Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
File:                     8GzMRNUs-b4RXOx6TaaxMJukOaU.mft (raw, json)
Hash identifier:          ePu5n/mmuM9ArU3tTlF41hGv8si8yk63mQNyH9F/QZU=
Subject key identifier:   1D:10:97:19:44:A9:9E:FC:89:72:CA:8F:B9:60:89:0E:5B:BA:B7:98
Authority key identifier: F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5
Certificate issuer:       /CN=F36390A9RI/serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
Certificate serial:       0F
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
Manifest number:          0E
Signing time:             Tue 22 Oct 2024 03:23:12 +0000
Manifest this update:     Tue 22 Oct 2024 03:23:12 +0000
Manifest next update:     Thu 24 Oct 2024 03:23:12 +0000
Files and hashes:         1: 8GzMRNUs-b4RXOx6TaaxMJukOaU.crl (hash: Rl/dPceHufG//prWm5eS2FlW34xd1+33yuNk8psgk24=)
                          2: 7F1695F2871411EF981CC64F762E951A.roa (hash: y+9csfTO7VjobZ1q8Iv+RH3EIrHQat1B/mZ0hIosNpk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                          rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Oct 2024 00:25:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A9RI/serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
        Validity
            Not Before: Oct 22 03:23:12 2024 GMT
            Not After : Oct 24 03:23:12 2024 GMT
        Subject: CN=67171aa0-63aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9e:24:42:ff:2f:5d:74:0d:6c:70:f3:43:aa:
                    dd:84:84:ba:ed:c6:3f:53:71:65:75:46:24:fb:18:
                    3a:1f:12:40:e8:7a:26:56:bc:c0:7c:c9:fd:7d:64:
                    b3:e9:a3:95:dd:20:5e:89:b1:c7:3f:2b:85:34:14:
                    44:93:b7:cd:9f:f3:8d:30:87:9d:31:30:84:cf:43:
                    76:ff:11:bf:db:6f:09:c7:68:0b:2d:3b:8f:8f:a1:
                    dc:9a:69:46:e8:c7:90:5e:cd:37:f8:d5:72:a3:b7:
                    a8:fb:c4:6b:fd:8a:c6:2c:64:c0:6a:eb:64:94:a4:
                    60:cd:d7:5c:33:7d:fd:6d:e8:da:87:1e:33:4c:77:
                    b4:c0:3b:0d:43:0c:11:93:dc:0d:6c:b2:07:e8:63:
                    9c:55:8e:44:95:8a:bd:ee:f5:43:51:f9:22:4d:12:
                    d4:14:69:17:56:a0:5a:43:0f:18:3f:bf:89:7c:fb:
                    a3:9e:d2:b6:5b:f8:02:34:8a:a5:89:f8:07:a7:a0:
                    d4:b6:c5:fe:49:b2:e4:6b:7b:4c:95:21:c9:81:c5:
                    a7:a7:a1:1b:1e:a5:18:ec:f1:02:a7:9f:d6:64:70:
                    b6:ee:30:0f:32:c8:ea:76:c8:75:a7:33:c3:64:28:
                    60:8c:d4:05:52:36:1c:53:d3:b2:ba:47:b0:c3:be:
                    06:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:10:97:19:44:A9:9E:FC:89:72:CA:8F:B9:60:89:0E:5B:BA:B7:98
            X509v3 Authority Key Identifier:
                keyid:F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:e9:8a:c5:d2:6a:35:bd:03:25:9b:ab:18:7c:37:5a:ef:0b:
         e7:5c:94:e9:dd:2c:8a:8a:1d:c1:d4:64:f5:2d:c7:65:4d:19:
         66:10:cc:76:32:ce:02:bc:3d:77:14:f2:02:9c:33:5f:77:dc:
         f1:be:76:95:cc:d3:5d:fd:65:e7:52:ce:a3:53:7f:a1:2a:18:
         62:a8:b1:96:f6:a7:5e:9e:44:6e:79:27:26:e6:65:25:df:55:
         6d:84:ef:44:fc:78:68:59:48:e9:09:32:f8:ec:42:74:48:b3:
         e8:27:35:d2:bf:98:36:61:67:26:f4:fb:31:29:5a:f3:8f:25:
         48:c0:66:e3:58:76:52:18:61:d3:20:7b:c6:1d:ba:f0:45:09:
         ac:c9:84:d8:84:0d:ee:a1:6d:ae:7c:e6:20:d9:9d:b4:bc:24:
         ef:59:e4:a0:3b:f3:69:0e:a0:15:90:60:73:be:fe:23:48:c5:
         bd:77:85:53:6b:e5:2c:95:58:66:a6:0f:9c:96:8b:ee:d7:39:
         11:b9:75:af:ed:61:22:75:ec:c9:5a:87:8f:5f:a9:35:7e:44:
         d4:b1:40:5d:3f:35:b8:ec:f3:bb:05:79:4b:dd:02:94:32:ba:
         b9:45:21:a2:89:bb:64:46:5d:e1:dd:83:22:3c:45:f4:67:db:
         24:20:93:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 04:24:29 2024 by rpki-client on console-fra.rpki-client.org