Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
File:                     ogtTm8eSX3rsKacM9qGEeJGpsxI.mft (raw, json)
Hash identifier:          3kX8YrGzpLI7lGz5xwK9Eujn/KAGnLoVxaspB1LWQ2U=
Subject key identifier:   CC:38:AB:6D:E6:B9:3B:85:F3:D6:99:6D:9F:6C:A6:90:5F:65:F8:99
Authority key identifier: A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12
Certificate issuer:       /CN=F3642C0FAR/serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
Certificate serial:       03D2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
Manifest number:          03D1
Signing time:             Fri 22 Nov 2024 01:48:48 +0000
Manifest this update:     Fri 22 Nov 2024 01:48:47 +0000
Manifest next update:     Sun 24 Nov 2024 01:48:47 +0000
Files and hashes:         1: ogtTm8eSX3rsKacM9qGEeJGpsxI.crl (hash: rBD8I3WQnmcIj0AH7O78wXD9HVnWmHm0M63CzWcMeQA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
                          rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 978 (0x3d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642C0FAR/serialNumber=A20B539BC7925F7AEC29A70CF6A1847891A9B312
        Validity
            Not Before: Nov 22 01:48:47 2024 GMT
            Not After : Nov 24 01:48:47 2024 GMT
        Subject: CN=673fe300-ac13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:df:46:80:5d:35:79:cb:7f:79:42:e0:bf:
                    4d:9a:d3:03:41:8a:6b:b3:73:86:9c:81:6f:42:a4:
                    fd:06:22:02:96:5e:39:35:71:ce:57:9d:d0:cd:be:
                    bf:25:b6:ae:15:6e:23:81:eb:ad:cb:43:6e:ac:b3:
                    8c:83:3a:63:36:d5:a8:28:f0:09:1c:b8:ae:1a:ff:
                    51:4b:11:d6:8e:44:84:ba:f9:3b:44:ab:29:eb:be:
                    6a:c7:93:6b:d3:86:1a:39:16:3d:33:0a:21:97:13:
                    8b:19:44:aa:e4:21:65:2b:36:58:be:16:0c:17:c7:
                    3b:a4:44:59:b3:b8:b4:a9:27:09:ab:5c:80:79:fb:
                    d6:5d:dc:28:f3:64:37:c6:af:57:8c:87:76:20:44:
                    00:29:94:ad:b9:85:70:8e:32:95:09:14:9b:1c:7a:
                    1e:b8:f3:16:f7:12:d5:7c:26:2b:6b:bb:cc:40:79:
                    a6:aa:3b:08:31:90:8b:b3:98:79:59:11:36:ea:c1:
                    12:1a:59:fb:b5:c2:3d:e9:1b:6e:f3:61:11:81:36:
                    9d:fc:5c:e8:48:e5:c5:5e:95:7b:fc:41:24:29:d9:
                    aa:22:e2:a4:e7:8b:39:f1:bf:72:d4:26:2e:6c:a4:
                    0f:f6:31:75:2f:f1:b6:fe:f6:57:e9:a1:a3:e0:5b:
                    7b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:38:AB:6D:E6:B9:3B:85:F3:D6:99:6D:9F:6C:A6:90:5F:65:F8:99
            X509v3 Authority Key Identifier:
                keyid:A2:0B:53:9B:C7:92:5F:7A:EC:29:A7:0C:F6:A1:84:78:91:A9:B3:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ogtTm8eSX3rsKacM9qGEeJGpsxI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/608E7226C07911EC96A968D55A40D577/ogtTm8eSX3rsKacM9qGEeJGpsxI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a8:21:b7:ce:a4:bb:80:c2:a4:30:99:4f:21:1d:5e:8f:d7:
         54:60:a8:a6:34:81:e0:12:f1:d3:31:91:be:a4:53:78:a0:ed:
         3d:33:e3:b2:fc:76:14:80:51:8d:b5:e1:8d:94:30:6f:64:cc:
         f5:54:5c:b7:62:e5:7f:c2:55:d3:b7:fc:b2:14:24:f3:e9:25:
         3c:b7:2d:3d:4d:0f:3c:d9:fc:77:38:f0:58:da:02:f4:75:bf:
         3f:e3:72:00:f0:72:70:5f:d1:64:e6:6a:0e:24:4d:f2:21:e2:
         35:4c:31:2a:bd:3d:96:80:48:13:4d:8d:52:24:11:83:da:c6:
         a6:ed:ea:b7:a0:9d:f2:c0:b1:a6:c2:a7:83:3e:3d:df:32:f0:
         66:5a:1d:e6:98:9f:19:66:52:aa:4e:c3:13:17:51:c5:15:41:
         34:42:dc:a3:79:61:e5:b5:e0:0a:7f:dc:3a:89:25:98:f8:15:
         50:23:fe:ae:87:54:ff:bf:b5:35:1b:bf:e4:bd:c1:e5:f8:48:
         1d:e0:bf:37:6c:e8:32:93:08:74:0f:f3:a2:f9:d4:a4:55:25:
         d6:5c:66:2b:c9:d8:73:d8:89:8d:d1:d9:ff:61:c2:62:71:de:
         0f:0b:7d:1c:4a:1e:a2:bf:cd:10:bb:c9:1d:0d:92:4b:65:09:
         00:e2:72:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:33 2024 by rpki-client on console-ams.rpki-client.org