Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
File:                     xtzY6Teskg9K_SJ71pwLimdpcZA.mft (raw, json)
Hash identifier:          T9hh75GdQF5pWcTZCGHZsUyGrFkKaxWxpyPc/pL3VfQ=
Subject key identifier:   D8:A9:BF:FD:7C:34:AB:AE:1C:7A:E6:E0:AB:FC:1A:38:B0:2C:E9:C5
Authority key identifier: C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
Certificate issuer:       /CN=F3642C0FAF/serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
Certificate serial:       0302
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
Manifest number:          0302
Signing time:             Sat 04 May 2024 01:45:31 +0000
Manifest this update:     Sat 04 May 2024 01:45:31 +0000
Manifest next update:     Mon 06 May 2024 01:45:31 +0000
Files and hashes:         1: xtzY6Teskg9K_SJ71pwLimdpcZA.crl (hash: VwW9OeOg8+yNxC9cimPNZkPVKDGbxjbUGLQtU2QVz78=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 770 (0x302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642C0FAF/serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
        Validity
            Not Before: May  4 01:45:31 2024 GMT
            Not After : May  6 01:45:31 2024 GMT
        Subject: CN=6635933b-6edb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:d1:42:e3:22:49:a1:35:1f:a5:a8:be:f4:5f:
                    2e:2e:4d:3a:e6:e0:f9:75:4d:6c:83:5e:7d:3e:dd:
                    b4:31:7a:20:b2:96:5c:6b:cc:bc:ab:02:82:21:a0:
                    05:d6:9d:56:d8:de:66:03:2c:e1:3e:ee:16:db:db:
                    21:cd:78:ac:56:3b:db:24:d3:5b:19:42:db:82:2d:
                    df:c0:95:c2:d3:db:da:11:2c:2a:d4:05:4f:b7:8c:
                    7f:58:61:39:ac:38:22:08:a0:30:b6:21:33:75:ab:
                    9c:3f:eb:79:df:df:7a:5f:b1:0f:9e:1b:d4:7f:2e:
                    82:78:7b:8a:c2:cf:31:f8:11:c4:81:18:20:b4:03:
                    e9:73:29:d8:e5:af:40:a6:6d:2d:91:22:ba:9a:5f:
                    65:b0:3a:aa:e8:7d:f8:5f:57:13:fc:81:8c:aa:6a:
                    d0:94:3f:05:fe:dd:3c:4b:ae:7e:ae:63:78:80:3f:
                    e1:85:19:d9:62:80:ba:7c:cc:e5:0c:40:e0:50:d9:
                    6a:21:dc:e8:e6:ee:85:1c:f7:53:d2:6e:85:32:ef:
                    34:d8:f3:7f:76:9a:f5:52:73:e3:56:54:ec:e5:8c:
                    0b:d5:f1:cb:23:e1:66:fa:b0:99:29:71:f2:54:be:
                    e2:79:f1:c7:4a:fe:57:96:80:c6:6a:10:aa:b1:a3:
                    a2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A9:BF:FD:7C:34:AB:AE:1C:7A:E6:E0:AB:FC:1A:38:B0:2C:E9:C5
            X509v3 Authority Key Identifier:
                keyid:C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:67:d7:20:a9:c1:17:80:ce:55:43:d6:c7:46:ff:c7:45:24:
         74:ef:57:3f:d8:05:b6:16:50:d8:0e:9a:38:9b:cf:c0:f2:c5:
         4c:a8:a6:40:68:b8:ef:6e:51:14:f0:88:9f:73:11:ac:99:72:
         48:68:ec:0e:d2:0e:f5:07:8b:ac:ea:ee:69:85:3d:1f:13:44:
         1e:d5:90:6f:57:0b:e6:e8:f0:96:99:ce:0f:e9:8c:a8:92:bc:
         87:97:10:fb:e2:5d:ae:c5:48:96:5b:d6:1a:b7:fd:54:ee:b8:
         4f:cb:21:7c:f0:12:4f:0d:69:8c:56:c2:fa:81:bd:b4:e5:e1:
         b7:b8:e8:d3:3c:1f:7f:1e:59:81:26:15:db:21:26:52:4b:d6:
         13:29:1e:07:07:f9:05:78:6c:f5:b5:54:24:a2:f9:53:9e:8b:
         29:2b:48:69:63:48:d0:71:4d:a4:49:90:03:e5:a3:a2:a0:ae:
         f8:61:25:48:23:a1:02:3d:6c:75:76:62:66:6a:72:4e:84:19:
         db:7e:50:3c:bf:e7:c9:80:e4:ea:e7:5a:5e:70:1e:a8:3e:a6:
         d2:0f:d6:9a:84:40:da:f5:7a:a4:e8:54:0f:79:0b:74:95:6e:
         5c:85:ca:41:a7:0a:53:0e:c8:72:a7:65:ce:e3:6a:61:13:11:
         de:e9:92:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:05:59 2024 by rpki-client on console-ams.rpki-client.org