Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
File:                     pqNDsn-fdirkHPfFvGtRFMKIWnc.mft (raw, json)
Hash identifier:          UqfiJa4ArYVE6BmqYn1NkZ4tWX2XQZtLukcxtHPkQno=
Subject key identifier:   ED:CD:7F:BD:49:54:C6:4A:62:9F:25:F7:EC:28:8A:34:E5:87:4D:78
Authority key identifier: A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77
Certificate issuer:       /CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
Certificate serial:       54
Authority info access:    rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
Manifest number:          54
Signing time:             Mon 16 Sep 2024 02:48:20 +0000
Manifest this update:     Mon 16 Sep 2024 02:48:20 +0000
Manifest next update:     Wed 18 Sep 2024 02:48:20 +0000
Files and hashes:         1: pqNDsn-fdirkHPfFvGtRFMKIWnc.crl (hash: +bwbcCLjorIn+kW3CgHro86wmLfEG8IomxAXghyJYIc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
                          rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 18 Sep 2024 00:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642CB1AR/serialNumber=A6A343B27F9F762AE41CF7C5BC6B5114C2885A77
        Validity
            Not Before: Sep 16 02:48:20 2024 GMT
            Not After : Sep 18 02:48:20 2024 GMT
        Subject: CN=66e79c74-9018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ab:94:bc:a4:ea:0e:65:fc:0b:b8:82:ab:86:
                    b2:bc:45:33:12:88:85:fe:94:fb:de:f3:5b:3d:18:
                    ea:d6:cd:89:b2:a1:77:24:14:c0:48:56:8b:18:9e:
                    9c:c4:1e:cc:42:42:34:5e:95:a3:f1:dc:9a:6f:53:
                    4c:97:02:69:af:7f:ca:f3:6e:06:9c:34:7d:65:ee:
                    34:a3:1d:22:1d:ec:e4:44:e6:f7:b0:ae:fc:bd:07:
                    0c:7a:e4:45:e5:e9:09:3c:33:d6:2b:33:42:f3:9f:
                    8c:12:ba:95:50:e7:48:97:8c:bf:18:a8:ce:8f:82:
                    ab:40:07:da:5d:27:5a:91:00:c1:5c:bf:ae:3c:6f:
                    4c:8f:bc:c3:c5:b5:3a:5c:ff:7a:b0:d1:4d:28:35:
                    7e:5d:33:3c:56:29:8e:96:b6:20:48:22:04:b0:3a:
                    e9:4a:a1:9e:6c:a4:27:2e:d0:8f:4a:b4:d1:fb:17:
                    ae:dd:2d:9e:d0:3d:fd:2b:bf:d5:0c:b3:ec:49:4a:
                    61:1d:a9:07:ed:2e:1c:1c:67:8f:14:67:62:f3:d6:
                    6a:73:09:3d:1e:4c:8c:9c:e4:58:90:f2:bb:7d:b7:
                    87:50:3b:8a:56:05:40:1c:86:ab:04:ea:e0:62:24:
                    4b:9c:25:81:f8:0d:ac:86:14:42:f1:83:96:0d:57:
                    5d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CD:7F:BD:49:54:C6:4A:62:9F:25:F7:EC:28:8A:34:E5:87:4D:78
            X509v3 Authority Key Identifier:
                keyid:A6:A3:43:B2:7F:9F:76:2A:E4:1C:F7:C5:BC:6B:51:14:C2:88:5A:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/pqNDsn-fdirkHPfFvGtRFMKIWnc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642CB1/4280CE60348911EFAA1866A2762E951A/pqNDsn-fdirkHPfFvGtRFMKIWnc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:24:84:a4:f6:7f:2a:e6:16:38:73:26:54:ee:45:3a:eb:aa:
         c6:51:9f:a5:94:bf:c4:5e:45:ea:7d:52:3b:b2:40:ae:80:af:
         c1:f5:2d:16:18:1f:01:e6:f9:52:08:55:eb:99:36:73:32:37:
         7c:91:ea:b3:45:4a:1a:50:7b:2c:f9:84:66:e8:26:9b:6f:06:
         b5:03:6b:cc:1f:c8:b8:1c:89:46:c0:75:58:b2:cc:cd:4d:4b:
         f7:f1:c8:5c:b1:46:17:dd:9e:ae:f9:c8:dc:9a:79:06:a4:19:
         8d:9d:e1:86:ef:30:dc:11:a4:96:dd:7c:53:1b:0a:9b:a8:16:
         30:37:30:ad:a2:03:27:4f:74:85:60:24:53:d1:2c:f4:eb:a2:
         7c:a1:5d:43:8a:58:7c:0f:cb:f1:c0:ec:6f:1b:07:28:3a:9c:
         a9:0a:08:39:79:2b:e4:ea:72:19:b6:fe:2f:e1:f7:97:d1:74:
         0d:78:a7:e0:6e:26:63:00:14:90:7b:39:6e:f5:98:57:dd:03:
         e1:7f:d2:f4:6a:0d:15:9d:5c:47:91:e7:40:d3:5b:47:89:24:
         14:3c:07:e4:d3:d3:42:28:82:c9:38:16:47:a4:f6:1b:6c:9d:
         da:c8:c0:57:bd:f8:65:df:cb:07:2c:8a:ed:57:20:51:c6:a4:
         66:a8:e2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----