Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362C0A8/E3CE6472F58611EEAC15AA55775412E6/J0UHUIUUY7pU58gtxiPY1NA7-_M.mft
File:                     J0UHUIUUY7pU58gtxiPY1NA7-_M.mft (raw, json)
Hash identifier:          aDYV3UYDv3YkMFlT0xgJv0xVWXSkx/4asOdFR2FlUBA=
Subject key identifier:   09:7F:38:BE:E9:CE:8B:87:AF:C6:C3:D3:CC:75:96:27:3B:30:D5:34
Authority key identifier: 27:45:07:50:85:14:63:BA:54:E7:C8:2D:C6:23:D8:D4:D0:3B:FB:F3
Certificate issuer:       /CN=F362C0A8AF/serialNumber=27450750851463BA54E7C82DC623D8D4D03BFBF3
Certificate serial:       2D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/J0UHUIUUY7pU58gtxiPY1NA7-_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362C0A8/E3CE6472F58611EEAC15AA55775412E6/J0UHUIUUY7pU58gtxiPY1NA7-_M.mft
Manifest number:          2C
Signing time:             Sun 19 May 2024 02:35:37 +0000
Manifest this update:     Sun 19 May 2024 02:35:37 +0000
Manifest next update:     Tue 21 May 2024 02:35:37 +0000
Files and hashes:         1: J0UHUIUUY7pU58gtxiPY1NA7-_M.crl (hash: kILos8obJy59/2fNglul/1f3w/EQKDLmfF3jAiqnUzY=)
                          2: 551745F4F58711EE98741157775412E6.roa (hash: PKlN6lJiG4I6zfGoS0XUarhAA7/4QhFFrR9iXFInLzw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362C0A8/E3CE6472F58611EEAC15AA55775412E6/J0UHUIUUY7pU58gtxiPY1NA7-_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362C0A8/E3CE6472F58611EEAC15AA55775412E6/J0UHUIUUY7pU58gtxiPY1NA7-_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/J0UHUIUUY7pU58gtxiPY1NA7-_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362C0A8AF/serialNumber=27450750851463BA54E7C82DC623D8D4D03BFBF3
        Validity
            Not Before: May 19 02:35:37 2024 GMT
            Not After : May 21 02:35:37 2024 GMT
        Subject: CN=66496579-cb7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f6:c1:6c:62:29:3d:eb:c9:ac:84:2d:a6:25:
                    9e:70:df:73:59:05:bb:65:c3:51:a0:82:4e:65:92:
                    45:db:62:ff:16:0c:6c:46:54:05:e3:e9:d7:a0:00:
                    2c:c2:92:06:1c:e3:cb:8f:e3:f6:47:ed:4a:7b:dd:
                    50:80:2e:5c:79:14:f3:37:f6:d3:c7:42:92:37:af:
                    6b:e1:78:6c:39:6b:0a:2c:85:03:85:80:a6:7b:a2:
                    2b:ba:ef:70:03:d0:60:d7:b6:65:77:ce:b0:32:52:
                    12:e7:a2:9d:75:3a:a6:12:37:a9:84:05:a6:c6:ae:
                    ab:54:ba:2a:09:1d:9b:78:33:31:72:5d:79:3f:b2:
                    02:3e:42:f1:45:a1:32:02:68:23:c8:ab:46:da:17:
                    60:a5:7f:58:ba:43:47:be:e5:34:30:ae:dc:de:54:
                    89:5b:8b:d8:49:cb:8d:4b:41:63:3a:93:9f:48:eb:
                    ea:e8:4b:f6:a1:99:8f:90:1a:bc:98:d0:67:fb:74:
                    00:bb:6e:16:8f:52:42:d0:e1:7e:7d:62:57:57:ae:
                    e6:c8:80:20:c5:8f:33:e2:ec:71:e3:7d:06:d0:a8:
                    31:bd:e9:e4:4e:4d:64:f5:fd:1b:ad:ce:7a:fb:85:
                    d1:f7:df:b1:5f:ec:af:58:4e:c2:f1:d4:16:12:22:
                    e0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7F:38:BE:E9:CE:8B:87:AF:C6:C3:D3:CC:75:96:27:3B:30:D5:34
            X509v3 Authority Key Identifier:
                keyid:27:45:07:50:85:14:63:BA:54:E7:C8:2D:C6:23:D8:D4:D0:3B:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362C0A8/E3CE6472F58611EEAC15AA55775412E6/J0UHUIUUY7pU58gtxiPY1NA7-_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/J0UHUIUUY7pU58gtxiPY1NA7-_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362C0A8/E3CE6472F58611EEAC15AA55775412E6/J0UHUIUUY7pU58gtxiPY1NA7-_M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:73:84:0f:dc:2a:8c:ae:a6:79:50:fd:48:48:c1:ab:45:37:
         b7:8c:f6:57:d6:6a:90:71:7c:68:04:98:d7:24:b4:65:2d:ef:
         7b:90:4d:50:42:66:02:88:f0:9e:98:4b:ee:8d:85:47:8d:4b:
         ac:e7:cc:c4:b5:49:bf:ef:06:3a:14:98:63:e1:fa:f2:86:cd:
         1b:c4:37:46:7d:5c:66:01:3a:91:0d:0b:3f:eb:dc:78:e3:cb:
         79:72:b3:5c:59:bd:7d:e9:3c:2a:24:84:2c:38:33:a9:6b:75:
         6a:cc:cb:39:dd:12:2a:99:5e:fd:69:93:af:49:fb:b7:f5:47:
         73:d1:a4:d2:73:7d:2c:6a:4d:7a:92:42:36:67:76:c2:8c:f1:
         81:d2:0f:db:64:a1:bb:5e:d5:b1:a1:7c:38:d4:98:e6:da:00:
         d6:f6:2e:27:26:36:c1:7b:22:24:ca:a5:06:8e:7c:4b:50:93:
         f3:50:1c:5b:a7:90:bc:0e:7f:78:36:66:c4:64:65:28:93:81:
         f8:ba:34:45:8a:64:98:ba:80:4d:ae:5a:91:80:a3:a2:93:af:
         6f:e3:9b:cd:38:23:d1:3a:b6:31:41:5a:56:77:6b:98:fb:bd:
         94:fb:1f:94:b1:69:71:44:dc:69:52:cb:ef:62:24:31:59:b1:
         b2:67:84:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:14:46 2024 by rpki-client on console-fra.rpki-client.org