Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
File:                     NSunHRHXakg8nsebSWRvi0XYOLo.mft (raw, json)
Hash identifier:          A3dsOLWjXVncUFmvvuh4IeyGqV/Ub7si5upcdH7wXw0=
Subject key identifier:   AC:AC:7B:B2:14:D6:F9:CF:4C:D8:2C:18:8B:40:E7:38:8B:D5:45:AF
Authority key identifier: 35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA
Certificate issuer:       /CN=F3633396AF/serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
Certificate serial:       03EF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
Manifest number:          03EE
Signing time:             Sun 28 Apr 2024 01:33:41 +0000
Manifest this update:     Sun 28 Apr 2024 01:33:41 +0000
Manifest next update:     Tue 30 Apr 2024 01:33:41 +0000
Files and hashes:         1: NSunHRHXakg8nsebSWRvi0XYOLo.crl (hash: qruXY0PsgOzB1AnXVcYYQmhEIzFLKqdNo6BZAh9jzZM=)
                          2: 19B37868088911ECBD02C81ED8A014CE.roa (hash: ftsx6sqCnGy9hfgGucWr2xatiRuWyYW7ArMelWiLknk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Apr 2024 00:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1007 (0x3ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3633396AF/serialNumber=352BA71D11D76A483C9EC79B49646F8B45D838BA
        Validity
            Not Before: Apr 28 01:33:41 2024 GMT
            Not After : Apr 30 01:33:41 2024 GMT
        Subject: CN=662da775-14c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:98:ef:5a:9d:f8:95:88:b0:3b:cb:30:96:c9:
                    6d:bc:4d:0c:45:a4:6b:fa:d2:bb:b1:54:c2:6b:90:
                    9a:f2:d4:ef:d5:69:2c:f8:15:99:f2:5b:a2:cd:39:
                    55:18:5c:92:6e:ff:8d:69:a0:e5:d3:ea:c2:5c:74:
                    96:f5:58:8e:67:7a:02:4d:37:ba:b8:11:38:30:20:
                    ab:66:58:44:de:06:78:27:13:22:bd:cf:36:7f:3a:
                    be:1a:e6:4d:b1:56:7d:37:cc:85:24:01:22:fc:02:
                    e1:82:a7:ae:af:68:41:e3:cf:ce:59:44:ce:15:cc:
                    4a:54:fd:72:f6:87:4a:da:52:5f:2e:b5:b2:37:b8:
                    e9:47:d4:81:92:ce:bf:1e:26:e6:d4:b1:ca:c0:9c:
                    65:66:d7:1f:31:17:13:2e:9d:3e:b5:51:03:66:5e:
                    17:73:48:30:34:74:e1:80:71:19:b5:36:e0:55:8a:
                    e4:1a:b2:a5:6d:c5:10:47:2a:d3:61:7b:b2:c4:1c:
                    a2:d6:c2:04:70:26:bd:a9:3b:6c:fd:4c:6c:64:15:
                    4b:bc:0c:2e:23:e0:51:f3:ac:2a:b6:70:1b:a6:c4:
                    0f:5d:19:d9:3a:fd:7a:91:26:24:2a:f0:a7:62:9a:
                    5d:41:39:09:48:d8:6b:88:d9:aa:22:4a:df:cb:ee:
                    66:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AC:7B:B2:14:D6:F9:CF:4C:D8:2C:18:8B:40:E7:38:8B:D5:45:AF
            X509v3 Authority Key Identifier:
                keyid:35:2B:A7:1D:11:D7:6A:48:3C:9E:C7:9B:49:64:6F:8B:45:D8:38:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NSunHRHXakg8nsebSWRvi0XYOLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3633396/FC567508067711EC9D163D5AD8A014CE/NSunHRHXakg8nsebSWRvi0XYOLo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a7:7c:3e:cc:68:b2:0b:a1:3d:56:30:dd:25:fc:4f:b9:f0:
         53:56:54:be:f9:38:18:66:ae:f0:60:89:97:98:2a:97:bd:90:
         e3:91:bb:95:52:66:fc:cd:1e:1b:02:2f:24:30:ff:73:a0:44:
         61:4d:30:d8:6b:64:fa:d3:70:8e:d7:ff:da:70:4a:89:3c:7f:
         c1:d1:bf:de:41:8b:1d:d2:04:a6:d0:ad:f0:11:95:67:44:7a:
         4e:3d:89:a9:19:1c:52:b9:e7:85:82:64:71:1e:7e:f8:20:21:
         82:cd:5a:38:c9:1e:4f:30:79:24:b6:36:be:b8:01:b4:66:09:
         35:96:af:80:cd:87:d9:9a:04:9f:f1:5e:ed:0d:37:f8:69:fd:
         20:08:a6:45:08:50:4b:cf:a1:98:e9:12:13:cb:21:de:71:3c:
         39:b0:74:db:c7:77:e1:8f:4f:70:a4:08:16:07:c3:ba:9a:b1:
         b8:87:7d:11:e1:53:7c:78:6d:82:ce:0d:f2:5e:af:5c:ab:41:
         02:fe:f7:90:5d:ba:e4:90:22:1d:9f:a7:47:cc:5a:55:ee:e5:
         9c:3e:8c:11:b6:f8:66:a7:43:92:24:93:fe:bd:19:40:29:7c:
         74:2d:ac:1d:ed:27:c0:f0:8f:ac:b1:37:b4:e6:fe:14:03:3a:
         4a:fc:59:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:10:29 2024 by rpki-client on console-ams.rpki-client.org