1c:a3:8c:20:8b:76:3c:e1:d3:19:
                    72:f6:58:06:c3:0c:30:5f:c6:e2:2c:99:21:aa:5a:
                    f1:da:c4:7e:5c:27:be:17:1e:09:b4:6a:f1:71:f9:
                    3f:6d:b8:42:2a:e5:df:70:1f:91:96:1f:a3:67:b9:
                    fe:65:ed:35:6a:7f:fc:b5:c2:21:20:d1:84:f3:82:
                    2c:b6:8d:dd:fc:25:2b:f2:28:74:15:5f:54:67:65:
                    5c:1c:d8:5d:bd:3b:b1:23:d3:0a:38:43:8e:35:39:
                    b2:0a:14:79:4d:82:7e:d3:4b:a4:e0:53:82:4f:08:
                    36:c8:3e:5b:be:27:94:5c:09:ca:f7:2b:be:49:68:
                    44:f3:90:03:35:6c:d4:ce:b6:97:93:00:7d:07:a6:
                    b1:84:95:2d:5c:09:db:ff:a1:54:35:3f:83:ed:28:
                    bc:9d:9e:0c:72:91:15:4a:e4:7b:89:b7:3e:ee:c9:
                    27:c2:0f:15:de:46:9d:8a:04:0c:79:e9:2b:2f:47:
                    3b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:78:EC:23:4E:CE:2A:8B:A8:70:33:6E:66:D4:48:80:C6:FC:32:67
            X509v3 Authority Key Identifier:
                keyid:88:26:29:89:5D:8D:B5:7B:25:41:EA:48:FA:11:26:32:5E:29:02:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iCYpiV2NtXslQepI-hEmMl4pAgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620ACF/925E2BE6586D11E5AEB55C2FF8AEA228/iCYpiV2NtXslQepI-hEmMl4pAgs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:d3:06:fb:f9:43:d0:29:fe:b6:41:d8:6b:57:be:a2:50:65:
         d9:be:86:d7:eb:73:65:ec:a2:c8:cb:f0:eb:a8:7c:59:05:c0:
         20:65:4d:47:82:d8:2b:ff:eb:5e:e2:1a:5e:d6:0d:99:e9:a9:
         f7:ab:9e:35:74:89:65:af:ae:81:26:84:f0:29:af:b3:81:d8:
         f7:e0:7e:c0:8b:3e:50:2a:3d:3f:76:d8:6c:0c:86:be:7d:f5:
         fc:24:ea:e4:34:c3:bf:be:5d:cb:b0:d2:c6:c8:43:c2:f0:9d:
         a3:02:5c:e4:a6:4d:57:04:af:5d:4c:02:4d:7c:da:17:77:5c:
         45:40:e8:59:84:63:75:4b:c8:4f:73:0a:ed:61:7e:3d:20:1f:
         59:5d:ad:43:fd:2b:e0:6b:39:bc:5a:18:dc:82:31:d2:12:37:
         17:75:05:35:81:32:7f:5f:67:03:54:4c:83:08:ac:fa:a7:75:
         85:9e:7b:e1:e1:f3:ed:f2:ea:a6:cc:70:0b:64:7d:13:c3:80:
         8c:27:0f:76:3c:e3:00:6a:17:83:5d:48:e7:a5:c1:c6:d6:07:
         de:fb:c3:ed:56:e8:47:ff:e2:46:1a:d1:2d:d8:64:a9:de:cf:
         61:b5:e6:c0:b3:d2:27:02:7b:ea:01:29:a5:1c:57:42:0e:cf:
         91:02:9d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 01:48:13 2024 by rpki-client on console-fra.rpki-client.org