Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
File:                     QabtdYD_4RTJIrivEHMnCV4AVbo.mft (raw, json)
Hash identifier:          sO1Zg8o24GoeUFdEbDXKQbF1R3GGZDVmyObbarKeoY0=
Subject key identifier:   BB:00:80:B0:96:0F:65:AC:9D:F1:68:E2:83:B9:61:76:8B:61:82:14
Authority key identifier: 41:A6:ED:75:80:FF:E1:14:C9:22:B8:AF:10:73:27:09:5E:00:55:BA
Certificate issuer:       /CN=F3633204AF/serialNumber=41A6ED7580FFE114C922B8AF107327095E0055BA
Certificate serial:       03D6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
Manifest number:          03D5
Signing time:             Tue 07 May 2024 01:36:38 +0000
Manifest this update:     Tue 07 May 2024 01:36:38 +0000
Manifest next update:     Thu 09 May 2024 01:36:38 +0000
Files and hashes:         1: QabtdYD_4RTJIrivEHMnCV4AVbo.crl (hash: qFEmQZk3SsEJtv/XDEjrWuEzZpoUuvetyXFAQVn7Vns=)
                          2: 60C18DA81F8B11EC8FB62036D8A014CE.roa (hash: Jdq3emfvNJDMjT/lQOHOUpy/8j3a1sny+FYMlqTox8c=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 982 (0x3d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3633204AF/serialNumber=41A6ED7580FFE114C922B8AF107327095E0055BA
        Validity
            Not Before: May  7 01:36:38 2024 GMT
            Not After : May  9 01:36:38 2024 GMT
        Subject: CN=663985a6-49ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c0:be:5d:65:72:87:a0:28:36:f2:9b:34:6c:
                    47:0f:d9:c2:d4:3e:4d:16:0b:53:60:74:c7:a6:fc:
                    8b:ad:fb:28:73:6f:13:f2:5c:a2:fb:85:e1:df:da:
                    3e:bf:75:34:5b:b4:40:19:29:0c:aa:77:b0:6d:79:
                    5e:f6:fa:be:60:c9:7a:5c:cf:cc:ee:b4:90:a9:5a:
                    f0:4b:2c:51:5e:ea:ed:f5:06:a5:44:f2:17:0d:47:
                    77:d1:a7:c1:b1:b7:44:6d:d8:a5:72:7f:89:96:ea:
                    33:8a:b5:92:be:22:72:95:39:3c:88:9d:62:31:6e:
                    4f:a4:6a:16:1f:c3:5d:27:71:32:0f:e9:6b:df:25:
                    fe:a5:6a:18:5e:5b:9e:6d:ac:cd:94:db:a4:55:50:
                    6a:e2:ec:0a:36:2b:3e:1b:a5:6d:87:5e:9b:ca:0c:
                    8f:1c:90:43:02:45:e5:0b:84:34:81:c0:8e:7c:c3:
                    e7:02:3a:d4:0e:14:e7:50:42:7b:1d:af:2c:2e:2e:
                    36:da:b9:08:0f:36:03:e3:ff:42:24:47:fa:e1:88:
                    f8:35:af:0c:cf:43:75:1f:f3:f0:cb:90:68:6f:d6:
                    e4:43:65:4d:6e:ba:7a:ae:24:75:05:a0:00:ec:a1:
                    ed:fb:67:14:17:7b:7f:10:d5:36:51:f7:4f:3e:93:
                    51:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:00:80:B0:96:0F:65:AC:9D:F1:68:E2:83:B9:61:76:8B:61:82:14
            X509v3 Authority Key Identifier:
                keyid:41:A6:ED:75:80:FF:E1:14:C9:22:B8:AF:10:73:27:09:5E:00:55:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f2:51:ae:99:f1:ee:03:fb:ba:74:b1:27:bc:91:10:fa:01:
         83:50:30:91:5a:84:49:a3:76:58:c9:93:26:66:4c:c0:ff:cb:
         05:20:25:a2:b6:1f:6c:99:b4:5b:f5:7f:23:ba:ee:6e:c7:d9:
         2b:2f:98:17:7a:eb:54:ca:0c:15:f8:e6:db:61:ee:fc:1e:e9:
         80:cc:1b:c8:46:61:92:4b:11:d0:be:b6:c1:69:8e:6d:70:89:
         78:20:0c:10:0a:55:2d:ac:e4:24:2e:2b:12:e0:76:24:3a:a7:
         ac:d5:e4:7c:98:c9:f3:32:7a:f6:56:30:ef:8f:e4:c5:a7:88:
         62:ae:25:1f:ef:6b:71:47:c8:18:a2:2c:d2:ba:66:2e:7e:4b:
         bd:4c:85:f5:c2:e0:c8:a4:bc:63:16:0c:6b:82:0c:8a:59:24:
         42:a1:e8:2f:fc:c2:fd:01:5c:0e:f6:a2:2f:b1:2a:4c:2d:c0:
         2b:51:85:dd:a0:af:59:56:25:6f:f0:01:1a:58:0b:e9:8e:17:
         8f:03:53:7d:25:ff:8b:51:49:10:7a:99:7e:ba:ec:8a:bf:96:
         dc:dd:79:84:77:b9:d4:0e:26:b0:af:d6:1e:c2:3d:6c:29:82:
         a1:09:f0:99:00:fb:83:da:04:0b:e7:cf:2c:3b:a2:2f:a7:0f:
         f9:52:12:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:09:37 2024 by rpki-client on console-ams.rpki-client.org