Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
File:                     gBdkcAW5GRQgyZGxrgeYtayhTQw.mft (raw, json)
Hash identifier:          Yzo9Un6D5JkrsNECsoJi6qItCXfQZ0go9nnYpyj8K+A=
Subject key identifier:   BF:10:6C:06:E9:EE:FA:F4:25:21:B9:AF:96:E9:32:E0:F2:F9:F5:49
Authority key identifier: 80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
Certificate issuer:       /CN=F3632CFEAF/serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Certificate serial:       058C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
Manifest number:          0580
Signing time:             Fri 22 Nov 2024 01:24:21 +0000
Manifest this update:     Fri 22 Nov 2024 01:24:20 +0000
Manifest next update:     Sun 24 Nov 2024 01:24:20 +0000
Files and hashes:         1: gBdkcAW5GRQgyZGxrgeYtayhTQw.crl (hash: 4QUU/lAbFAoQICyUPTPyYQPy3zNWUblp4o+qZutuGrs=)
                          2: 49BADED6E0AF11EBA4AE8C60F8AEA228.roa (hash: bfzLeABKt8iJaNdlc12joZPlW2B3ok9kJhlWiLncwS0=)
                          3: 40E2C4A2E0D411EBB731DB11F8AEA228.roa (hash: iNVwS1o0KwvedAC6eQYfYJ+BAcXsoI+clsk0jnqfrIA=)
                          4: 10C8FFEEE29F11EBAA580947F8AEA228.roa (hash: 387HhPDysnyOhc8pmgAp8wGABIBNWQ6h4D9Qi4Iokv0=)
                          5: 7A4D6530E0D411EB863D3F12F8AEA228.roa (hash: P26YxJOy6uRICshHfktO8hTsp7ut8yCkshcNludKd0A=)
                          6: 254A1146DE4A11EB99E5AD21F8AEA228.roa (hash: +hq36BifBeCSUhyFbBupJ4tam0DEvG9eurBQqxlzAcI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1420 (0x58c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632CFEAF/serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
        Validity
            Not Before: Nov 22 01:24:20 2024 GMT
            Not After : Nov 24 01:24:20 2024 GMT
        Subject: CN=673fdd44-47a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:a8:48:f6:ef:e5:3d:75:dc:d0:52:2e:d9:
                    1b:77:ff:6e:5e:65:82:3f:df:2f:82:34:ae:ab:55:
                    4f:f8:28:20:ca:17:eb:df:56:23:25:5f:81:a8:0d:
                    34:f5:23:e5:33:4d:69:d8:e5:bc:25:65:88:11:56:
                    b9:15:4c:5b:28:7b:7a:47:5b:a9:73:76:47:37:e2:
                    d6:16:9f:26:ed:8a:b0:f3:39:4c:ab:d9:a7:eb:47:
                    6d:f4:ff:b1:98:28:ff:80:21:39:6b:b4:bb:71:af:
                    5f:31:6b:b4:45:75:d2:67:4b:b4:ec:4e:ff:77:4a:
                    b5:bc:45:5b:9b:38:f5:32:d3:99:4d:9e:26:eb:bd:
                    b8:62:35:b6:a6:7f:b7:9c:bc:3d:a8:f7:e4:09:c8:
                    0e:49:c2:63:38:11:89:b1:6e:d4:29:47:fc:c8:6f:
                    8c:25:ac:27:a6:6c:d8:80:65:48:4a:de:69:b8:56:
                    ff:1e:cc:a4:39:2f:f5:77:d0:dd:7b:e3:60:42:35:
                    b5:6a:7d:4a:37:5e:33:dc:c5:7a:d2:8e:90:a2:a9:
                    97:be:1d:92:5b:9a:6d:df:57:97:f7:7d:e0:ba:fc:
                    88:dd:a3:9f:9a:5b:8d:62:8c:a9:50:cb:82:85:99:
                    f5:1d:22:e7:59:ff:7d:8b:03:d8:b4:12:ac:22:2c:
                    1d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:10:6C:06:E9:EE:FA:F4:25:21:B9:AF:96:E9:32:E0:F2:F9:F5:49
            X509v3 Authority Key Identifier:
                keyid:80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:ea:83:82:01:26:75:13:bf:7f:74:c7:8d:1e:3a:e0:6e:21:
         5c:3d:83:0d:58:b5:36:4d:a4:85:6c:e8:5f:81:da:94:08:e4:
         b8:d7:57:dc:1a:92:dc:76:cf:43:03:60:a3:47:1a:73:74:04:
         35:8b:72:ca:37:e1:4d:19:de:cf:7e:eb:38:12:bd:ab:f9:64:
         a7:dc:2f:93:60:c0:b3:e5:ed:1f:d3:54:de:3c:34:7c:ca:5b:
         f9:ae:84:ad:e6:80:08:2d:2b:71:59:c0:b2:0d:78:a7:a2:f5:
         95:a5:c2:96:6c:9c:ee:95:5b:25:52:d2:d7:f2:a8:95:d8:8a:
         7f:34:96:4b:e8:e3:35:01:a3:1c:a1:d5:45:37:a8:e1:51:48:
         ed:43:06:67:59:f0:2e:92:51:60:8c:8b:06:39:bb:80:7f:e0:
         74:9c:79:02:ae:17:0a:98:92:4f:fa:4d:cd:21:d9:9e:f6:43:
         cb:f4:ec:e4:dc:56:5f:6f:2f:ee:ec:62:b4:0c:6d:26:64:17:
         23:9a:44:45:f4:60:a9:5e:06:10:6d:fd:fc:84:b1:25:71:ea:
         88:f0:78:76:fe:ee:37:03:81:f1:ea:01:19:f6:0c:ce:0f:93:
         bb:23:6f:a8:a6:83:c3:ce:97:68:96:c3:7d:ef:ac:39:05:ec:
         7f:04:36:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org