Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
File:                     zES432VSaGhWOxfptlH5NdVgDNA.mft (raw, json)
Hash identifier:          Bl7GzDjxE2FatGjs/5DU0RewT29FD0cqhG9c+xesqog=
Subject key identifier:   D3:40:EE:E5:92:F1:07:40:AB:AE:71:FD:0E:42:FD:BA:23:37:CF:F8
Authority key identifier: CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0
Certificate issuer:       /CN=F363FCC8AF/serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
Certificate serial:       0660
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
Manifest number:          065D
Signing time:             Sun 24 Nov 2024 01:18:07 +0000
Manifest this update:     Sun 24 Nov 2024 01:18:07 +0000
Manifest next update:     Tue 26 Nov 2024 01:18:07 +0000
Files and hashes:         1: zES432VSaGhWOxfptlH5NdVgDNA.crl (hash: CaZw09Z94ip48eO7M8CodMcdJFwPXsQ/aQ0Ium7uAjk=)
                          2: E27073C0F1C111EB9AE36071D8A014CE.roa (hash: y0Q3Frj55z+tecyGPqJPk0LP5+vSEULCrL6Cm5KqQeE=)
                          3: 6CB087F0CD7E11EA9E3A5845F8AEA228.roa (hash: rBsld+QOBW/CrzRT0eM+UJTuXYzPefxB5jKhtvGTg/I=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1632 (0x660)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FCC8AF/serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
        Validity
            Not Before: Nov 24 01:18:07 2024 GMT
            Not After : Nov 26 01:18:07 2024 GMT
        Subject: CN=67427ecf-f76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:29:99:37:26:3f:ec:49:89:61:6e:ef:f1:62:
                    f9:9a:cf:ae:f7:de:c9:85:fc:2d:c0:12:fc:c4:0f:
                    19:52:bb:ee:fc:f0:d2:bd:0a:bb:b2:58:05:38:82:
                    18:b0:37:7e:57:6f:2a:8e:15:3d:4a:ee:ae:ac:ce:
                    31:8f:24:39:b6:81:a6:4f:92:84:5f:a4:c3:86:47:
                    6b:3b:20:48:fa:6d:7d:de:04:85:94:65:ff:79:10:
                    88:52:74:bc:6e:df:b7:2d:2e:98:85:b9:73:b7:84:
                    52:ed:3a:a7:f8:cd:ce:e1:db:a3:0b:1f:9d:83:a4:
                    73:4e:b6:1c:97:32:11:b1:f7:21:7a:cd:45:91:18:
                    36:26:6f:3e:95:75:c8:12:71:66:fb:02:a8:49:14:
                    ab:49:c0:68:6e:a7:66:eb:aa:0d:b5:0f:31:e0:9e:
                    94:f3:2d:95:bd:b1:c1:0b:83:da:03:20:48:d4:cf:
                    04:9b:3f:ab:23:09:94:51:ba:b8:1c:9f:69:70:04:
                    9a:15:f8:66:1c:9d:f8:dd:96:dc:5f:0e:69:e3:5e:
                    d6:10:0b:37:a4:53:0f:69:8b:d3:c8:f9:fb:02:69:
                    bd:d7:73:bf:fb:36:25:58:38:06:1f:de:d2:56:a3:
                    b6:15:0b:4c:c3:c3:a0:dd:f4:19:a4:59:2b:19:ee:
                    bf:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:40:EE:E5:92:F1:07:40:AB:AE:71:FD:0E:42:FD:BA:23:37:CF:F8
            X509v3 Authority Key Identifier:
                keyid:CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:7f:f8:af:a7:08:3d:fa:c2:60:ae:c4:99:b4:f0:72:1c:d4:
         60:97:0f:2d:01:61:db:e1:f2:89:cb:1c:13:95:1c:99:45:41:
         bc:aa:e9:11:10:00:31:0a:45:9a:07:47:d9:2a:28:ca:11:3b:
         88:6f:f7:10:f5:15:26:de:ea:84:88:7e:3e:25:4d:46:86:24:
         3c:47:2c:5d:88:57:ed:4d:2c:36:2a:b4:60:d0:70:8a:63:dd:
         c7:ff:1c:4c:b3:d3:bb:2c:1a:80:0d:f2:64:57:c1:d1:ce:e8:
         3e:e2:0a:ca:be:88:a3:81:25:4d:ac:89:1e:8a:13:f4:0e:a7:
         82:32:34:30:53:4f:6e:56:c4:3c:ae:1d:7e:c9:c7:90:ed:d6:
         bc:82:97:14:b9:6b:31:4a:fe:0e:6a:8c:85:71:21:f8:00:07:
         6b:23:8b:e1:c8:ec:96:9f:27:b9:b7:78:9b:06:74:91:28:c7:
         27:8d:23:03:43:46:d5:50:e0:e2:7b:f0:5e:9f:3f:43:05:a7:
         b8:1e:40:08:f8:b7:03:99:89:31:4e:67:0b:48:f3:61:9c:1e:
         64:91:25:bb:7d:27:fa:66:a2:7f:ff:a8:aa:52:84:92:37:20:
         06:ef:72:c1:85:fb:98:92:44:0d:1e:b3:53:df:e9:7e:d2:7e:
         af:0d:21:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:17:51 2024 by rpki-client on console-ams.rpki-client.org