Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
File:                     Ho4GD8DqacvW-tSkvG7THSnI5Go.mft (raw, json)
Hash identifier:          7mz1rRCxEOwczpyAqReZXwEjaP/kM/BlAh/+sh+JnPY=
Subject key identifier:   1A:1D:7C:6C:BA:4B:7F:9C:63:14:EF:26:F9:0B:3F:7B:A7:8B:1F:01
Authority key identifier: 1E:8E:06:0F:C0:EA:69:CB:D6:FA:D4:A4:BC:6E:D3:1D:29:C8:E4:6A
Certificate issuer:       /CN=F363D435AF/serialNumber=1E8E060FC0EA69CBD6FAD4A4BC6ED31D29C8E46A
Certificate serial:       03BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
Manifest number:          03BB
Signing time:             Thu 21 Nov 2024 01:49:47 +0000
Manifest this update:     Thu 21 Nov 2024 01:49:47 +0000
Manifest next update:     Sat 23 Nov 2024 01:49:47 +0000
Files and hashes:         1: Ho4GD8DqacvW-tSkvG7THSnI5Go.crl (hash: y8g/88HXTasTAsTnWyleIJrDtjbekICpZ+hQB3pHZ5c=)
                          2: 5C02D460D03F11EC9A4EAA89F1222468.roa (hash: F/9p11nL0wbGpBdREAn2qkEHpPq+G048kxKZo17dwn4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 956 (0x3bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363D435AF/serialNumber=1E8E060FC0EA69CBD6FAD4A4BC6ED31D29C8E46A
        Validity
            Not Before: Nov 21 01:49:47 2024 GMT
            Not After : Nov 23 01:49:47 2024 GMT
        Subject: CN=673e91bb-ec5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:31:c4:7b:65:71:96:3b:d5:60:4b:f0:72:1f:
                    11:7b:92:e7:e8:f4:a8:d4:79:a4:ac:c6:b1:46:66:
                    8b:53:4e:e4:87:ec:c2:1b:bf:95:46:0a:18:70:38:
                    ac:20:c6:86:36:41:3b:0e:ce:7c:45:76:d0:15:90:
                    63:69:d6:c2:11:f5:d0:df:bb:dc:a3:19:ee:b3:24:
                    22:72:fd:20:48:06:24:cc:00:f4:8f:cb:19:76:43:
                    72:92:51:c3:78:d0:dd:85:c9:c3:a6:df:fc:93:21:
                    81:ab:d0:19:81:58:2a:7c:43:b4:30:7a:5f:c9:f3:
                    24:e8:6f:5d:7c:19:8a:85:41:fb:57:9a:99:6f:5f:
                    a9:65:01:86:ed:57:85:cf:ca:d5:bb:c5:4f:67:7f:
                    8d:54:7d:8d:88:b5:9a:f6:ca:e9:63:01:dd:6b:83:
                    f1:74:4e:10:00:de:a3:19:4d:84:48:48:72:5c:c4:
                    94:a9:05:6e:c7:e3:c5:c5:3b:1b:47:a7:77:72:7b:
                    f2:70:fb:ce:0c:7f:19:c5:b7:53:20:bc:5c:f7:81:
                    bf:17:dd:d4:b9:14:8e:b3:c6:2c:9b:e9:2e:3c:d7:
                    08:26:a4:be:74:ba:2c:20:d4:5f:ec:49:77:c1:35:
                    11:e2:06:c8:24:20:2f:95:44:57:37:86:2a:db:68:
                    e6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1D:7C:6C:BA:4B:7F:9C:63:14:EF:26:F9:0B:3F:7B:A7:8B:1F:01
            X509v3 Authority Key Identifier:
                keyid:1E:8E:06:0F:C0:EA:69:CB:D6:FA:D4:A4:BC:6E:D3:1D:29:C8:E4:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ho4GD8DqacvW-tSkvG7THSnI5Go.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363D435/B539FEDED03D11ECAF629084F1222468/Ho4GD8DqacvW-tSkvG7THSnI5Go.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:8e:03:9c:26:ba:42:0d:99:54:f0:b3:e0:a8:59:42:e5:de:
         47:67:73:0a:63:e2:64:0d:8a:69:c4:19:f1:93:81:ab:8f:ed:
         16:ff:1d:db:4b:39:75:6e:68:7c:88:9f:8c:e0:aa:1d:f4:d2:
         ff:f9:b5:aa:81:c3:c7:c3:96:07:c5:aa:28:ba:7b:c6:e6:de:
         af:98:0e:f0:eb:bf:45:c7:80:cd:52:0e:b8:b2:dd:46:15:ec:
         89:ae:7f:08:04:15:ce:30:10:2f:56:d2:df:83:4b:0d:1b:7b:
         07:ce:d5:87:1d:c8:38:3e:be:72:8c:eb:40:70:4d:4f:4c:62:
         2f:37:79:d3:14:ce:7b:aa:be:cd:ac:24:fd:b8:67:58:da:f1:
         e1:c3:3e:ad:21:0a:30:3f:ff:ce:8d:02:c5:25:ec:a5:63:b4:
         9c:b3:95:61:10:ad:c2:44:79:5f:a3:15:ba:45:6e:0a:ae:48:
         0e:d9:40:25:30:ed:0b:4b:fd:53:9d:95:70:51:b9:af:02:7d:
         c3:78:dd:f6:c8:1d:4e:e6:f3:b6:16:e0:81:58:dd:57:18:8d:
         1a:d9:02:28:78:68:bd:43:b1:8c:ec:06:99:89:03:67:12:3c:
         cd:f5:e7:5e:48:86:fc:52:e7:93:c3:3e:69:a1:a6:0a:96:d7:
         c8:f6:df:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:10:16 2024 by rpki-client on console-fra.rpki-client.org