Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
File:                     gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft (raw, json)
Hash identifier:          1Ba161mlr4vgjo9Z++bJ6iaG5LJ4llWpPNLebhN43vA=
Subject key identifier:   20:F4:45:0F:FC:95:07:11:38:41:31:BE:11:E4:47:60:EF:07:14:D6
Authority key identifier: 80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38
Certificate issuer:       /CN=F364744FAF/serialNumber=80AF060E4640C32653D0F00C3024514A9F149538
Certificate serial:       0682
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
Manifest number:          0680
Signing time:             Fri 22 Nov 2024 01:17:14 +0000
Manifest this update:     Fri 22 Nov 2024 01:17:14 +0000
Manifest next update:     Sun 24 Nov 2024 01:17:14 +0000
Files and hashes:         1: gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl (hash: a1stXjb8dcpC2JXASiNVFDoM8Q+JNweZeA5NKTuquKM=)
                          2: CB8C83A0C88511ED940C44A3F1222468.roa (hash: FlRKAeloaznza0Vyrk2FzdR3/23YEw2VW6tyntdnTAo=)
                          3: 0331A55AC88711EDA1B9D1A6F1222468.roa (hash: Z5DAUvIjXoBx4GGCuvXKQGLH4Jh9pFC0RHSj+G6qEeM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1666 (0x682)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364744FAF/serialNumber=80AF060E4640C32653D0F00C3024514A9F149538
        Validity
            Not Before: Nov 22 01:17:14 2024 GMT
            Not After : Nov 24 01:17:14 2024 GMT
        Subject: CN=673fdb9a-f40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9a:c2:51:5f:29:36:92:df:27:b0:70:14:83:
                    54:2f:f8:8d:5b:98:61:d8:d0:7c:f5:6a:5b:d7:8a:
                    55:7b:b1:eb:83:10:d1:a0:a8:9d:1e:c8:4b:3b:72:
                    50:47:ff:98:67:31:af:6c:7b:51:7e:a5:cc:b2:35:
                    e4:41:e1:3c:a4:7f:15:59:bd:96:37:c6:7c:76:0a:
                    02:83:7f:73:31:45:51:33:99:02:2c:d9:05:1a:78:
                    7d:83:a5:3f:0e:0e:c9:41:93:2b:c0:51:f3:68:18:
                    b3:07:34:19:81:bf:ff:9c:c4:fe:5d:e0:92:6c:8c:
                    f7:83:17:07:05:96:64:29:57:4e:06:4b:62:66:5c:
                    c4:a2:3f:30:35:a5:76:91:19:71:fd:2d:9a:b1:1f:
                    d4:ea:f0:ed:94:bf:f8:ac:7e:89:12:f9:c1:fa:ca:
                    ca:ee:15:05:be:1b:20:85:2f:01:93:8d:fb:1c:f1:
                    4b:6a:dc:03:70:de:95:00:89:5c:09:4a:2b:6a:09:
                    26:8f:5b:3d:58:3a:1d:1e:a4:7c:db:6a:c7:3d:60:
                    c5:b6:cd:f2:34:c0:8e:fe:5a:91:6f:42:b4:78:56:
                    32:8f:76:cc:9c:f5:21:5a:f8:a2:0f:13:dd:7d:2c:
                    cf:42:23:03:f9:92:96:5d:e5:97:94:0d:68:8b:7a:
                    e6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:F4:45:0F:FC:95:07:11:38:41:31:BE:11:E4:47:60:EF:07:14:D6
            X509v3 Authority Key Identifier:
                keyid:80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:0a:3e:05:7f:aa:88:61:4b:8a:0b:c0:72:58:23:40:72:68:
         d9:8f:71:e6:01:60:18:4b:cd:80:3e:4e:f9:e0:d6:c7:99:0e:
         19:a7:e9:5c:e9:d7:11:b6:c1:88:d5:52:d7:42:3c:be:45:08:
         cc:3c:eb:90:46:93:9d:d0:48:e9:70:d3:b7:06:a5:66:52:93:
         87:39:5d:ca:d1:f3:25:8d:cd:e3:d0:d7:8c:35:e3:9f:0a:60:
         76:55:c6:3f:ab:13:30:c0:71:97:58:10:d9:52:40:a7:9f:d7:
         06:14:b3:6d:2b:26:ba:cf:60:26:8b:a8:c8:db:9d:77:95:c9:
         d0:5f:e2:f4:84:19:51:b9:28:7f:fe:b5:36:9e:d9:a4:47:f7:
         be:99:3d:f0:39:d0:8f:e2:4c:8a:20:3e:ee:33:bb:c4:b5:06:
         69:08:1b:69:31:79:6f:6c:54:b1:a6:b0:d0:a1:90:03:0f:57:
         a1:d5:88:fd:ad:9e:2f:fd:20:96:2c:d2:ec:4b:c5:39:a6:ae:
         30:e8:73:8e:5c:82:b6:7d:68:48:76:aa:ed:ad:fe:5e:ab:fe:
         bc:cd:b3:10:56:78:72:94:79:30:44:c8:d4:69:7f:4f:ac:1c:
         cd:19:e4:ee:67:e0:b2:3e:b1:e0:7f:95:24:bc:2e:ea:c0:3f:
         f6:b1:42:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org