Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
File:                     FJvWukypr0s2P6bjEnf8i8_TEW8.mft (raw, json)
Hash identifier:          AANPaT6LllmmFZzvsFTKBcQ/AMcMHHwsSlk5CXvOXrw=
Subject key identifier:   62:2D:18:12:57:DC:29:EE:AE:64:BA:E2:BF:F8:BA:73:72:DB:20:A0
Authority key identifier: 14:9B:D6:BA:4C:A9:AF:4B:36:3F:A6:E3:12:77:FC:8B:CF:D3:11:6F
Certificate issuer:       /CN=F3623C86AF/serialNumber=149BD6BA4CA9AF4B363FA6E31277FC8BCFD3116F
Certificate serial:       03DD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
Manifest number:          03DB
Signing time:             Fri 03 May 2024 01:38:24 +0000
Manifest this update:     Fri 03 May 2024 01:38:24 +0000
Manifest next update:     Sun 05 May 2024 01:38:24 +0000
Files and hashes:         1: FJvWukypr0s2P6bjEnf8i8_TEW8.crl (hash: pBMWYtGEY8P1a4z4ZOjiLIrRIzRO6JHvPw6Vwzqy+gE=)
                          2: 1F1EBBDC2ABA11EEAB2F107B4AD9E6FC.roa (hash: TKXrZbkJmrjaai3QalwQx/2/kEy/M/ZPnjH0SS3lcwQ=)
                          3: 9B7EEEEA1AEF11EC87FF157BD8A014CE.roa (hash: 4pkodOTNsC5WrbNmrDSKfckyFAmepGIgRqrWyHnAKrQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 989 (0x3dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623C86AF/serialNumber=149BD6BA4CA9AF4B363FA6E31277FC8BCFD3116F
        Validity
            Not Before: May  3 01:38:24 2024 GMT
            Not After : May  5 01:38:24 2024 GMT
        Subject: CN=66344010-32fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f7:bf:43:01:d4:e4:8e:e9:a1:c5:e1:e1:7a:
                    e8:da:64:c6:98:af:02:49:a4:b7:82:88:a8:a4:ff:
                    b5:84:55:c8:9a:c5:44:14:b2:4c:d1:2d:b1:45:4b:
                    69:3f:24:a2:96:5a:56:eb:16:ba:d4:63:ba:0e:ae:
                    27:51:7b:d0:fb:fb:ac:7c:57:a1:cf:ae:7b:54:66:
                    60:8f:12:a0:df:f1:56:9a:0e:a4:1e:54:b8:ac:24:
                    db:28:3e:9d:0f:b8:9b:15:ac:42:f8:db:a4:25:df:
                    42:f0:e5:2c:6a:1e:37:eb:83:6c:14:9b:3d:05:de:
                    9e:87:dd:00:3a:3c:10:54:6a:a3:e9:e3:d8:bb:35:
                    7a:ab:bd:dd:c9:48:7a:f0:cd:0c:7c:ed:00:0d:63:
                    70:76:70:b1:87:e8:c1:2c:61:c1:38:3b:68:0f:7c:
                    25:e8:8d:13:33:9e:d5:ce:d4:e6:5a:5d:50:88:d7:
                    b2:66:2b:a2:57:be:5f:db:13:91:bf:7d:53:6b:fb:
                    72:d4:9f:87:07:07:27:b7:9c:c7:64:0e:ad:17:b3:
                    c2:b7:05:f7:2b:f2:6a:52:4d:44:45:3c:f6:70:be:
                    c2:81:59:39:92:d8:4f:66:cc:f2:df:eb:12:45:7c:
                    6f:44:1a:97:d0:13:e5:16:91:b4:fe:3c:44:07:e2:
                    23:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2D:18:12:57:DC:29:EE:AE:64:BA:E2:BF:F8:BA:73:72:DB:20:A0
            X509v3 Authority Key Identifier:
                keyid:14:9B:D6:BA:4C:A9:AF:4B:36:3F:A6:E3:12:77:FC:8B:CF:D3:11:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FJvWukypr0s2P6bjEnf8i8_TEW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623C86/83A380941A2011ECABC94537D8A014CE/FJvWukypr0s2P6bjEnf8i8_TEW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:f2:d1:11:41:b5:d2:8b:a1:c1:41:c2:6e:3e:85:0b:1d:1a:
         00:e0:aa:8a:0f:44:d3:91:28:69:87:56:2f:38:5e:6d:77:94:
         5d:b3:c0:68:83:21:97:e9:19:f9:08:8f:c2:7e:1d:f9:1d:b8:
         4f:59:a1:6c:11:47:af:53:89:a7:2b:4e:8e:21:b1:cf:5d:13:
         93:a8:a5:bc:56:0b:87:19:4d:f4:25:17:b0:01:d8:b1:3a:c1:
         7d:40:c6:24:cc:65:bc:d5:f3:1b:7b:bc:d2:5e:30:38:48:0b:
         26:78:8d:0c:04:84:7b:52:30:26:98:24:eb:35:df:7c:c6:eb:
         ef:6e:90:38:5f:d0:f0:05:d8:46:4c:20:bd:f5:24:fa:b4:1f:
         ac:be:84:4b:1b:8a:9d:4d:ee:58:c3:d0:69:e4:44:c3:2a:35:
         c6:ba:ca:b3:af:af:95:63:e9:c3:b1:66:98:9d:d2:8b:cb:f3:
         38:6b:28:0b:04:e7:d5:0c:94:8c:3d:48:47:63:ba:ad:af:40:
         19:5f:e4:f0:bd:d4:19:93:62:a3:01:59:50:6c:8d:e5:af:1a:
         98:d1:b8:3a:ae:bf:6a:e9:9a:fe:0a:06:32:25:a1:d8:83:39:
         5c:c5:84:6a:cb:f3:9a:91:1d:18:09:0b:68:5b:ce:51:3b:4c:
         70:3f:7b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:05 2024 by rpki-client on console-ams.rpki-client.org