Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
File:                     YCmqMiQ3H_80BW6mdrX5npQG208.mft (raw, json)
Hash identifier:          LZZQvuwGHTNwrLz8pfp3WLDyteTgrXHivGVbj+ICg5Y=
Subject key identifier:   FF:9E:E9:59:A6:7F:22:1A:0A:2E:F8:11:FC:0C:CE:6D:3D:4A:0D:A7
Authority key identifier: 60:29:AA:32:24:37:1F:FF:34:05:6E:A6:76:B5:F9:9E:94:06:DB:4F
Certificate issuer:       /CN=F362BDD7AF/serialNumber=6029AA3224371FFF34056EA676B5F99E9406DB4F
Certificate serial:       10
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
Manifest number:          10
Signing time:             Wed 23 Oct 2024 03:06:47 +0000
Manifest this update:     Wed 23 Oct 2024 03:06:47 +0000
Manifest next update:     Fri 25 Oct 2024 03:06:46 +0000
Files and hashes:         1: YCmqMiQ3H_80BW6mdrX5npQG208.crl (hash: pkrCS0lgtCHpCYwtdGIeNXQ7oU/pWhBRFyj7T7gBI7g=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
                          rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362BDD7AF/serialNumber=6029AA3224371FFF34056EA676B5F99E9406DB4F
        Validity
            Not Before: Oct 23 03:06:47 2024 GMT
            Not After : Oct 25 03:06:46 2024 GMT
        Subject: CN=67186847-9de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:73:8d:50:98:b4:dc:23:f3:57:72:35:94:7e:
                    69:02:41:28:e5:35:37:43:4b:fe:5a:cd:be:cc:6f:
                    48:f3:22:d6:a7:f5:97:bb:d1:7e:c4:b4:41:25:63:
                    33:08:ee:cf:81:f1:12:14:25:89:3f:38:d9:a6:84:
                    f1:92:d5:c8:5c:ee:e8:9f:bc:a1:14:47:83:2f:e0:
                    d2:d6:19:4b:39:e2:fe:bf:a1:40:f3:7b:31:b0:c8:
                    18:ad:86:76:3f:5c:82:65:11:75:46:5c:e2:0e:35:
                    70:da:f9:f7:c8:60:39:ff:c4:6b:e2:77:86:80:5c:
                    0d:c6:ef:dd:ca:df:f8:19:44:a0:42:37:8f:da:9b:
                    f8:52:74:fe:eb:a4:db:56:a7:75:f7:bc:7d:4b:04:
                    54:66:a7:24:ef:36:13:e3:6a:67:94:37:43:73:d1:
                    87:99:b3:31:f4:f6:a5:26:13:f3:2c:ad:c0:57:42:
                    31:0f:f2:5c:b6:5e:2d:f0:7a:36:85:62:e9:2c:4a:
                    42:40:a3:de:47:a3:89:db:81:50:48:0f:fd:dc:c9:
                    9f:9f:36:9e:54:b1:72:0a:ec:e8:12:70:4c:be:33:
                    7d:7e:a7:92:88:9b:02:b4:85:f2:08:af:69:f3:6c:
                    61:ac:f1:ef:f3:e9:f7:a8:1f:be:75:ef:66:39:0e:
                    d4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:9E:E9:59:A6:7F:22:1A:0A:2E:F8:11:FC:0C:CE:6D:3D:4A:0D:A7
            X509v3 Authority Key Identifier:
                keyid:60:29:AA:32:24:37:1F:FF:34:05:6E:A6:76:B5:F9:9E:94:06:DB:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/YCmqMiQ3H_80BW6mdrX5npQG208.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362BDD7/EF4D2B06856111EFA5670D9D762E951A/YCmqMiQ3H_80BW6mdrX5npQG208.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:e2:de:6c:72:97:77:df:f6:21:67:50:8b:4d:8e:28:8b:5d:
         97:ab:45:8e:e7:55:b1:30:4b:40:f6:b9:1c:5c:20:36:65:1c:
         b2:6e:6d:ed:7a:cf:96:61:db:00:a9:95:38:bf:21:77:9f:0b:
         62:de:5f:a8:31:f4:1a:0c:11:98:96:cb:b9:7a:02:5d:7f:3c:
         73:32:4e:38:6d:c6:6f:f8:c4:24:05:5b:2c:ab:56:9c:46:6e:
         a2:6b:67:a5:f5:bb:a3:08:42:17:bf:21:ed:2b:e4:fa:34:7c:
         05:13:e9:4b:a0:1c:7a:0a:7d:7c:eb:55:35:42:4d:27:b2:3e:
         0d:69:a9:52:64:79:64:85:1c:51:88:b5:eb:e2:f4:77:a7:2e:
         a6:e9:d2:85:4a:4b:03:75:a7:16:b3:da:c4:62:21:11:53:37:
         a4:93:74:b2:ed:68:50:3b:e4:24:ad:04:6b:01:a6:33:75:b3:
         34:90:fb:43:bf:05:34:f8:b2:c5:0e:31:32:d7:ce:1f:ef:24:
         9d:fe:73:dd:9d:49:aa:b4:f8:5b:2c:6f:89:8b:90:1e:79:91:
         45:d2:28:ce:f4:9c:e6:bc:c4:4e:06:b4:68:e6:86:06:9b:89:
         7f:2d:b0:8b:fc:8e:7c:f6:06:b5:34:68:89:69:6a:e1:58:4f:
         01:79:6d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:41:10 2024 by rpki-client on console-ams.rpki-client.org