Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.mft
File:                     FvKYpXAKlUr3VINg7kAxK0QV8ok.mft (raw, json)
Hash identifier:          ITBkEH+D/xsEOhaeywDdqIf+J+fR7Iep2OfyNegYi6M=
Subject key identifier:   44:1A:CD:B6:D3:53:C6:F5:9F:C3:35:71:01:2F:E8:09:AC:A5:4A:28
Authority key identifier: 16:F2:98:A5:70:0A:95:4A:F7:54:83:60:EE:40:31:2B:44:15:F2:89
Certificate issuer:       /CN=F3627EC7AF/serialNumber=16F298A5700A954AF7548360EE40312B4415F289
Certificate serial:       0448
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FvKYpXAKlUr3VINg7kAxK0QV8ok.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.mft
Manifest number:          0442
Signing time:             Fri 03 May 2024 01:32:28 +0000
Manifest this update:     Fri 03 May 2024 01:32:27 +0000
Manifest next update:     Sun 05 May 2024 01:32:27 +0000
Files and hashes:         1: FvKYpXAKlUr3VINg7kAxK0QV8ok.crl (hash: xm/LCtLwe+ykXdnKnvK23LXKtXX9+QeQCZVy1bjI5wU=)
                          2: C4FA7896D03C11EBA8661749F8AEA228.roa (hash: jwtHTncC31IOpjtFvay6E41Imtg2OhsGMmhIT7FmeKQ=)
                          3: 08688A10D03C11EBADCA1848F8AEA228.roa (hash: UULTXrL85+bezl68GtpqLoWAg4A3nsYr6IyfXGM6tP8=)
                          4: 8916514CD03C11EB905CD648F8AEA228.roa (hash: OozlDcr+dXwvsBnSt+q7FP27uCzQ+zfrjTjFPN+PVMo=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FvKYpXAKlUr3VINg7kAxK0QV8ok.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096 (0x448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627EC7AF/serialNumber=16F298A5700A954AF7548360EE40312B4415F289
        Validity
            Not Before: May  3 01:32:27 2024 GMT
            Not After : May  5 01:32:27 2024 GMT
        Subject: CN=66343eac-0c1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:99:cf:39:80:bc:13:8d:45:c2:b1:fb:98:06:
                    ad:50:f8:42:e1:06:76:2f:30:b5:1f:bf:b6:68:24:
                    e5:94:82:36:10:63:d5:28:30:df:39:9f:af:e9:8c:
                    a7:e7:d2:b7:0a:c1:33:60:27:0f:80:79:2c:c6:e1:
                    31:0b:3e:15:c5:45:5f:7c:7f:29:fd:2d:95:74:bf:
                    75:10:6a:69:59:83:44:9e:7d:6e:3d:61:e5:bd:97:
                    37:3c:2e:e3:ae:31:0e:a5:89:ff:9b:a5:10:18:eb:
                    66:17:75:60:cc:06:da:72:35:8b:57:19:95:cc:82:
                    cd:11:5e:82:13:19:71:16:45:27:73:b2:c1:89:65:
                    e5:39:40:f2:bb:32:13:0b:fb:88:99:3d:05:fd:9d:
                    1f:26:31:0a:33:b3:82:b8:fc:bb:dd:89:1e:86:23:
                    7e:cc:5a:66:7b:fa:d0:a6:35:32:d0:ee:76:9b:71:
                    81:a0:84:bb:bc:4d:3a:1c:c5:86:47:e1:43:a2:11:
                    43:22:4d:25:a6:74:e9:c9:a9:48:c8:f7:77:f1:84:
                    48:32:87:ff:ef:5e:f3:c4:5c:a4:04:a4:32:b6:08:
                    01:8a:8a:40:07:c7:07:9e:f2:5d:7b:f2:ba:58:76:
                    f4:70:8f:13:77:b8:ec:c5:14:98:54:73:af:fe:6d:
                    ec:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1A:CD:B6:D3:53:C6:F5:9F:C3:35:71:01:2F:E8:09:AC:A5:4A:28
            X509v3 Authority Key Identifier:
                keyid:16:F2:98:A5:70:0A:95:4A:F7:54:83:60:EE:40:31:2B:44:15:F2:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FvKYpXAKlUr3VINg7kAxK0QV8ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627EC7/6429C7D6D03911EB827F7B44F8AEA228/FvKYpXAKlUr3VINg7kAxK0QV8ok.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b4:b3:08:96:f9:1e:56:36:f3:9a:22:74:f5:33:92:08:15:
         00:eb:db:91:52:a3:32:ef:ce:b4:68:b6:35:2b:32:d9:c8:ad:
         2d:f0:a0:af:a0:32:07:b4:df:05:bc:cf:fd:f0:69:f5:98:b8:
         9b:9f:14:02:40:9f:69:59:54:44:d0:ae:60:37:55:7e:ea:ad:
         f0:de:f9:b0:15:ee:76:c5:a2:2d:ff:a4:17:37:c0:2c:49:33:
         b0:98:a8:dd:ba:c0:82:7b:2a:9a:a9:79:4e:01:89:8b:9c:d0:
         bf:65:0b:fe:a1:a5:db:c0:0a:4b:81:8d:21:c4:33:2b:c7:8d:
         b1:ab:ef:e5:3a:31:86:c0:3f:e2:9e:22:35:8a:11:96:5e:2b:
         bd:f5:b4:e4:38:56:7e:16:7f:a7:52:31:bf:0c:00:9a:0f:33:
         b3:2c:aa:b7:36:2e:ce:2c:d4:4f:d2:ca:cc:d4:59:a3:86:4f:
         5f:39:28:e6:45:19:9f:d2:38:aa:db:10:30:2c:f7:78:2c:f5:
         7c:41:19:53:7f:b5:14:55:74:58:f1:fa:4d:af:8f:5e:64:a6:
         15:39:b8:ea:34:f4:fb:7d:87:97:d1:d5:83:83:9a:de:cc:6c:
         2a:ec:6e:70:ca:e3:23:a1:77:e6:e9:2f:cf:dc:b5:32:53:51:
         57:d7:bd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:07 2024 by rpki-client on console-fra.rpki-client.org