Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
File:                     kgRBKh8SvNXSs845kazvaXbIhl4.mft (raw, json)
Hash identifier:          BisY6NLlLFiVZRrA1cmCsNXL36/6jsdBbhwAm5NGcfc=
Subject key identifier:   23:BD:3D:4A:9A:72:89:38:27:78:DE:FA:69:29:76:8A:F9:72:12:12
Authority key identifier: 92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
Certificate issuer:       /CN=F3647FF0AF/serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
Certificate serial:       0273
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
Manifest number:          0272
Signing time:             Fri 03 May 2024 01:59:09 +0000
Manifest this update:     Fri 03 May 2024 01:59:08 +0000
Manifest next update:     Sun 05 May 2024 01:59:08 +0000
Files and hashes:         1: kgRBKh8SvNXSs845kazvaXbIhl4.crl (hash: W6EKc2SCGUhdbmnE7eUvsFzRii6CuamjPOgQJNMIxsM=)
                          2: 159723A832AC11EDBEB90BE3F1222468.roa (hash: qPo5TM6lKUat3AteIaVBWXCCMIZO8rA2Mya2N5a3TFU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3647FF0AF/serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
        Validity
            Not Before: May  3 01:59:08 2024 GMT
            Not After : May  5 01:59:08 2024 GMT
        Subject: CN=663444ed-91b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b0:8e:59:4b:01:bd:fa:43:4d:d9:0a:c1:59:
                    85:da:b3:c7:a7:6c:77:4a:38:94:b5:32:d5:6c:48:
                    64:99:3b:05:71:53:ae:63:26:1a:ec:8a:8e:94:f3:
                    dc:64:a0:62:3c:5a:69:77:7f:27:00:07:fb:b5:ac:
                    41:26:04:bd:b0:45:8d:99:5c:00:94:97:58:d4:9b:
                    04:53:8a:38:0d:f0:ef:bd:ca:e1:a8:1b:c8:a3:d0:
                    0c:b2:ff:e6:c8:d3:e7:40:a3:a4:ef:c5:69:9c:9c:
                    0a:2b:0f:74:21:37:59:6f:dc:b6:af:f3:da:48:47:
                    ce:fc:62:10:c1:61:4d:89:93:18:ce:7c:9b:d9:c8:
                    b2:b9:22:a0:9e:f7:e0:54:cd:74:6b:2a:68:2c:1e:
                    75:a5:87:53:72:ed:75:41:52:76:17:1d:1c:dc:7b:
                    68:5d:ca:b8:7e:a5:f7:03:0b:d0:73:a7:87:f5:d7:
                    3f:af:03:b0:0a:38:f7:e9:60:3a:7b:a5:05:48:95:
                    0b:c1:65:af:33:61:8c:41:06:e9:64:01:91:af:b9:
                    28:eb:de:2e:9c:55:bc:6b:a5:5d:6a:73:0f:27:3b:
                    0a:92:ce:d9:ff:68:29:59:da:e1:04:d6:95:33:97:
                    91:db:8e:8e:07:a4:10:32:7c:fc:8f:07:59:08:38:
                    8a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:BD:3D:4A:9A:72:89:38:27:78:DE:FA:69:29:76:8A:F9:72:12:12
            X509v3 Authority Key Identifier:
                keyid:92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:c2:a9:64:9c:b7:f4:00:53:a0:91:61:bb:71:9c:99:30:38:
         43:9d:3a:d3:38:ff:7f:e9:d5:f9:f7:3c:8b:cb:e9:0f:42:7b:
         2f:7c:a5:94:b9:0d:b3:d9:d3:d1:3d:0e:91:e0:df:aa:de:8e:
         32:2e:5f:7d:fa:3c:73:4e:43:51:7e:d2:ad:44:be:4c:02:cb:
         9c:ed:b4:80:6c:4f:0c:dc:5b:02:00:5e:74:f7:35:68:7c:31:
         ff:aa:a1:a9:f5:15:cd:3d:9f:c9:92:64:b7:29:f0:1c:17:46:
         15:71:d5:4f:d9:12:55:09:2f:6c:18:63:9c:04:c7:33:57:39:
         94:d8:af:c8:72:b1:da:f4:8e:9f:76:56:3f:5b:b6:12:fc:ce:
         ff:20:33:2a:ae:8d:66:b8:47:bf:7d:d0:5c:87:d8:76:5d:f4:
         5c:f6:39:56:0b:18:df:08:31:45:ae:35:a7:d3:7c:99:68:7d:
         fa:ef:86:b5:80:17:54:b1:8a:d0:be:c7:96:88:ef:c2:e3:5c:
         e2:ef:a1:2b:52:7c:b2:4b:f6:ed:59:86:97:f4:0e:c2:6c:4f:
         b9:25:7b:a2:1b:e4:7e:68:39:31:d4:af:77:50:ab:b3:1e:3d:
         51:bc:98:49:b7:ee:31:02:f5:17:93:f2:1e:ca:77:49:e5:f0:
         85:d6:5a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:08 2024 by rpki-client on console-fra.rpki-client.org