Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
File:                     xj3vPkSJRRRCc6POcAST0qDFrZo.mft (raw, json)
Hash identifier:          8cEyRqSh+RYBeN2T/kmHft58GIU+FMaZijGl2Sisstk=
Subject key identifier:   44:4D:8C:CF:42:7F:D2:D2:0E:40:5D:A9:DA:ED:69:5C:59:91:62:76
Authority key identifier: C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A
Certificate issuer:       /CN=F3640DFDAF/serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
Certificate serial:       26
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
Manifest number:          25
Signing time:             Sun 24 Nov 2024 02:56:06 +0000
Manifest this update:     Sun 24 Nov 2024 02:56:06 +0000
Manifest next update:     Tue 26 Nov 2024 02:56:06 +0000
Files and hashes:         1: xj3vPkSJRRRCc6POcAST0qDFrZo.crl (hash: 7Yrw51a/H0y6d0dnos+LjevNWerr2qQmlrdDn+74JgA=)
                          2: 70BD095E911A11EF82BB6497762E951A.roa (hash: 5fyS1GERhUUgdGRbwBe9ouhJvbIYLSd3rIAGNjMRUFs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640DFDAF/serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
        Validity
            Not Before: Nov 24 02:56:06 2024 GMT
            Not After : Nov 26 02:56:06 2024 GMT
        Subject: CN=674295c6-1955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:25:07:5a:a0:6f:11:08:db:4d:a0:fb:73:60:
                    ea:e8:ec:47:28:8c:4b:51:14:63:df:50:1c:75:8c:
                    e2:6e:72:be:7b:6e:48:ac:bc:65:68:fb:32:6a:12:
                    48:ae:ca:81:77:50:31:88:83:1f:8e:79:97:70:3e:
                    e0:c1:da:d1:93:ea:48:f8:5a:e2:2a:5f:09:05:99:
                    86:27:01:7d:f7:cb:96:cb:a6:6d:97:d2:3d:47:a3:
                    d7:68:cd:ae:45:cb:20:d3:5a:50:66:ce:4e:09:29:
                    c8:d8:48:1e:72:d4:32:6c:aa:0a:9f:b9:ba:4e:55:
                    50:a6:ca:7d:6f:ee:f3:f0:ca:78:d4:d9:b0:bd:fb:
                    d3:55:ae:65:21:f6:8d:6c:8f:66:e1:12:8c:2f:f9:
                    ae:ef:cd:e4:b5:0d:92:19:53:7d:ba:5d:7d:86:1c:
                    82:f7:68:a3:7e:30:56:ac:d8:ad:f8:75:2e:50:7a:
                    7e:58:9c:5f:71:52:17:d5:57:3a:64:14:3d:fe:0f:
                    7b:fe:c3:2f:c1:4f:85:50:e4:cf:3e:e9:39:e3:d9:
                    27:9f:42:51:48:ea:f0:91:92:cb:24:8d:90:8d:fd:
                    64:c5:e0:cc:98:b5:14:38:6b:b6:5e:d8:7f:6a:b3:
                    2a:91:94:1e:44:bb:d1:59:df:58:0e:89:14:d5:98:
                    48:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4D:8C:CF:42:7F:D2:D2:0E:40:5D:A9:DA:ED:69:5C:59:91:62:76
            X509v3 Authority Key Identifier:
                keyid:C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c3:fb:5d:75:c7:38:eb:c9:9f:9d:f5:bb:75:aa:b6:31:c0:
         18:75:46:d7:00:2d:ab:22:fb:4b:1f:51:1f:5c:06:f8:64:73:
         15:3b:cd:db:91:48:0e:e6:27:72:f9:18:e8:9d:f0:f4:7d:17:
         09:fc:55:db:cb:ad:b9:ee:74:96:ec:dc:e6:6d:18:0f:76:dd:
         f1:a4:63:46:66:67:12:b6:3e:d7:4a:5b:ea:2f:50:26:7d:ed:
         1c:d4:2b:9a:da:ba:44:86:c0:6f:5a:59:62:46:00:b2:0c:58:
         75:06:89:97:03:dd:6d:e6:8e:60:ba:95:6b:5e:1d:f5:8e:ff:
         1b:07:e0:09:4a:78:70:5c:99:50:ff:6b:22:ff:15:79:a5:ed:
         9c:99:8d:ad:da:0b:cd:8f:25:96:55:51:60:8c:79:2a:57:04:
         d2:ae:49:c5:5c:a0:fb:23:d4:65:62:db:87:fe:81:69:5d:4a:
         0c:b5:ca:fa:fe:02:7b:15:ef:d4:1d:11:61:cb:d2:c5:64:d3:
         87:57:24:fd:3b:5d:5c:3b:05:a4:5c:63:f5:72:80:ac:40:4d:
         59:72:d6:df:20:ce:08:3d:99:f8:55:01:6b:62:7b:02:9c:a9:
         21:66:23:fc:d4:16:60:7b:c7:19:13:91:ba:32:50:69:96:0b:
         36:7b:0b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:29:35 2024 by rpki-client on console-fra.rpki-client.org