Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
File:                     XudwaWdbdcoke_xc0zALF7WznDQ.mft (raw, json)
Hash identifier:          KOERN3Eov3Hx+apJxUcFWRCaJHvDY4kK2L+LB5aMo7o=
Subject key identifier:   21:98:C3:BE:57:FC:8C:57:93:E8:5B:F8:DC:A8:61:26:76:6F:B7:50
Authority key identifier: 5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34
Certificate issuer:       /CN=F3646008AF/serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
Certificate serial:       0607
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
Manifest number:          0607
Signing time:             Fri 22 Nov 2024 01:19:40 +0000
Manifest this update:     Fri 22 Nov 2024 01:19:40 +0000
Manifest next update:     Sun 24 Nov 2024 01:19:40 +0000
Files and hashes:         1: XudwaWdbdcoke_xc0zALF7WznDQ.crl (hash: sCKgTGQNqHVYysVPyVzQGV8ArQk7SllxSsJZzeFdkMI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1543 (0x607)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646008AF/serialNumber=5EE77069675B75CA247BFC5CD3300B17B5B39C34
        Validity
            Not Before: Nov 22 01:19:40 2024 GMT
            Not After : Nov 24 01:19:40 2024 GMT
        Subject: CN=673fdc2c-4454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b7:08:05:56:a5:c1:80:d8:61:e2:6e:4d:02:
                    88:aa:ff:34:fa:91:cf:ce:d9:f0:b4:88:63:c4:15:
                    ee:61:ab:1d:23:76:df:bc:30:0b:29:51:c1:1a:1e:
                    6c:b7:c3:9c:00:c6:44:43:17:5d:9b:db:c6:16:27:
                    a0:50:84:8b:e4:18:63:99:8b:cd:67:d7:20:f1:6a:
                    63:9d:6f:ef:d9:a8:c5:97:38:a0:b4:bf:9d:85:4d:
                    1b:4b:24:fa:ec:13:d7:82:bb:71:4f:4f:30:ee:85:
                    90:e9:d7:8c:25:1f:f7:c7:21:d5:8d:5d:da:fa:7f:
                    a6:cb:90:75:bb:24:e1:49:e8:6e:b8:49:32:08:f7:
                    cd:f6:ec:86:8b:bd:e9:59:1e:5c:69:de:2d:99:70:
                    3b:92:55:aa:17:29:d9:d2:69:22:73:03:2c:5a:6f:
                    c9:3f:0c:24:b7:51:87:f1:1a:41:fa:3e:04:bf:18:
                    af:8a:21:1a:0f:9c:08:a0:ec:86:27:f5:2e:f1:ae:
                    06:37:ea:f2:0e:f0:d4:af:50:90:7b:32:c4:b5:29:
                    f4:3a:16:59:f5:2f:ee:fe:06:2a:dc:48:53:4d:c1:
                    86:b9:bc:ef:04:be:56:e4:52:39:4b:6a:f0:fa:1b:
                    51:75:eb:bd:69:24:95:8d:f4:d2:ef:0a:1c:7b:5f:
                    7b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:98:C3:BE:57:FC:8C:57:93:E8:5B:F8:DC:A8:61:26:76:6F:B7:50
            X509v3 Authority Key Identifier:
                keyid:5E:E7:70:69:67:5B:75:CA:24:7B:FC:5C:D3:30:0B:17:B5:B3:9C:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XudwaWdbdcoke_xc0zALF7WznDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646008/785175CA088D11EBAAD1BC5BF8AEA228/XudwaWdbdcoke_xc0zALF7WznDQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:73:07:90:ac:ae:ba:7b:de:c6:cf:d6:26:2c:13:a1:76:47:
         0d:1b:b5:9d:7b:63:05:c5:be:ca:bf:82:5d:54:22:6e:d9:d4:
         01:0a:38:57:e2:78:45:89:da:ee:1f:15:f6:30:a4:31:a9:bc:
         dd:ed:9b:d4:93:23:dd:79:70:c9:12:fc:3f:e9:f0:d0:d7:cd:
         77:c0:da:5b:37:a4:70:99:2b:34:a4:11:3e:56:14:34:29:5a:
         3a:64:fa:bb:b2:63:02:ec:7d:a9:f7:a0:18:00:53:9d:a7:08:
         20:aa:68:f6:26:18:c3:41:2b:ab:d6:49:d4:1c:ac:08:c9:55:
         b2:c8:72:16:cd:e5:8e:76:72:9b:bf:42:ef:1e:d3:de:db:a2:
         00:30:b0:7f:f9:15:f0:ed:3d:53:14:b1:25:02:39:89:98:93:
         a8:b4:ef:3a:5d:da:d8:b2:27:db:b8:31:f9:71:26:b0:f5:0e:
         f8:f2:74:59:4e:40:70:e7:2f:bd:69:ed:35:c9:09:62:86:41:
         8a:ce:84:1e:40:23:3a:47:5c:b1:db:ea:3f:20:27:c8:10:04:
         98:cb:f2:21:d3:fb:2b:50:2a:d7:ae:cd:f1:40:4c:a7:d9:8b:
         ee:c9:ac:47:97:46:19:b7:7c:b3:88:79:ed:7a:e7:e7:20:6f:
         0f:54:41:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org