Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
File:                     HcMxuzT85bGxnG1RA4RwUkV1CPE.mft (raw, json)
Hash identifier:          WbB8UsqS/KoS01R/YmTeT8pBkcpwRnUPlSkIPbgHrZ4=
Subject key identifier:   45:54:84:D7:60:29:A0:C4:2D:81:53:DD:C8:BF:42:E1:A7:47:22:5E
Authority key identifier: 1D:C3:31:BB:34:FC:E5:B1:B1:9C:6D:51:03:84:70:52:45:75:08:F1
Certificate issuer:       /CN=F3647C6BAF/serialNumber=1DC331BB34FCE5B1B19C6D5103847052457508F1
Certificate serial:       027A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
Manifest number:          0279
Signing time:             Tue 25 Jun 2024 01:59:27 +0000
Manifest this update:     Tue 25 Jun 2024 01:59:27 +0000
Manifest next update:     Thu 27 Jun 2024 01:59:27 +0000
Files and hashes:         1: HcMxuzT85bGxnG1RA4RwUkV1CPE.crl (hash: /8M+X9p825YPcWmkYXCMZOfQWExxo+Aw+4kx5ymPUL8=)
                          2: 98BB02A409D411EE86E7404E4AD9E6FC.roa (hash: wD24NAe2PvKqRZVgJaLXW1dYsoCcT+RS8+/9lfKzOLs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 27 Jun 2024 00:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3647C6BAF/serialNumber=1DC331BB34FCE5B1B19C6D5103847052457508F1
        Validity
            Not Before: Jun 25 01:59:27 2024 GMT
            Not After : Jun 27 01:59:27 2024 GMT
        Subject: CN=667a247f-99ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a2:4e:dd:f3:ee:c8:68:25:42:f2:6c:56:ea:
                    bc:07:cc:14:6f:d2:1d:47:f9:68:a4:e4:29:a9:f3:
                    d7:0a:1b:fd:7b:7c:cd:71:a3:88:74:e4:f1:83:d8:
                    d5:2d:6b:a2:45:37:ae:6d:e6:bf:5a:77:0b:22:c7:
                    fe:87:1a:42:20:b0:bf:5a:88:25:d7:43:9a:07:e8:
                    b7:19:61:3e:f7:ef:33:d3:1b:18:f3:4d:9b:b7:69:
                    36:ac:50:84:6c:ba:09:8b:75:4e:19:d2:d0:58:bd:
                    85:af:67:70:56:71:b5:25:a6:5b:8f:05:4f:b2:ec:
                    5b:9f:1f:37:f6:45:4f:5e:d1:e1:56:bb:6f:13:f9:
                    9e:dc:43:9a:25:56:01:fd:4f:dc:c2:53:bd:1d:17:
                    bc:4e:d2:f0:03:b8:e2:51:36:c1:7d:4f:e2:4b:f1:
                    c0:c0:7c:98:06:1f:46:ed:2e:f3:16:35:42:7d:a7:
                    85:97:c0:6b:91:1a:1d:cb:a5:0f:8a:30:24:9f:f0:
                    1e:5f:3c:63:73:ae:21:5c:d5:ae:d8:20:1e:78:b2:
                    71:27:d3:c0:71:b0:76:2a:70:81:2e:0d:59:b3:38:
                    a7:05:f4:af:7a:9c:da:df:6f:c9:29:f4:a5:e4:55:
                    ba:a1:58:22:3b:df:d7:ec:d1:e7:dd:e9:9c:fe:d3:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:54:84:D7:60:29:A0:C4:2D:81:53:DD:C8:BF:42:E1:A7:47:22:5E
            X509v3 Authority Key Identifier:
                keyid:1D:C3:31:BB:34:FC:E5:B1:B1:9C:6D:51:03:84:70:52:45:75:08:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HcMxuzT85bGxnG1RA4RwUkV1CPE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647C6B/2E6CE99C553611EDBEDEB1B5F1222468/HcMxuzT85bGxnG1RA4RwUkV1CPE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:c8:5c:9f:09:f8:d4:10:6a:34:62:ae:61:78:77:ed:4d:0d:
         bd:d4:b9:37:d8:2c:9b:8f:dd:a8:e9:a5:2c:c9:56:2f:b1:91:
         7a:82:a0:8b:04:5d:5c:1d:0e:f3:c4:8a:ef:02:3d:ce:e2:72:
         3a:ad:a5:b4:28:bb:a7:98:cf:12:23:7d:f6:13:82:94:15:7c:
         8c:a0:4f:2c:9c:54:cf:38:e1:a5:24:03:78:e3:99:dd:01:dd:
         9e:ed:ab:45:e4:a2:7d:fa:6d:e0:ea:27:14:f6:3c:9a:0d:a8:
         a8:e0:82:9f:23:a2:e4:65:ee:0c:85:97:25:0d:ad:50:76:76:
         76:8e:29:70:b3:8c:6f:e4:7b:53:42:40:1a:88:9a:e0:f7:01:
         6b:2c:1e:df:ab:b4:25:fa:ed:0b:6f:c4:29:7f:a0:c2:c4:17:
         44:ce:bc:eb:7d:e5:ea:16:28:79:7d:25:7b:e9:e3:42:22:40:
         c4:e1:a9:66:19:be:47:51:4e:82:e8:56:1a:06:57:2f:5d:7d:
         32:a7:11:30:b6:d8:44:58:59:6d:0b:90:37:2c:3b:6e:45:92:
         ba:d5:80:95:4a:53:fb:b6:2b:22:1d:c5:d8:a7:7f:4c:48:04:
         ec:dc:9c:6d:f7:f6:3f:1a:ba:71:9c:5c:76:2b:64:68:83:36:
         09:0c:2a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 02:52:15 2024 by rpki-client on console-fra.rpki-client.org