Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.mft
File:                     7fjY2rSy5miVSkC6Vt0hxkUoOdw.mft (raw, json)
Hash identifier:          oQCCQYZi1KpYYA9EHBdC+xtIN61iqYY6dGfxpQfNwB8=
Subject key identifier:   20:5A:D9:D0:62:3F:61:87:DE:5D:D6:48:8F:BD:5E:17:56:A6:6B:65
Authority key identifier: ED:F8:D8:DA:B4:B2:E6:68:95:4A:40:BA:56:DD:21:C6:45:28:39:DC
Certificate issuer:       /CN=F362F418AF/serialNumber=EDF8D8DAB4B2E668954A40BA56DD21C6452839DC
Certificate serial:       02C2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7fjY2rSy5miVSkC6Vt0hxkUoOdw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.mft
Manifest number:          02C1
Signing time:             Tue 30 Apr 2024 01:50:52 +0000
Manifest this update:     Tue 30 Apr 2024 01:50:52 +0000
Manifest next update:     Thu 02 May 2024 01:50:52 +0000
Files and hashes:         1: 7fjY2rSy5miVSkC6Vt0hxkUoOdw.crl (hash: je/toLl+U4dkYGM0wKqcN2dYAO0LVl1xDffNkndiKQI=)
                          2: E61ECE6CF16711ECAF9FC9C5F1222468.roa (hash: E5T3u9+Nvv+e6OXP5qapGJd3sqCIYjsS23WS1SQsOII=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7fjY2rSy5miVSkC6Vt0hxkUoOdw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 01 May 2024 09:43:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 706 (0x2c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362F418AF/serialNumber=EDF8D8DAB4B2E668954A40BA56DD21C6452839DC
        Validity
            Not Before: Apr 30 01:50:52 2024 GMT
            Not After : May  2 01:50:52 2024 GMT
        Subject: CN=66304e7c-99f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b6:ca:f8:a9:36:0c:0a:0d:5b:1b:b3:e8:22:
                    ab:2a:33:ba:ab:55:f7:b8:81:11:44:45:37:0e:fe:
                    36:a9:19:da:e4:f5:00:61:5c:4b:8a:de:72:2d:95:
                    e9:87:0f:a3:ee:3b:53:16:4c:3d:5a:5d:29:7e:b7:
                    fd:9b:26:2b:c1:26:55:71:cc:be:7a:83:b5:34:a4:
                    4b:a3:29:04:d3:b2:54:c4:d3:16:f0:b8:88:9d:2d:
                    4f:2b:13:ee:33:5f:b8:63:88:d1:cd:ad:dd:1f:07:
                    3a:88:2b:54:02:66:80:d8:a0:33:21:9d:1d:c0:17:
                    5e:2a:92:d1:c1:0f:89:04:1c:c6:d0:d2:47:8f:53:
                    26:13:55:3b:b4:bd:5b:a3:59:2b:29:5e:1e:94:20:
                    74:8e:bd:5f:79:f2:2d:e6:ab:15:a6:3c:07:73:15:
                    a8:9a:5e:1c:c4:1f:39:58:1a:56:83:eb:67:7f:74:
                    70:1d:53:38:62:70:40:f0:b7:61:7a:46:1d:81:f6:
                    6b:85:c3:14:4c:8e:76:7f:52:bd:5b:d1:8d:b3:10:
                    19:08:7d:de:8f:3d:88:12:53:f7:a5:3d:3f:07:a0:
                    b5:2d:1d:10:96:9a:f9:4c:78:4a:3c:d9:6c:df:61:
                    94:6a:20:19:d4:dd:71:70:d3:03:b6:c9:04:b9:33:
                    fa:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5A:D9:D0:62:3F:61:87:DE:5D:D6:48:8F:BD:5E:17:56:A6:6B:65
            X509v3 Authority Key Identifier:
                keyid:ED:F8:D8:DA:B4:B2:E6:68:95:4A:40:BA:56:DD:21:C6:45:28:39:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7fjY2rSy5miVSkC6Vt0hxkUoOdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362F418/5B014658F16611EC9FCB21C1F1222468/7fjY2rSy5miVSkC6Vt0hxkUoOdw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:8b:a3:49:f4:7d:a2:5d:59:61:b7:81:c2:58:87:28:ad:b0:
         e4:43:d2:e2:53:77:b9:7c:0d:1c:5f:68:38:80:91:02:3b:89:
         1f:08:59:38:cb:8c:22:e9:ee:ea:32:78:86:36:c0:1d:22:67:
         34:8f:a5:a1:2f:0d:0f:7f:6e:09:cc:04:7d:50:b5:1c:94:4e:
         80:0d:78:cb:d7:94:67:f1:62:99:e9:f9:71:ad:be:6a:23:f5:
         ed:75:92:99:0b:1c:e2:31:a5:29:50:93:c3:80:57:36:36:dc:
         31:25:56:e5:57:50:d7:8a:f3:fd:e6:e7:6e:ad:9f:39:15:40:
         4d:71:08:d8:cc:f8:87:45:d2:ac:a0:28:1f:ab:bc:53:64:6f:
         27:a9:34:c4:43:40:9d:1a:3b:3c:99:68:8e:77:b3:82:5f:76:
         f0:2e:af:f2:fd:fa:f8:24:6e:65:cc:bb:5a:02:ef:a6:14:c2:
         67:3e:35:96:6b:f0:fc:57:45:14:96:ea:1d:ef:40:78:b0:e6:
         5d:88:a8:00:73:7b:3e:63:e2:ce:1c:50:58:d1:0d:38:27:f8:
         94:da:0a:75:96:88:07:1c:19:61:85:fa:57:51:37:1f:1c:61:
         94:bc:3d:2b:a6:5f:bf:00:28:85:62:f3:19:82:b5:f5:78:c8:
         e1:25:97:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 03:32:43 2024 by rpki-client on console-fra.rpki-client.org