Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
File:                     QabtdYD_4RTJIrivEHMnCV4AVbo.mft (raw, json)
Hash identifier:          1/bWaRvkSOh+rKQzNsKiekVelTYVnJzwByYT22w8Hyo=
Subject key identifier:   64:9A:5F:5D:ED:19:24:44:B7:77:AF:FA:A2:67:37:FE:10:6B:78:2D
Authority key identifier: 41:A6:ED:75:80:FF:E1:14:C9:22:B8:AF:10:73:27:09:5E:00:55:BA
Certificate issuer:       /CN=F3633204AF/serialNumber=41A6ED7580FFE114C922B8AF107327095E0055BA
Certificate serial:       04A1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
Manifest number:          04A0
Signing time:             Fri 22 Nov 2024 01:38:52 +0000
Manifest this update:     Fri 22 Nov 2024 01:38:51 +0000
Manifest next update:     Sun 24 Nov 2024 01:38:51 +0000
Files and hashes:         1: QabtdYD_4RTJIrivEHMnCV4AVbo.crl (hash: BEIup1WBEZH2yf1IBrhl4/l/KWLyCMvlVW/18iroMHY=)
                          2: 60C18DA81F8B11EC8FB62036D8A014CE.roa (hash: Jdq3emfvNJDMjT/lQOHOUpy/8j3a1sny+FYMlqTox8c=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185 (0x4a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3633204AF/serialNumber=41A6ED7580FFE114C922B8AF107327095E0055BA
        Validity
            Not Before: Nov 22 01:38:51 2024 GMT
            Not After : Nov 24 01:38:51 2024 GMT
        Subject: CN=673fe0ac-4bca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:db:cf:be:4a:d0:9b:b5:70:46:ca:39:cd:
                    f6:64:63:aa:de:2d:a2:58:63:8e:08:46:9a:2a:52:
                    58:21:f8:45:a2:08:13:b1:61:44:d1:4e:0c:7b:25:
                    68:5b:87:96:61:f7:ae:c0:91:4c:0f:91:82:43:32:
                    2e:66:71:00:25:5f:7e:66:65:7a:44:5f:fb:37:7c:
                    79:f6:73:69:a6:3d:92:e8:be:13:45:84:10:2e:02:
                    af:33:0c:42:d2:5b:3a:ca:d1:c4:74:45:1e:1b:4e:
                    aa:f3:84:6d:ab:37:4e:f2:22:52:fe:08:ab:33:09:
                    69:ab:a2:e4:7f:42:ed:4e:c8:43:2f:40:f2:52:89:
                    27:05:c5:db:60:11:da:0b:e3:75:a2:16:6a:3a:01:
                    e7:3a:64:e7:74:01:33:63:47:08:63:06:fa:e8:b0:
                    be:82:5a:3a:d0:92:dd:c8:ce:5b:36:0f:99:26:99:
                    b2:ca:77:b1:89:83:a5:1f:65:d8:20:ca:2b:21:50:
                    ce:c6:b0:25:ad:1b:0d:e9:0b:ea:1d:b4:16:85:fe:
                    88:53:d4:11:40:e0:71:0b:a9:21:24:ce:df:34:47:
                    80:ea:7b:1b:02:5f:e5:96:e9:a1:72:2d:23:91:ec:
                    1f:17:9b:73:e0:2e:32:2d:6d:cb:e2:9f:00:7e:86:
                    45:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9A:5F:5D:ED:19:24:44:B7:77:AF:FA:A2:67:37:FE:10:6B:78:2D
            X509v3 Authority Key Identifier:
                keyid:41:A6:ED:75:80:FF:E1:14:C9:22:B8:AF:10:73:27:09:5E:00:55:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QabtdYD_4RTJIrivEHMnCV4AVbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633204/13204AC61F8B11EC91E3A235D8A014CE/QabtdYD_4RTJIrivEHMnCV4AVbo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b7:7f:30:31:ea:cc:34:33:16:a0:be:01:1c:90:e7:2e:0a:
         c8:95:cd:75:fe:12:bd:a0:2b:7e:dd:93:21:9c:2f:89:da:4b:
         13:ca:7a:29:4a:07:59:e7:1a:58:b5:5c:87:57:e4:87:f4:2f:
         a2:61:b7:1b:ba:5c:c2:36:02:12:0a:81:6b:1b:a0:53:07:3a:
         5f:56:f8:f8:66:31:bb:b6:35:fa:7a:45:3a:ea:a2:46:22:02:
         67:84:f8:59:d7:61:ed:58:a5:81:1b:85:9b:34:b1:3d:6a:c0:
         b8:bb:94:4e:45:b3:2a:c3:2c:25:30:58:e6:80:51:6f:bd:e3:
         33:7c:cb:95:26:5e:5a:7c:a7:df:bd:e3:d6:19:10:3f:87:29:
         99:b4:62:b1:55:73:ca:46:9d:46:29:67:83:0e:d8:20:c2:df:
         1b:dc:38:ed:a0:7f:7d:90:5e:b1:65:fa:25:3c:06:6c:b2:e2:
         f5:ea:97:c8:ab:b2:62:85:0d:2d:e1:31:92:99:f7:e5:b9:97:
         76:88:05:6e:57:4e:01:23:0e:26:fd:08:39:00:40:cc:0f:1c:
         2b:8d:c8:12:1c:d9:0f:f5:86:24:fc:ec:69:e7:e2:1f:c0:38:
         dd:c5:eb:45:10:16:70:39:be:68:5d:4e:bf:3f:6b:27:38:8c:
         b1:a2:4f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:32 2024 by rpki-client on console-ams.rpki-client.org