Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
File:                     M03n0uuGIBi7lXSbZI3Lr1DRPag.mft (raw, json)
Hash identifier:          +GeiZAa5ZUIZc9CChA0lis3Ts70F5WrSyMru2ImLuxg=
Subject key identifier:   44:50:DC:BB:B0:35:4A:54:47:30:74:6D:76:D2:AD:90:FB:17:8E:2C
Authority key identifier: 33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8
Certificate issuer:       /CN=F3623CAFAF/serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
Certificate serial:       0BD8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
Manifest number:          0BD5
Signing time:             Wed 08 May 2024 00:42:04 +0000
Manifest this update:     Wed 08 May 2024 00:42:03 +0000
Manifest next update:     Fri 10 May 2024 00:42:03 +0000
Files and hashes:         1: M03n0uuGIBi7lXSbZI3Lr1DRPag.crl (hash: sI7iLFcSQyHCEJA0DumRkPXHLe4BnXsC1vOcb5JZPx0=)
                          2: D4836C70F58E11E59F714033F8AEA228.roa (hash: pN8APZRuxk6Jm4N1ZwtHoYfsYhbm0SmVWbFKIM+vAlY=)
                          3: 6CF64EE6A62211ED8F649780F1222468.roa (hash: NWE8clw8CF7WBnE8BhZlyK4mx7cNZXF3h1x6LHBwvwc=)
                          4: F019B85EA62111ED8776367FF1222468.roa (hash: vz0gdE2qPXTbuobi42RjN0wKI0ZjByLhBDreE92zsPQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 10 May 2024 00:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3032 (0xbd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623CAFAF/serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
        Validity
            Not Before: May  8 00:42:03 2024 GMT
            Not After : May 10 00:42:03 2024 GMT
        Subject: CN=663aca5c-0a21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9d:7f:a7:7e:a2:51:6c:44:3a:da:09:2c:84:
                    96:9d:79:c3:35:62:03:a0:1b:a4:d4:72:ef:dd:ef:
                    36:0d:c1:83:77:b2:36:35:bf:b8:8f:b1:42:22:f5:
                    bb:1a:88:b1:c2:38:83:34:d1:62:91:f9:8a:6e:cb:
                    d1:ba:68:24:e2:67:12:8a:51:c5:44:a2:5b:33:33:
                    be:7d:82:79:47:de:c9:8e:ad:39:05:d0:3d:ec:b9:
                    51:57:52:30:ea:f8:33:c8:93:05:bd:07:f9:7c:66:
                    66:30:24:3a:b6:01:46:27:d2:e1:86:e8:c3:28:87:
                    8a:49:86:70:2f:61:02:da:d3:71:61:07:b3:a1:bf:
                    bf:3f:de:9c:6c:ab:8b:95:c8:80:38:a9:4f:5d:45:
                    af:a1:89:75:7d:71:d9:90:6d:db:6d:04:03:8b:cc:
                    1a:1d:40:20:7a:e8:d0:97:e6:b8:60:a7:8b:0c:7f:
                    15:e0:9d:0b:d3:f6:87:6b:76:10:b7:13:af:0e:37:
                    b4:d2:4f:c1:80:21:fa:44:3f:9a:13:3f:50:25:a8:
                    39:51:04:7d:92:d3:e4:3d:d0:22:10:b2:03:41:66:
                    51:49:c3:c9:c8:dd:de:09:7e:ea:2a:c7:0d:63:e7:
                    0d:e6:4c:3f:ba:6e:0a:ab:34:9d:45:72:89:e6:82:
                    b9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:50:DC:BB:B0:35:4A:54:47:30:74:6D:76:D2:AD:90:FB:17:8E:2C
            X509v3 Authority Key Identifier:
                keyid:33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:10:55:f3:c1:b5:b6:13:3c:16:07:39:a7:0a:65:0c:c2:90:
         dd:2d:2f:f8:b6:ab:31:d4:5a:87:4d:09:8d:9c:f4:43:f3:54:
         38:08:fe:16:cd:25:2b:f1:c3:c7:b1:2a:b8:fe:4c:90:2b:6c:
         85:d9:36:3c:13:1d:1e:76:96:5a:85:73:93:32:9b:c0:b9:e2:
         f9:6a:e5:65:2c:f4:12:ce:5a:22:c8:88:a9:f0:b2:12:b7:ce:
         f9:38:ab:bf:c4:70:8d:8f:d7:6e:47:da:67:7b:13:d6:3c:1f:
         99:fd:2e:4b:ef:af:f6:bb:7f:ef:45:01:e1:37:3d:e9:c5:72:
         04:6a:ae:ee:97:0d:73:30:75:02:fc:ef:cc:48:c6:83:55:67:
         5b:2c:7f:fd:52:9b:53:7d:6c:26:2a:c7:a3:bf:8b:e0:2f:8a:
         c7:a9:21:66:a7:20:f4:a0:e1:fe:54:17:cf:76:26:6d:78:e5:
         89:39:28:c0:63:29:be:a3:65:e2:ba:88:6e:cf:b7:57:db:b6:
         78:18:81:66:36:53:75:f4:63:b7:04:6e:ef:4d:45:b9:04:65:
         ca:91:fb:ef:cf:dc:eb:40:99:76:eb:66:be:49:c7:8e:7c:b6:
         97:b6:f2:dd:d3:e8:9b:2b:a4:3e:4d:89:ab:3c:dc:76:8e:8d:
         f0:0e:df:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 01:49:46 2024 by rpki-client on console-fra.rpki-client.org