Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
File:                     jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft (raw, json)
Hash identifier:          ej3SV9amBgmhO1nGp/Fjp2o7WvqJksgu9Cci2jASv5c=
Subject key identifier:   37:9B:80:87:A4:99:BD:3B:C1:14:77:54:2D:7C:AD:B3:94:7A:BC:D4
Authority key identifier: 8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B
Certificate issuer:       /CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
Certificate serial:       0F39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
Manifest number:          0EC7
Signing time:             Fri 22 Nov 2024 00:40:11 +0000
Manifest this update:     Fri 22 Nov 2024 00:40:11 +0000
Manifest next update:     Sun 24 Nov 2024 00:40:11 +0000
Files and hashes:         1: jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl (hash: u6Rv+5C5zBAv7il0jT2c5x+RKM/+XB+8Qz3IICZ4W8o=)
                          2: 82FBB372A33F11EF9D8E7B9F762E951A.roa (hash: Z8VTeq5VqCny1+2qc2eer7aayU4OabcWlvbrSBQ3Ro0=)
                          3: 735085F4A33711EFBFDF326E762E951A.roa (hash: jq+UT0fK2rQNaQWZwZg77u/Waht7x2v+K6T6njUJmJs=)
                          4: 54C9E530A33C11EF8A87278C762E951A.roa (hash: Fipj06TEsqxVsD67CiV+Mvae6ysLWsUXL2sTVldoRiY=)
                          5: E48179B0A33F11EF9D185FA1762E951A.roa (hash: h1WcrKRrme1HSVB6iW5WfVK4RCLangeBC8c4FQmnp6M=)
                          6: 81687628A33D11EF9216D192762E951A.roa (hash: MvfxEFROJ1f++TBAwntjCOy+iPFhUtpXYzOBk7MbpP4=)
                          7: 9C775130A33011EF9B156D43762E951A.roa (hash: 4NbZq7JmrO2d8IflCmt6RHPllibhD0U5Ha7Xi8m2cPI=)
                          8: 8D61B536A33B11EF8C1E2886762E951A.roa (hash: dcFvRkXmKR5D9lCNCutI/eY/0GCKBG/swTZgNYWQDMY=)
                          9: BD6C4342A32F11EFAFC746BD762E951A.roa (hash: 35thfBdQw104zKjzssgfjCxYAhX2GyaM8nwv/1VU2vI=)
                          10: 60B5E0E0A32F11EFBE3358BB762E951A.roa (hash: KV4KZRn3mj8zp6sAZP8gPe1HTi1HLT0ooFTzAWyksqs=)
                          11: CEB92EECA34011EF8354EBA7762E951A.roa (hash: e/XiE/BTRSTugXSWmIFYyEVY36JAaMrSiY7TlscErnw=)
                          12: E6587778A33C11EFBA029B8E762E951A.roa (hash: rDQVkDweKoOmH2DbgJ7AoD1HobVkhybI6APGqQpO4LQ=)
                          13: 40CDEE54A32411EFBEA2AA76762E951A.roa (hash: ygTC9DuKVJ/n7JrTrzQh7m9cfirLf1U+TjLI8piQ1Js=)
                          14: DF802CB6A33711EF9437A370762E951A.roa (hash: Nhh/C7s39Zf/p6vDE9S3MXfBEg4Auj+HjABWmIR/tBE=)
                          15: 67AB7E84A34111EFB5E402AA762E951A.roa (hash: 6rGJ9xD1BmaW9JiB2JgP9Ns3uFYbBGDy9vjDStzzOIY=)
                          16: E9EB8D9EA32311EF998D4074762E951A.roa (hash: f7LbuCsz1hH/ZnBV298StqdOFHNpw2u4DY5EmshcxuE=)
                          17: 5184AD26A33011EFA3900B41762E951A.roa (hash: vZEzW20+Dxa0Bltx2ptZesMsOHj6zG5xhOYGhqGHcpk=)
                          18: 2C76CC86A33E11EFBB321097762E951A.roa (hash: PemMUTC7nta4SQMeeYXeNHrbnDsXMh5V6ePiUVaeRVo=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3897 (0xf39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634D22AF/serialNumber=8D01D808E89774543DE22D0DA844378ECEA8BB9B
