Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
File:                     ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft (raw, json)
Hash identifier:          aVjKWJ9S81Q9pqcNSJovpehOD7ZytyiCWR4B1zjsIRc=
Subject key identifier:   5D:CC:62:56:65:C4:05:3B:8E:57:C4:81:6D:4A:F5:84:48:8D:A1:E7
Authority key identifier: 67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
Certificate issuer:       /CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Certificate serial:       0324
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
Manifest number:          0323
Signing time:             Sun 24 Nov 2024 02:01:08 +0000
Manifest this update:     Sun 24 Nov 2024 02:01:08 +0000
Manifest next update:     Tue 26 Nov 2024 02:01:08 +0000
Files and hashes:         1: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl (hash: oE5og+ttlkTwfcwcq/v/KVw+QNXhsKFM6oYuUici5a8=)
                          2: 1A49A96A7AC911ED812AA695F1222468.roa (hash: ETAi2jqzRi0+AxwIwLa8K/gDxbVP7M/q9PlBlPYnPkY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
                          rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 804 (0x324)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
        Validity
            Not Before: Nov 24 02:01:08 2024 GMT
            Not After : Nov 26 02:01:08 2024 GMT
        Subject: CN=674288e4-9a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:24:16:5d:f1:7b:a3:ee:67:42:25:78:b0:6b:
                    0d:0e:ee:bc:94:2b:46:03:a1:54:ce:c8:95:3a:65:
                    9c:bd:06:1b:3d:3b:d6:f1:2b:44:30:3f:58:ef:9d:
                    17:a3:e3:56:ce:db:1b:a9:1a:52:6b:92:da:88:0b:
                    2d:ed:35:13:f3:3c:26:7b:38:90:e5:10:ec:b4:44:
                    f4:ec:ca:44:b5:1b:60:a9:05:3f:f7:f6:74:14:fb:
                    6c:db:17:28:d1:82:dd:2f:95:53:08:6f:aa:40:ea:
                    f7:93:f3:3a:c4:38:d9:53:54:c4:80:28:8f:ab:af:
                    8a:bb:bd:80:5b:32:41:c0:b0:36:01:c7:97:d8:ca:
                    da:1b:55:67:3d:93:33:db:15:da:52:85:29:c1:b8:
                    4e:53:4b:ab:26:0b:20:79:fc:7e:f0:40:cf:41:af:
                    c0:e9:20:be:71:0e:7a:18:0d:84:da:55:69:65:2d:
                    8f:3b:9d:cf:6d:a3:89:35:f8:93:6c:62:a8:8d:e5:
                    53:e3:0d:fc:fd:86:f1:ba:d6:b3:2a:cb:50:78:8e:
                    05:ae:d3:ff:bf:0e:da:e2:28:b9:42:80:c5:3b:2d:
                    98:0c:81:a5:a3:5f:d0:90:0c:7e:fe:ec:44:6b:dc:
                    66:40:7c:9a:18:cd:b7:9b:ec:a0:f0:a0:ae:a8:45:
                    ba:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:CC:62:56:65:C4:05:3B:8E:57:C4:81:6D:4A:F5:84:48:8D:A1:E7
            X509v3 Authority Key Identifier:
                keyid:67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:e0:dd:0b:5f:1e:a3:ab:73:0f:7f:75:c6:0d:8c:21:bf:53:
         61:e1:d3:38:c3:a5:2a:c1:be:80:08:2d:b0:b0:48:4b:07:cb:
         2e:ba:53:0e:81:63:b0:56:7e:e4:a5:7d:29:f2:f6:4d:3c:a0:
         e2:95:80:75:fe:f0:b0:6a:58:d9:54:49:23:0c:ae:fd:f9:da:
         17:2d:c7:0d:35:ae:9d:a2:8d:7c:fd:cb:bc:6a:42:31:e0:26:
         69:12:f4:68:0d:0a:03:0c:b2:5d:6c:6c:74:9d:37:0d:a1:dd:
         8d:36:b3:dd:8b:72:68:10:2a:bf:11:14:6e:a8:c0:33:d4:54:
         07:bd:81:28:bf:10:6b:cb:24:b2:5a:12:e9:40:82:56:dc:f5:
         3b:ab:15:76:b2:ca:d1:97:0a:fe:2e:00:76:d9:57:58:b2:5c:
         95:af:5f:78:93:33:60:22:6e:bf:e5:d7:32:e2:d8:2c:a6:9a:
         86:ab:65:f5:07:c4:ef:64:45:56:a1:e7:a3:95:4c:8c:db:01:
         56:79:90:dc:41:84:58:3d:db:eb:8c:ad:e7:0b:75:5c:d2:f9:
         cb:a3:62:46:00:5e:4f:cb:00:8a:23:f7:62:6b:13:51:17:13:
         96:56:dc:09:46:27:a5:b8:60:c2:49:c5:60:76:23:a5:cb:5f:
         b7:c8:23:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:29:35 2024 by rpki-client on console-fra.rpki-client.org