Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
File:                     C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft (raw, json)
Hash identifier:          LSaD4I+rGLO4OuOYGgt9+fz88HT8x8ud1ukZB8pyLiY=
Subject key identifier:   9B:50:F8:34:75:01:A1:00:1F:27:7B:E4:F9:96:AA:8D:65:F4:57:2E
Authority key identifier: 0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F
Certificate issuer:       /CN=F3645501AF/serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
Certificate serial:       06AF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
Manifest number:          06AB
Signing time:             Thu 21 Nov 2024 01:15:21 +0000
Manifest this update:     Thu 21 Nov 2024 01:15:21 +0000
Manifest next update:     Sat 23 Nov 2024 01:15:21 +0000
Files and hashes:         1: C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl (hash: O73N0yljjwfEYs4NN8vpD4WisQWvTstItOCla+DFiVo=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1711 (0x6af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645501AF/serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
        Validity
            Not Before: Nov 21 01:15:21 2024 GMT
            Not After : Nov 23 01:15:21 2024 GMT
        Subject: CN=673e89a9-d6d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ba:38:b7:de:62:dd:90:88:16:73:30:e2:2b:
                    9a:72:1e:c4:85:3f:a1:2a:5e:ac:26:2b:2c:eb:c7:
                    fd:66:a9:e7:5d:58:47:c2:1b:0f:34:17:a8:40:25:
                    15:19:c4:e5:df:64:34:19:3e:2d:cb:0b:11:ad:87:
                    65:70:87:37:a4:02:3d:df:ab:a8:95:7c:7a:8d:ab:
                    f6:1c:6c:e5:da:84:4c:4d:e5:0b:49:66:70:cd:05:
                    5e:a8:a3:3c:f6:01:a3:7a:a1:76:e4:5a:f7:61:a4:
                    be:f9:bd:09:9b:b8:e0:c4:44:ca:41:d3:85:53:2c:
                    78:53:a6:78:b1:c8:6d:d6:e7:90:af:a6:0e:1f:ca:
                    72:fa:ed:57:1f:ef:33:3a:a2:05:37:27:68:4b:dd:
                    4b:2e:71:db:11:28:73:bf:04:8c:44:4d:60:bd:8f:
                    74:e8:2f:3c:90:41:0a:d8:3f:79:88:d1:d0:52:4d:
                    af:3d:e7:43:a8:2f:08:0b:28:bf:2b:53:1f:da:6a:
                    a9:46:5d:15:42:81:10:93:d2:ff:c3:9f:0e:27:e6:
                    bd:30:7e:55:3f:9f:d7:67:d0:93:be:cc:6f:2e:3b:
                    1a:42:f4:33:af:b8:cd:73:87:70:df:ac:2a:7d:73:
                    26:cd:1a:b0:5d:95:d8:84:b8:5b:ca:0c:4d:1b:bd:
                    65:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:50:F8:34:75:01:A1:00:1F:27:7B:E4:F9:96:AA:8D:65:F4:57:2E
            X509v3 Authority Key Identifier:
                keyid:0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:37:58:ba:57:44:90:ff:c0:f9:bc:42:18:23:00:5a:9d:e5:
         ac:41:a1:e6:d7:fb:59:b3:9b:b3:7f:5f:36:1d:99:e7:27:6f:
         07:c4:6c:d6:a6:21:08:0b:33:e4:3c:89:66:d7:00:b4:5b:01:
         2a:c9:91:78:b5:b8:26:d7:01:4b:29:a4:be:dd:ca:f7:93:5f:
         6b:97:6a:f2:c8:4a:d9:b5:ff:30:39:2f:c8:a1:02:b6:06:4c:
         d1:45:66:0e:8d:f1:1c:3f:87:09:9b:c2:d6:d9:f9:c6:51:bc:
         56:57:fc:ad:4a:62:b3:16:09:5c:dc:67:2d:e1:a2:cc:26:fc:
         9c:7f:3a:28:5f:78:74:44:13:b7:fa:f7:87:c6:5b:e3:96:48:
         0f:bc:a4:74:1a:1c:19:4e:7b:c2:15:cf:f8:7c:8f:4d:f0:0d:
         0e:6f:c4:e7:6e:2f:a9:55:b5:17:8d:f1:fe:0e:00:e9:81:92:
         0c:9c:e8:3e:ba:e0:1f:c5:e2:3e:69:30:7c:30:dd:15:9b:b3:
         38:47:c0:da:1c:0f:0c:91:eb:7f:c7:55:98:c9:53:66:cb:79:
         f1:66:cb:9d:7c:01:51:6c:db:a2:6f:db:93:f1:fd:5d:e5:51:
         2a:35:8f:fc:a2:28:79:b1:1f:a9:2d:25:6f:27:70:a8:72:b6:
         0d:94:0a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:19:39 2024 by rpki-client on console-ams.rpki-client.org