Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
File:                     tqq1AixPm4Kp_ukaPUxdheRtiR8.mft (raw, json)
Hash identifier:          /BNniYoMMTd3BPfcwU5CfPSMhnCVzafEqcp4DOjSSK8=
Subject key identifier:   8D:25:9A:C2:B6:E8:5C:FC:FF:94:0B:9B:86:4F:8A:0A:C2:52:A2:52
Authority key identifier: B6:AA:B5:02:2C:4F:9B:82:A9:FE:E9:1A:3D:4C:5D:85:E4:6D:89:1F
Certificate issuer:       /CN=F3644FCCAF/serialNumber=B6AAB5022C4F9B82A9FEE91A3D4C5D85E46D891F
Certificate serial:       0416
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tqq1AixPm4Kp_ukaPUxdheRtiR8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
Manifest number:          0416
Signing time:             Sun 16 Feb 2025 02:04:41 +0000
Manifest this update:     Sun 16 Feb 2025 02:04:40 +0000
Manifest next update:     Tue 18 Feb 2025 02:04:40 +0000
Files and hashes:         1: tqq1AixPm4Kp_ukaPUxdheRtiR8.crl (hash: ytz790CRrrl7py+jqJbr5tPZAjpxIFA8MrSHaMC85Ok=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tqq1AixPm4Kp_ukaPUxdheRtiR8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 18 Feb 2025 00:06:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1046 (0x416)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644FCCAF
        Validity
            Not Before: Feb 16 02:04:40 2025 GMT
            Not After : Feb 18 02:04:40 2025 GMT
        Subject: CN=67b147b8-3b92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:89:f0:a6:fa:7a:ca:4d:ad:d0:ec:69:f6:
                    4d:f6:77:5e:46:34:09:fe:55:98:00:e2:72:9e:ff:
                    6d:68:77:25:81:b6:29:58:0a:91:d7:20:6d:4a:79:
                    6a:06:53:dc:3d:48:1c:9f:55:ef:b3:e4:04:d0:d0:
                    e1:5e:bd:94:f3:ed:05:d2:73:c0:ba:d9:7b:d8:16:
                    54:5c:72:a9:60:4d:c6:a2:5b:59:99:6a:28:1f:7d:
                    17:aa:01:86:58:a2:fb:4d:5f:bc:fc:4c:a9:49:28:
                    20:88:fd:2b:3a:d2:d6:06:37:28:ab:69:43:20:a5:
                    cf:e6:6b:39:51:cf:ba:7a:99:60:4a:fa:26:8b:c4:
                    af:d6:f2:e9:da:a9:cf:30:0e:d9:49:0a:8b:31:00:
                    53:a5:93:48:01:b8:ba:8b:74:c5:4b:de:00:70:d3:
                    b9:eb:5a:11:50:ce:cb:c7:d2:73:e0:29:f0:b6:f5:
                    e2:89:da:48:3b:0b:7b:3d:78:0e:af:7a:96:c5:c8:
                    48:0d:7f:93:a1:9f:f9:fc:5b:a5:54:27:64:b6:8a:
                    8e:5c:9d:5d:d7:bf:d8:cd:95:d0:8e:d6:4d:81:e3:
                    ca:66:4e:c7:02:07:e2:4f:20:59:f9:f2:af:58:2a:
                    1a:57:93:c8:f7:9e:af:d5:a3:f6:8f:25:ed:48:b7:
                    48:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:25:9A:C2:B6:E8:5C:FC:FF:94:0B:9B:86:4F:8A:0A:C2:52:A2:52
            X509v3 Authority Key Identifier:
                keyid:B6:AA:B5:02:2C:4F:9B:82:A9:FE:E9:1A:3D:4C:5D:85:E4:6D:89:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tqq1AixPm4Kp_ukaPUxdheRtiR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:8f:d0:da:dd:46:e1:b6:99:13:a9:7a:60:f5:06:be:5d:f9:
         20:63:6d:2b:37:ff:92:4f:92:88:fc:ce:3b:41:63:d7:6c:58:
         68:cd:8c:97:37:bb:06:e2:b7:5a:32:a0:38:fb:c3:2f:3b:54:
         f1:8f:ef:1d:92:b1:10:98:71:41:48:4b:a9:71:ae:00:c2:f2:
         2a:36:e8:a3:1f:d0:e9:c9:d3:50:7c:bd:e0:55:e8:cb:5b:a5:
         c7:6a:52:8d:7a:f3:d3:e4:75:6e:9d:e7:6f:fb:c8:ac:8b:4b:
         41:27:3b:22:01:82:98:7b:dc:2d:a2:4e:22:17:da:2a:4e:1c:
         98:53:47:d4:bf:7d:f4:aa:a3:9f:dc:25:d9:8d:67:23:2e:8e:
         14:9c:1e:01:66:61:44:a1:e3:3f:44:68:17:4f:31:52:25:cb:
         e2:2d:5b:ee:b9:88:9d:7c:c2:dc:6a:03:4f:a1:85:60:17:b5:
         5b:98:89:bb:ac:8f:cf:d1:58:ee:d2:a7:fc:d2:11:c4:29:8c:
         ff:c4:71:e2:5d:42:1f:ff:47:5e:6d:fb:db:0f:37:a6:69:7b:
         aa:48:e7:0d:dc:f3:56:91:1d:12:7a:e6:d4:a2:04:06:44:a4:
         7c:de:59:57:8e:02:22:19:f0:12:5e:3c:32:4e:3e:65:25:5f:
         9a:7b:bf:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:02 2025 by rpki-client