Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
File:                     7P8kJrGvinEgph0zdg6QjBWcau8.mft (raw, json)
Hash identifier:          QZB7K5Nb3vcfQUM0m8gGs9aLiTxa5kleQ0zkVkI6ZQc=
Subject key identifier:   CF:43:01:79:EF:33:83:34:A8:6F:3C:52:41:9E:98:6B:52:FA:CA:F5
Authority key identifier: EC:FF:24:26:B1:AF:8A:71:20:A6:1D:33:76:0E:90:8C:15:9C:6A:EF
Certificate issuer:       /CN=F362AF02AF/serialNumber=ECFF2426B1AF8A7120A61D33760E908C159C6AEF
Certificate serial:       073E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
Manifest number:          0739
Signing time:             Wed 01 May 2024 00:56:42 +0000
Manifest this update:     Wed 01 May 2024 00:56:42 +0000
Manifest next update:     Fri 03 May 2024 00:56:42 +0000
Files and hashes:         1: 7P8kJrGvinEgph0zdg6QjBWcau8.crl (hash: y/COPzhh5k1/31MHI1aA/K1GiWM6hIbikpvsn3kXrI8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 03 May 2024 00:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1854 (0x73e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AF02AF/serialNumber=ECFF2426B1AF8A7120A61D33760E908C159C6AEF
        Validity
            Not Before: May  1 00:56:42 2024 GMT
            Not After : May  3 00:56:42 2024 GMT
        Subject: CN=6631934a-e129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8a:a4:a6:c6:74:fa:35:b2:8f:78:c8:15:be:
                    ea:eb:fe:89:5a:54:6f:9a:4c:cd:41:45:69:35:c6:
                    64:d9:85:fc:3b:63:18:a1:5e:00:7b:dc:4c:8b:1c:
                    7a:16:c8:7a:15:33:69:c8:b4:ab:00:c0:f8:6a:b7:
                    79:98:66:0d:ef:7e:07:8d:23:47:3d:12:3a:df:0c:
                    cc:c1:4e:14:a8:18:9a:23:b1:f9:5e:73:3b:31:64:
                    a8:dc:e7:53:76:ad:d3:b1:be:d1:ee:55:8e:a4:a6:
                    48:ec:20:ee:6d:39:15:16:8c:09:8b:b5:bb:b0:5e:
                    9e:ab:eb:da:9f:d4:f4:68:33:6a:64:5c:94:6f:d5:
                    86:3d:28:23:3c:11:9d:64:0f:72:28:03:ba:23:8c:
                    70:a6:14:26:d1:2c:40:35:2d:51:0c:5c:c9:01:3a:
                    f5:8b:9f:c5:bc:77:cb:1d:19:ba:e6:8f:42:82:65:
                    7d:6d:1c:a5:c1:20:10:a6:ff:e3:49:cc:a4:8f:b2:
                    41:21:0e:37:d7:48:75:00:2a:ff:55:1a:30:02:59:
                    4f:47:04:74:24:ae:ce:50:aa:93:4c:87:23:ac:2a:
                    c9:77:7c:ce:94:bd:18:ab:c2:ac:0d:6b:3f:be:72:
                    69:63:23:f3:81:c2:b3:b8:5d:84:2f:04:13:f1:d4:
                    c2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:43:01:79:EF:33:83:34:A8:6F:3C:52:41:9E:98:6B:52:FA:CA:F5
            X509v3 Authority Key Identifier:
                keyid:EC:FF:24:26:B1:AF:8A:71:20:A6:1D:33:76:0E:90:8C:15:9C:6A:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7P8kJrGvinEgph0zdg6QjBWcau8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/3A7ECF5E838C11E99530C511F8AEA228/7P8kJrGvinEgph0zdg6QjBWcau8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:3e:d1:e5:15:92:35:19:0a:ec:dd:4d:4b:18:e4:4f:d9:e3:
         35:fb:00:70:6b:c4:a9:bb:61:02:6a:d0:ec:87:5a:de:b9:05:
         63:aa:59:45:6c:70:a1:dc:38:d0:02:c9:1f:67:65:35:48:ad:
         89:0a:c7:0a:5a:94:6b:6c:30:56:5a:68:bf:cd:36:6b:bd:f9:
         1b:fb:aa:a7:f7:75:78:6e:fd:a1:5d:47:48:6c:79:63:3a:74:
         60:93:c3:e5:6b:75:40:ea:e1:08:56:2a:44:29:55:2c:ae:44:
         a0:b6:64:fe:c0:26:da:01:56:7d:90:12:fb:a9:72:20:c9:5e:
         a6:49:9a:3d:16:ab:32:b0:7f:e8:4d:23:fe:20:68:46:eb:14:
         9c:c2:7f:0d:71:b9:ef:28:19:85:7b:ab:e4:e0:07:22:3d:2f:
         1b:57:7e:63:0e:fd:b4:bd:c6:82:1a:ac:0e:53:8d:b1:2c:4f:
         11:31:94:1f:fe:36:ce:e9:3a:ca:93:96:6d:cc:36:83:13:aa:
         a8:2d:48:d2:f0:c1:f8:14:c0:88:1f:0d:6f:5b:c5:22:c6:f3:
         d8:44:a3:7d:d2:4b:23:47:0e:5e:63:0b:18:fc:7d:19:97:fe:
         d1:09:c6:04:01:93:61:24:58:ef:6f:d9:aa:bf:22:16:fc:1f:
         1b:62:da:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 01:37:53 2024 by rpki-client on console-ams.rpki-client.org