Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
File:                     fB-8tURrPURYdKAjdA4kfWIwI10.mft (raw, json)
Hash identifier:          DxWIPx1rmkbn/OBTWwcm+HMu7e2LKF4NWk5MGFVlDho=
Subject key identifier:   6B:58:B2:8A:FA:4D:1F:7D:F6:38:8E:1E:53:B0:A5:FD:F6:AD:AA:95
Authority key identifier: 7C:1F:BC:B5:44:6B:3D:44:58:74:A0:23:74:0E:24:7D:62:30:23:5D
Certificate issuer:       /CN=F363C154AF/serialNumber=7C1FBCB5446B3D445874A023740E247D6230235D
Certificate serial:       5F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
Manifest number:          5C
Signing time:             Wed 23 Oct 2024 02:55:37 +0000
Manifest this update:     Wed 23 Oct 2024 02:55:37 +0000
Manifest next update:     Fri 25 Oct 2024 02:55:37 +0000
Files and hashes:         1: fB-8tURrPURYdKAjdA4kfWIwI10.crl (hash: pIIzjbToB//s9zx/V7U4A56a0lOjRiWOlvmNHnAdClU=)
                          2: 69176EDA54B411EF85302264762E951A.roa (hash: aXC5ZcMaKvppj9wFu7iH9bADIONa5jeymvvlcxe0MZE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C154AF/serialNumber=7C1FBCB5446B3D445874A023740E247D6230235D
        Validity
            Not Before: Oct 23 02:55:37 2024 GMT
            Not After : Oct 25 02:55:37 2024 GMT
        Subject: CN=671865a9-6221
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c8:71:e2:b6:36:ae:c4:1f:e3:9e:81:d6:31:
                    71:fa:e9:32:1d:b2:60:18:98:0e:7b:53:6d:d1:6a:
                    71:b2:94:25:2a:41:6d:09:01:c8:05:78:f2:f6:f2:
                    35:d5:30:5b:f4:fc:a9:05:ee:4b:0e:59:39:5a:10:
                    1b:a0:75:cd:57:af:84:d2:0d:0a:e0:85:79:19:8e:
                    7c:52:53:ae:88:52:55:fb:c7:77:ab:16:7d:f2:c4:
                    1c:a1:7e:e8:b2:01:28:e4:f7:45:83:2e:ed:c7:96:
                    47:3a:22:6d:45:53:1a:02:bf:f1:8f:29:11:eb:6a:
                    90:10:5f:80:24:46:04:07:81:f4:2c:a1:aa:5c:1d:
                    cf:43:b1:1f:a8:40:f9:06:ee:7a:a4:52:54:e8:d9:
                    08:60:1a:25:b8:a9:e6:1a:05:82:93:e7:e5:1e:32:
                    a5:aa:ee:e6:bf:e7:4c:ef:ab:9e:cc:67:cf:61:92:
                    9f:8b:b1:38:82:f7:7a:96:ff:9a:64:69:f5:be:41:
                    12:90:b3:05:b3:c2:f7:4c:26:12:45:70:63:bc:94:
                    45:b8:f5:52:10:80:6d:c0:8e:f3:56:9f:6c:04:34:
                    7b:f7:23:ff:90:aa:6e:9c:8e:51:40:15:ce:b9:a1:
                    7b:61:ef:d0:05:4f:ca:f3:09:13:e1:4c:a4:9e:fe:
                    e2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:58:B2:8A:FA:4D:1F:7D:F6:38:8E:1E:53:B0:A5:FD:F6:AD:AA:95
            X509v3 Authority Key Identifier:
                keyid:7C:1F:BC:B5:44:6B:3D:44:58:74:A0:23:74:0E:24:7D:62:30:23:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fB-8tURrPURYdKAjdA4kfWIwI10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C154/5C443F64501B11EFB3301F9F762E951A/fB-8tURrPURYdKAjdA4kfWIwI10.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:a2:c1:a7:d7:7b:0b:26:55:ce:d3:13:2b:99:0e:89:63:0d:
         53:22:e2:8b:73:c3:57:f9:ce:63:f7:7f:91:28:d3:28:1b:b8:
         df:7e:53:d1:a6:c9:b1:0f:aa:8c:ac:77:3c:b7:d0:8b:24:ac:
         df:82:a2:08:16:0c:d7:43:be:93:40:69:91:02:68:40:87:07:
         47:ed:92:78:aa:6f:3b:82:ec:28:3d:d1:d6:64:e5:d3:54:f4:
         ab:32:45:1e:30:d8:01:8c:67:f1:39:e0:4c:be:ac:6d:13:8c:
         f2:09:18:79:99:25:f2:0d:34:1c:16:10:ad:24:83:74:9a:3a:
         46:c5:a3:59:a7:fd:2c:fe:13:50:e9:bf:ec:d3:70:f1:7a:59:
         04:ec:13:66:be:28:da:d0:ee:71:0b:29:c0:28:98:81:c1:8c:
         23:d3:96:bd:fa:69:3f:88:da:73:ff:74:cb:5d:aa:8c:1b:c1:
         01:51:21:a2:d2:ec:d9:f2:65:93:ec:f4:8c:5f:91:02:2e:6b:
         a2:0d:d8:0a:d5:9e:f3:12:65:40:90:cc:5c:07:5f:a7:42:bc:
         3e:53:fe:94:ef:b1:01:54:de:fc:d0:8f:a4:17:76:f7:16:f3:
         c3:8d:6d:0b:aa:a6:10:8e:75:9f:90:08:33:7b:f3:97:14:2d:
         63:0d:4b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:00:55 2024 by rpki-client on console-fra.rpki-client.org