Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
File:                     QrWM7qosEujy3JjWRMIM-BzhzgU.mft (raw, json)
Hash identifier:          +3Mw+JUWLpm2de5ukhKZ9T304Cu+2EP++Xoi8xF5PDE=
Subject key identifier:   0E:93:38:B1:D9:0F:01:5A:AE:14:8E:A9:32:65:1E:17:5B:34:76:57
Authority key identifier: 42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05
Certificate issuer:       /CN=F3628DDEAF/serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
Certificate serial:       07A2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
Manifest number:          079E
Signing time:             Wed 01 May 2024 00:52:45 +0000
Manifest this update:     Wed 01 May 2024 00:52:44 +0000
Manifest next update:     Fri 03 May 2024 00:52:44 +0000
Files and hashes:         1: QrWM7qosEujy3JjWRMIM-BzhzgU.crl (hash: HNOUNxNSQZNHViHpc08XWBq9SRRN7NrO7OkdG6EGL0s=)
                          2: 1119CD76DFD311EB88361B37F8AEA228.roa (hash: 4I2Xxy2pBMpErR6JgtR0kZIJe7vFEf1qAmaSQyw+k7I=)
                          3: F539AC2ADFD211EBB0D1FD36F8AEA228.roa (hash: eXFh4emIQs516bgW52azXjxVc2VVoIN8dsu/3Z+Sdok=)
                          4: EE5F2E50369E11E98EDB1621F8AEA228.roa (hash: weMqKqZKyHm0tyqjfHAxnqGFkomIgwidKnm2Dpx5xnA=)
                          5: 14DA972C369F11E9A85A3C21F8AEA228.roa (hash: rRgU+4tFqjCwv3sj5zK6L+vCSIEp2/0zfXQO2ATh2MM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 03 May 2024 00:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1954 (0x7a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628DDEAF/serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
        Validity
            Not Before: May  1 00:52:44 2024 GMT
            Not After : May  3 00:52:44 2024 GMT
        Subject: CN=6631925d-07cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ee:06:3a:3a:a4:60:d2:7f:30:88:4d:78:0a:
                    29:fd:7c:d4:ed:a0:c8:8a:c5:1e:5a:bd:ba:36:dc:
                    c9:e5:9c:e8:f7:59:6b:9f:4c:5a:09:85:cf:18:9e:
                    f9:09:61:15:11:3c:bb:ed:f0:4f:97:d8:34:e0:bb:
                    4b:fb:6e:1d:b6:1a:21:f0:e4:6d:4b:2d:89:32:04:
                    db:03:71:ae:2f:82:e3:86:a7:79:49:c1:fc:77:c4:
                    fc:13:ea:01:ba:7d:2a:0f:4d:cf:a8:19:8c:55:98:
                    1d:9e:2a:27:37:17:a3:ff:ec:19:f3:46:37:f2:92:
                    7b:e8:a2:78:50:24:11:f3:ff:32:8b:85:b4:8e:8a:
                    42:46:63:ac:d4:a0:c9:e6:df:ec:63:d0:a8:85:53:
                    09:25:d4:ea:b0:2d:c4:ce:d4:1f:21:f3:0f:8c:8e:
                    34:9c:fe:5a:6a:02:84:8e:fe:c9:e8:d9:a5:18:fe:
                    11:1b:ec:82:95:40:41:c3:87:30:3c:a7:e8:ff:1e:
                    21:77:2d:71:0b:a1:f4:5a:60:05:99:5c:11:24:c0:
                    4c:d7:89:91:0b:34:d7:80:2d:c6:ad:b4:1a:8f:86:
                    4b:6f:3c:d2:37:e0:6e:e2:1b:c6:f8:91:72:2f:fa:
                    a6:60:ca:90:43:df:9a:20:13:b3:a3:25:6a:52:45:
                    3d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:93:38:B1:D9:0F:01:5A:AE:14:8E:A9:32:65:1E:17:5B:34:76:57
            X509v3 Authority Key Identifier:
                keyid:42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:c0:79:02:f8:60:06:af:0e:f1:99:73:34:d8:3d:ef:23:af:
         97:e3:f7:aa:56:04:21:14:6e:3b:71:f6:ce:34:f0:0d:7a:94:
         07:cb:24:1f:86:30:be:33:b9:b2:d1:ad:7b:9d:14:89:6a:54:
         e9:ca:01:5e:3c:f3:55:20:fe:a6:04:55:6a:52:60:d7:e3:49:
         48:38:15:96:43:51:57:1b:75:ef:fd:ea:09:f8:68:d6:4a:4f:
         2f:e8:6e:6d:ef:a7:4b:9d:d4:ca:74:d1:2e:63:e6:3e:25:8a:
         80:b4:59:0d:23:de:4b:c2:73:17:7a:f3:09:24:d3:5a:c8:96:
         42:c3:e9:96:32:3b:73:5a:82:4a:67:21:6b:ce:db:42:99:1c:
         13:9f:27:cd:20:4f:80:54:3c:e8:ec:cb:9a:35:45:01:d3:4a:
         13:b5:a3:0e:14:39:3b:f1:ef:a4:b7:dc:04:53:3b:b9:fb:3e:
         ef:52:67:3f:d6:dc:e7:52:5a:2b:35:74:41:40:08:6d:ee:32:
         40:61:06:6e:64:e0:63:e6:ee:b7:a4:de:48:c4:fd:f3:c5:8a:
         4e:9a:bf:fa:3a:ee:68:12:48:50:f2:5b:0a:b6:95:8d:2d:49:
         82:c1:d9:29:ce:89:cf:31:af:ed:54:f7:cc:a8:66:ac:15:ff:
         a9:f4:2f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:07:10 2024 by rpki-client on console-fra.rpki-client.org