Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
File:                     IU5T_WAV277wRT3vRAdy_7AU3Yo.mft (raw, json)
Hash identifier:          onrOY4680bVFBKqQzXbSLT0gYOrB1dXQKA8GCWw5wlo=
Subject key identifier:   92:53:33:D1:50:FB:79:8C:63:B1:BD:CE:C6:B6:8E:E9:76:53:8E:1C
Authority key identifier: 21:4E:53:FD:60:15:DB:BE:F0:45:3D:EF:44:07:72:FF:B0:14:DD:8A
Certificate issuer:       /CN=F3639B67AF/serialNumber=214E53FD6015DBBEF0453DEF440772FFB014DD8A
Certificate serial:       0165
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IU5T_WAV277wRT3vRAdy_7AU3Yo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
Manifest number:          0164
Signing time:             Sun 19 May 2024 02:12:39 +0000
Manifest this update:     Sun 19 May 2024 02:12:39 +0000
Manifest next update:     Tue 21 May 2024 02:12:39 +0000
Files and hashes:         1: IU5T_WAV277wRT3vRAdy_7AU3Yo.crl (hash: l2IWHqZ9/hIA2bXaXCijBjfikZR+C0D1LBjmg8lz6Cs=)
                          2: 26F6E7D0095E11EEB544555B4AD9E6FC.roa (hash: VsmFyV+STEgIHmWiTYJb7GGfsu3rmykmBJlgNHKJoq8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IU5T_WAV277wRT3vRAdy_7AU3Yo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639B67AF/serialNumber=214E53FD6015DBBEF0453DEF440772FFB014DD8A
        Validity
            Not Before: May 19 02:12:39 2024 GMT
            Not After : May 21 02:12:39 2024 GMT
        Subject: CN=66496017-b3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cc:8e:4b:0e:82:0c:6f:be:1d:45:65:21:cb:
                    41:1a:b6:82:a9:09:75:c9:b4:98:de:8a:00:1f:94:
                    1f:ee:76:57:da:65:04:05:ab:67:4e:9a:ea:46:ae:
                    65:7d:d9:a5:84:8c:e0:09:77:2b:3b:d1:1b:86:7e:
                    29:d3:4e:74:79:a3:6f:92:6e:0f:5c:ff:25:88:e9:
                    f7:f1:33:1e:22:5e:48:58:28:b4:dd:ab:7c:cf:c4:
                    08:11:ee:8f:eb:6e:61:18:fa:22:5d:17:ec:1d:44:
                    fe:64:ae:1c:b0:88:84:0b:c9:79:ba:8a:d7:84:ba:
                    8c:e4:ae:1c:80:cc:6a:7e:cb:1a:e3:cc:3d:60:e6:
                    04:1f:20:c0:1f:20:50:94:91:cc:25:a0:0b:66:46:
                    ac:b1:91:1e:49:e1:77:a1:86:10:a6:af:c7:42:42:
                    3e:71:b1:60:95:ff:e0:1d:ec:03:a2:91:0e:47:42:
                    6f:ee:c5:43:79:c3:e7:35:ad:0b:ac:ec:69:cd:e8:
                    90:76:cc:65:a6:5b:cd:3b:37:c2:47:5a:2f:53:ad:
                    9d:0c:3e:51:7a:99:c4:95:f7:f5:09:63:9b:d1:ea:
                    3a:4c:9d:10:48:12:ac:28:fb:52:b1:3b:26:e0:10:
                    6c:06:dd:89:9e:90:4c:af:51:98:d0:5b:e1:83:ed:
                    17:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:53:33:D1:50:FB:79:8C:63:B1:BD:CE:C6:B6:8E:E9:76:53:8E:1C
            X509v3 Authority Key Identifier:
                keyid:21:4E:53:FD:60:15:DB:BE:F0:45:3D:EF:44:07:72:FF:B0:14:DD:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IU5T_WAV277wRT3vRAdy_7AU3Yo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:05:5f:ad:9b:c8:54:f6:b3:fe:28:64:d4:b7:87:ee:85:96:
         dc:01:11:96:c4:c2:b4:06:cf:d7:ba:82:30:6e:e1:71:a7:18:
         38:3c:e9:29:af:24:a5:59:3c:fd:99:05:2c:0b:b8:1c:e0:93:
         7c:9a:87:56:f9:f9:a0:4f:92:1f:2f:68:6b:14:1d:f3:33:54:
         9c:0a:9b:7e:36:e1:12:d1:64:0a:c9:1d:1f:32:06:88:b5:34:
         77:04:e2:91:d0:06:9b:ea:d7:d7:9c:e8:2c:c8:5e:22:36:c1:
         15:5d:dd:1e:18:4d:bc:4f:b3:0d:83:10:ac:18:04:e5:e4:df:
         09:0c:6f:ee:8c:4c:75:3a:dd:4d:23:f6:0d:2f:39:79:cd:3f:
         6c:1d:31:3a:c6:43:fd:8c:5a:68:5c:f4:99:ad:d0:13:d8:00:
         2f:4b:1e:d7:28:80:89:08:df:71:79:8d:d9:2c:cd:6e:02:32:
         c4:64:06:02:d4:1a:3d:5a:34:56:85:50:bd:f2:fc:da:ac:68:
         f7:e9:e2:f3:47:f4:af:f4:90:a1:dc:2a:a3:e8:da:49:20:23:
         f1:82:6a:fb:95:bc:b6:b4:24:23:a1:a4:1a:ba:e5:28:0d:65:
         54:df:ce:4d:04:83:de:08:cd:18:eb:b3:90:32:d0:02:05:38:
         3e:fa:aa:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:39:29 2024 by rpki-client on console-fra.rpki-client.org