Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/7vdTJDjdpqMkdkrK-E72JOF34MU.mft
File:                     7vdTJDjdpqMkdkrK-E72JOF34MU.mft (raw, json)
Hash identifier:          sXwDsmnbt6bzYlUIAtbRFnSTKYn3V5LjdZo3WvEWnaQ=
Subject key identifier:   18:BF:8A:DF:BB:D8:FA:F6:C3:8C:6F:ED:FD:71:CC:74:7B:1A:7F:46
Authority key identifier: EE:F7:53:24:38:DD:A6:A3:24:76:4A:CA:F8:4E:F6:24:E1:77:E0:C5
Certificate issuer:       /CN=F3646008AP/serialNumber=EEF7532438DDA6A324764ACAF84EF624E177E0C5
Certificate serial:       0550
Authority info access:    rsync://rpki.afrinic.net/repository/apnic/7vdTJDjdpqMkdkrK-E72JOF34MU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/7vdTJDjdpqMkdkrK-E72JOF34MU.mft
Manifest number:          054F
Signing time:             Tue 21 May 2024 01:15:55 +0000
Manifest this update:     Tue 21 May 2024 01:15:55 +0000
Manifest next update:     Thu 23 May 2024 01:15:55 +0000
Files and hashes:         1: 7vdTJDjdpqMkdkrK-E72JOF34MU.crl (hash: fKI2rcWD8h7olh5VqiXubQwWFRyK5HDcwoT7gxcsiW8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/7vdTJDjdpqMkdkrK-E72JOF34MU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/7vdTJDjdpqMkdkrK-E72JOF34MU.mft
                          rsync://rpki.afrinic.net/repository/apnic/7vdTJDjdpqMkdkrK-E72JOF34MU.cer
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 23 May 2024 00:10:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1360 (0x550)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646008AP/serialNumber=EEF7532438DDA6A324764ACAF84EF624E177E0C5
        Validity
            Not Before: May 21 01:15:55 2024 GMT
            Not After : May 23 01:15:55 2024 GMT
        Subject: CN=664bf5cb-22f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:6e:90:4a:c7:57:7a:74:f2:fd:95:dc:9b:
                    95:be:e9:4b:59:c2:fc:e2:58:7f:66:3e:de:e9:34:
                    6c:ac:1f:90:96:d4:9a:b0:52:86:af:0a:fb:6d:79:
                    4f:f6:44:be:2b:2e:39:56:48:f6:d5:48:60:0e:92:
                    d1:4e:df:c8:84:8c:d0:b0:ae:2c:02:f0:46:c6:6b:
                    8c:5d:94:06:ac:27:c4:a7:97:00:83:58:34:90:78:
                    d0:21:d5:b6:0a:53:70:78:b5:2a:62:b6:b8:0f:19:
                    cd:b6:84:3e:e5:47:6b:a4:f4:19:c1:13:9f:7a:51:
                    78:d0:9e:b3:77:92:b5:aa:1e:3b:f3:cb:48:2d:6e:
                    94:9a:f2:4a:f8:cd:84:e9:33:60:76:d4:45:67:f1:
                    f9:e3:0d:e3:fe:05:4a:54:bf:9d:fc:0c:3e:68:10:
                    4a:33:28:43:06:7c:dd:d5:10:45:33:04:1a:9d:84:
                    a7:4f:59:41:92:ac:15:6b:94:e9:1a:c6:39:17:6b:
                    a5:de:19:c9:a1:36:81:fe:ef:86:51:0f:ff:c9:87:
                    51:ea:34:7a:27:9d:c8:03:3a:d0:29:20:78:08:59:
                    f2:00:47:cb:8c:5a:9a:26:23:e7:3c:16:1d:95:3a:
                    79:57:aa:0c:36:a7:e1:5c:2d:6a:3e:cd:80:0e:19:
                    2c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BF:8A:DF:BB:D8:FA:F6:C3:8C:6F:ED:FD:71:CC:74:7B:1A:7F:46
            X509v3 Authority Key Identifier:
                keyid:EE:F7:53:24:38:DD:A6:A3:24:76:4A:CA:F8:4E:F6:24:E1:77:E0:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/7vdTJDjdpqMkdkrK-E72JOF34MU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/7vdTJDjdpqMkdkrK-E72JOF34MU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/674435BA088D11EBAFA7A65BF8AEA228/7vdTJDjdpqMkdkrK-E72JOF34MU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:21:58:4f:c4:d6:19:f2:7f:18:89:c0:bb:39:48:a3:68:60:
         6f:1a:b6:dc:e2:b0:5a:e4:20:9f:3f:ea:72:cf:25:90:3a:c2:
         89:fe:8b:03:a9:09:2b:92:09:69:f2:44:ea:c5:4b:02:1f:d1:
         e8:d7:df:c8:e7:3b:a1:7d:da:0f:5a:76:23:1e:83:c7:d3:0c:
         45:52:db:83:21:c6:38:cc:64:9d:79:a2:70:20:71:91:5d:dd:
         58:0e:d4:58:e3:69:db:6f:05:d1:81:26:64:af:b0:52:02:a9:
         31:92:30:0f:d0:cb:2a:e2:d8:84:33:8c:d9:91:95:2c:b3:26:
         33:14:a3:1f:27:b1:ce:48:0f:79:5b:a9:1d:fe:29:07:52:68:
         11:a5:57:95:65:8f:5b:21:ca:00:54:57:fb:dd:eb:e3:8d:29:
         73:0c:03:05:2b:de:fd:2a:d3:84:0d:f0:be:f9:ab:93:dc:cd:
         e9:d1:50:de:e4:92:aa:28:2b:70:f0:63:2c:4e:2f:2c:94:1d:
         fc:9d:20:3b:0f:8f:0b:ee:93:69:31:ea:50:4b:07:8b:02:04:
         9f:26:85:f4:c6:7b:80:2a:4a:f8:47:ec:cf:da:12:17:1b:30:
         b4:a7:13:85:ae:be:da:05:ca:eb:ec:d2:1b:4f:d8:03:4c:8e:
         33:b2:33:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 01:46:34 2024 by rpki-client on console-fra.rpki-client.org