        Validity
            Not Before: Nov 22 00:40:11 2024 GMT
            Not After : Nov 24 00:40:11 2024 GMT
        Subject: CN=673fd2eb-8326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:48:70:26:ea:80:c8:99:60:08:c6:cd:df:8a:
                    11:2f:ab:6b:b4:d2:4d:e4:2b:18:71:43:1c:8d:96:
                    eb:ef:7b:e3:b2:c5:43:80:6f:cb:19:d0:25:6f:6b:
                    e2:49:a3:a2:b3:b0:8f:26:f6:35:c5:5c:20:dc:a2:
                    48:a1:fb:36:c1:59:b7:84:04:ad:3f:0f:20:02:ff:
                    24:cb:87:9b:b9:76:58:a5:ee:b5:34:4f:cc:27:8b:
                    88:cd:92:ea:b0:fe:cb:00:3a:f8:e0:61:94:5b:73:
                    f0:4e:6d:6a:55:cc:68:a3:27:19:ab:70:3d:17:75:
                    cf:bf:26:3c:38:98:7e:3a:d6:2d:18:b1:bb:18:be:
                    6c:8f:39:23:b7:a1:7f:85:cc:c9:26:2e:57:8a:6c:
                    38:f0:a4:8f:b2:f9:2d:55:53:45:91:74:68:fa:a3:
                    33:aa:b8:cb:16:7d:df:06:8b:42:e4:be:10:e0:6b:
                    30:38:53:25:d9:fd:17:1d:ed:9a:bb:c5:ee:9f:31:
                    69:fa:89:19:7c:6e:df:67:48:87:7c:0f:1f:04:1f:
                    fa:df:60:40:dc:df:04:29:9b:d4:25:d2:23:1e:d7:
                    6a:bb:4b:7f:05:44:c5:99:64:c4:77:c5:84:e9:79:
                    db:0f:fa:c6:46:71:4d:55:2b:3c:d0:94:ce:23:50:
                    1a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9B:80:87:A4:99:BD:3B:C1:14:77:54:2D:7C:AD:B3:94:7A:BC:D4
            X509v3 Authority Key Identifier:
                keyid:8D:01:D8:08:E8:97:74:54:3D:E2:2D:0D:A8:44:37:8E:CE:A8:BB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jQHYCOiXdFQ94i0NqEQ3js6ou5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634D22/1D5F7C26047311E580C18A06F8AEA228/jQHYCOiXdFQ94i0NqEQ3js6ou5s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:96:e6:4b:30:87:a4:d9:35:b3:ac:33:38:37:f6:cc:a4:d2:
         8c:54:1a:b9:63:3c:15:24:77:60:84:57:a8:5f:cb:59:15:a3:
         63:73:3a:5d:6a:65:40:e6:62:df:08:09:2d:96:1e:c3:ad:5a:
         c4:31:ad:d5:83:11:6c:26:8a:66:92:12:e5:4b:20:86:24:2c:
         89:c7:fb:03:86:39:92:b5:9f:57:3c:c2:9c:6f:1a:ea:29:a6:
         45:44:22:d2:a1:2f:f3:1f:1f:d4:80:a6:57:85:15:7c:1a:e9:
         1c:cc:a7:89:95:39:f1:79:76:2b:01:0f:af:00:c0:28:2d:d9:
         d4:43:b9:76:d7:5a:24:52:8b:4d:67:0b:2f:26:7f:91:7d:6a:
         ac:49:6b:f8:6b:1f:08:57:c1:43:dd:f1:5c:ea:36:9b:43:a4:
         39:ee:24:78:92:02:fe:38:16:61:a2:99:d4:f5:73:04:67:6c:
         06:46:c2:a8:14:d2:f9:10:a1:c6:18:33:65:3f:39:6f:2f:a8:
         38:67:73:c0:a9:21:49:21:de:f1:f1:75:53:76:ef:a7:ae:b6:
         78:5f:9b:8d:32:2b:9e:ac:9e:dc:35:e9:80:ea:c9:f9:45:a0:
         0b:fa:25:4e:18:4f:fc:af:39:24:7c:09:92:75:5f:7b:c8:b3:
         b0:3a:ad:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:34:53 2024 by rpki-client on console-ams.rpki-client.org