Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
File:                     XTIRwmpetGVqxFtni0_0vyQECa4.mft (raw, json)
Hash identifier:          Oaybzjz0369Giy5dYKP+4H3p0yGEHTegm+lYViIAssA=
Subject key identifier:   50:DC:1E:50:A6:0B:4E:16:62:D1:FF:51:0A:1B:D8:B1:FB:16:43:F3
Authority key identifier: 5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
Certificate issuer:       /CN=F3625046AF/serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
Certificate serial:       22
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
Manifest number:          21
Signing time:             Wed 23 Oct 2024 03:05:12 +0000
Manifest this update:     Wed 23 Oct 2024 03:05:11 +0000
Manifest next update:     Fri 25 Oct 2024 03:05:11 +0000
Files and hashes:         1: XTIRwmpetGVqxFtni0_0vyQECa4.crl (hash: gCdTZnuhFxSn4jU6bp0HIWrP4O+PKiaDSK4jiQIgypA=)
                          2: F68C77C279C811EFB5AD7293762E951A.roa (hash: w7SzFM4rVLShHyz8Uu4JGbAwVkZlRI11cdVpH3TTF5M=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625046AF/serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
        Validity
            Not Before: Oct 23 03:05:11 2024 GMT
            Not After : Oct 25 03:05:11 2024 GMT
        Subject: CN=671867e8-0471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:94:ce:0f:2e:c2:0e:5c:d5:e5:85:bd:26:99:
                    59:e6:82:ad:80:f9:97:fa:1e:97:7d:29:0f:69:26:
                    4f:25:1e:67:7f:01:75:d5:2b:81:60:68:08:ac:7d:
                    e2:2c:5f:16:d1:c8:b0:b2:c8:ac:b9:a3:5a:74:fd:
                    5f:2f:37:46:ee:05:9c:92:e0:85:82:66:fd:e3:26:
                    f0:d5:57:4e:a2:95:6a:6c:d1:e3:17:5d:f9:a6:b8:
                    dc:4e:21:eb:65:50:66:64:d6:9b:0a:be:fa:6f:c4:
                    41:0a:3f:cb:3f:28:03:06:e1:88:02:98:de:59:f0:
                    8f:8b:da:8e:a1:a9:e5:f4:a0:2c:be:e6:e9:f7:06:
                    db:e0:20:92:70:2f:cc:63:fb:02:ea:04:a4:8c:40:
                    32:d1:7b:fd:60:c7:11:d9:31:53:6c:b7:57:ac:c1:
                    19:d4:38:25:7e:cb:63:87:83:cb:f8:b3:a8:6a:12:
                    b8:08:4c:ba:4f:48:1d:9f:97:58:1c:f4:20:8f:51:
                    01:f5:40:a8:52:11:84:e6:c2:28:39:23:e4:68:ac:
                    25:00:dd:f7:ff:38:cd:cc:48:2e:bf:4b:11:63:16:
                    81:fc:a2:ec:d8:34:c4:6c:1e:45:21:2e:99:ad:f5:
                    f4:b7:82:45:04:e3:71:bd:dd:99:8c:36:de:5f:d0:
                    19:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DC:1E:50:A6:0B:4E:16:62:D1:FF:51:0A:1B:D8:B1:FB:16:43:F3
            X509v3 Authority Key Identifier:
                keyid:5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a2:7c:80:cf:1e:03:ec:e7:40:4c:2d:65:6a:89:1a:1d:0b:
         d4:3f:24:5e:83:f9:c9:cc:06:28:c3:b4:cc:d1:bb:86:b3:73:
         5d:02:ba:13:21:14:3c:f3:ec:70:98:89:40:60:2c:b4:db:13:
         a3:44:27:fd:32:43:d0:6a:13:9b:43:e2:c2:3f:c9:e6:3f:2d:
         a3:26:f5:99:f1:c5:90:cd:23:e3:88:39:cf:ce:b4:29:1a:71:
         33:e9:9f:48:38:37:67:ad:8a:5c:fe:fd:d2:49:2d:b3:d0:3d:
         3b:be:e7:e8:2d:e5:1c:ef:11:2b:38:6a:f8:95:d5:b8:ab:5d:
         79:47:2b:4f:e5:c2:dc:18:fa:95:ff:14:ff:d5:7b:58:dd:ea:
         b4:fa:4a:46:81:70:13:81:00:b3:b2:62:36:40:f6:a5:a0:db:
         10:ac:d8:b4:36:5c:e8:db:dc:38:89:37:2f:69:90:d5:72:f9:
         6a:79:6e:65:f6:f9:e6:b8:02:2e:b0:b5:ba:96:3c:a5:3f:27:
         0d:67:bf:64:a2:01:f8:02:4d:b6:2e:55:6e:15:01:d0:d0:b1:
         fa:ec:90:d4:35:17:fc:b5:c5:c5:ca:db:37:2a:d7:83:aa:78:
         c7:99:c2:ad:9b:9f:b1:f9:17:14:dd:b0:32:1c:c1:8b:f1:2b:
         c1:e4:e2:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:00:54 2024 by rpki-client on console-fra.rpki-client.org