Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
File:                     xj3vPkSJRRRCc6POcAST0qDFrZo.mft (raw, json)
Hash identifier:          ZzmUppGsIQdicAEhP3ZcCcB8URN91Vh1Bx1yDH48Pgc=
Subject key identifier:   28:D6:F9:8E:69:7A:15:2D:AA:1C:F0:23:C9:7D:8E:B0:DA:C2:27:75
Authority key identifier: C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A
Certificate issuer:       /CN=F3640DFDAF/serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
Certificate serial:       05
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
Manifest number:          04
Signing time:             Wed 23 Oct 2024 08:46:28 +0000
Manifest this update:     Wed 23 Oct 2024 08:46:27 +0000
Manifest next update:     Fri 25 Oct 2024 08:46:27 +0000
Files and hashes:         1: xj3vPkSJRRRCc6POcAST0qDFrZo.crl (hash: ybINs2XNmXmSCFde1/avBSZnB6IZEW69bMgj7qMEfek=)
                          2: 70BD095E911A11EF82BB6497762E951A.roa (hash: 5fyS1GERhUUgdGRbwBe9ouhJvbIYLSd3rIAGNjMRUFs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640DFDAF/serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
        Validity
            Not Before: Oct 23 08:46:27 2024 GMT
            Not After : Oct 25 08:46:27 2024 GMT
        Subject: CN=6718b7e4-966d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a5:f3:18:e4:9e:95:76:bc:36:a3:98:68:36:
                    2a:73:8a:ae:5b:98:9d:02:76:7d:43:a4:68:0b:19:
                    95:9c:46:14:d4:f9:d3:53:4b:71:45:63:d2:61:e4:
                    5b:6d:29:25:ab:bf:53:7d:1c:32:1a:7c:05:07:41:
                    75:04:38:c4:35:5f:30:79:82:ed:e0:09:2f:83:be:
                    16:fb:74:e6:03:ab:03:e7:82:6e:1b:13:fd:70:0d:
                    e7:7d:64:78:35:83:7d:47:1e:24:39:67:f2:31:c9:
                    a2:b8:ac:42:3c:b0:32:bb:31:6d:95:ef:2c:18:3f:
                    ff:64:ab:e0:0a:05:c4:c9:d7:04:9a:e1:61:4e:b3:
                    05:ac:8f:b9:04:93:f3:53:05:58:45:c3:e9:56:34:
                    df:0b:62:65:4e:98:3c:94:7f:3a:da:f6:2a:1a:4f:
                    88:09:7b:5f:7c:12:b9:e8:9d:d2:dd:c9:fe:12:cb:
                    6d:fe:94:41:f5:ae:48:75:53:86:92:e2:21:f8:cd:
                    a2:0c:23:2d:c9:be:08:e6:a6:fc:fe:86:c8:29:7c:
                    22:8f:0a:d8:88:82:67:a2:48:d2:1b:94:63:99:e5:
                    f0:14:aa:56:e9:55:a6:0d:d8:1b:ff:66:05:45:39:
                    62:b7:92:75:0d:68:7e:ae:d0:50:1f:39:aa:68:08:
                    00:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:D6:F9:8E:69:7A:15:2D:AA:1C:F0:23:C9:7D:8E:B0:DA:C2:27:75
            X509v3 Authority Key Identifier:
                keyid:C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:70:49:07:89:30:15:8c:da:25:2b:31:db:aa:27:07:d4:e7:
         21:dc:64:d8:c3:4a:b1:51:34:56:47:f0:22:ce:49:0d:21:07:
         ed:42:3c:9d:af:29:b2:1d:a8:bb:c7:ac:1b:42:68:bc:08:64:
         02:0b:1b:d1:84:e7:37:fa:8e:d2:44:c9:c0:90:7e:54:c8:c9:
         11:ee:65:f2:3b:c8:b1:ee:80:80:e1:d5:ed:3c:68:74:a1:63:
         99:13:88:cd:34:27:cf:67:60:dd:f5:90:63:85:43:ee:36:24:
         21:f0:db:d2:04:18:e5:8e:e3:12:e6:75:ce:35:a7:ab:5e:14:
         20:ad:35:5d:64:7d:2c:30:fe:f2:4a:55:42:1f:be:9c:53:a5:
         38:37:36:72:97:d1:26:c4:e7:e5:94:31:df:8e:c5:cd:f7:05:
         02:92:64:00:0d:2a:0e:12:5d:b1:32:ab:51:39:c7:fe:3c:eb:
         2f:db:58:76:3b:8c:c3:a9:a9:37:3e:3b:2c:95:b7:ed:5c:9b:
         4a:df:bf:04:fb:8c:c0:e9:dd:a6:ae:87:e5:06:b1:0b:83:24:
         bf:68:34:cd:fa:62:2f:40:b3:e6:ad:6a:24:28:06:41:27:be:
         3d:da:23:30:3b:88:93:cf:ae:f5:16:f1:a5:0f:e4:ca:c3:5b:
         df:2b:01:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 10:56:12 2024 by rpki-client on console-fra.rpki-client.org