Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
File:                     opdOZzBDJDiMiIAucX1rkoGlJjI.mft (raw, json)
Hash identifier:          UpiwN5AFEdJ42RtbG1bMTXG0+tU3QXNNDs+16Dhtar4=
Subject key identifier:   B0:68:15:A0:90:E9:B7:5D:1B:C9:A2:1B:2E:99:91:D8:26:5F:12:D4
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Certificate issuer:       /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial:       0347
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
Manifest number:          0337
Signing time:             Thu 21 Nov 2024 02:02:10 +0000
Manifest this update:     Thu 21 Nov 2024 02:02:09 +0000
Manifest next update:     Sat 23 Nov 2024 02:02:09 +0000
Files and hashes:         1: opdOZzBDJDiMiIAucX1rkoGlJjI.crl (hash: IkrHLXxuDYkPkvhNp35+N6SZ49XY7soTvMLRmE9GvMc=)
                          2: 929959A28D0911EFA947317A762E951A.roa (hash: 3GqMo6On8xRZFctyfNkt2HJyNVyPudemSXWoKZYF9f4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 839 (0x347)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
        Validity
            Not Before: Nov 21 02:02:09 2024 GMT
            Not After : Nov 23 02:02:09 2024 GMT
        Subject: CN=673e94a1-97b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:ed:82:2a:16:41:7a:9f:ef:97:3b:bc:84:
                    ec:da:de:71:d8:d9:b8:e4:55:13:a3:3f:38:59:73:
                    d5:13:6a:56:70:35:1a:64:22:ae:18:53:82:48:6c:
                    9a:0d:6a:c7:30:33:07:55:0f:a8:7a:ec:03:45:ff:
                    1d:d2:55:33:cd:29:f1:f1:a6:db:85:7f:9e:cf:97:
                    92:0e:06:ac:cb:3c:c2:60:ff:d6:d5:00:44:78:e3:
                    3e:fe:79:f3:0e:3d:fd:9a:f4:cf:f0:15:c8:8f:d6:
                    08:3b:63:4e:e8:be:5f:40:2d:9e:c4:91:86:34:38:
                    7c:87:d6:ae:da:e6:a2:60:e1:d1:32:46:88:e2:2d:
                    4b:96:61:04:3a:d4:0d:3b:53:86:75:7c:0e:65:3c:
                    16:3e:50:a2:68:3d:30:59:36:04:8e:95:19:dd:05:
                    e8:18:1a:6d:d6:6e:ee:c7:6d:50:b7:7f:10:1f:b7:
                    e5:6f:c2:e2:ec:6a:52:22:cb:a9:11:1c:f1:1e:a9:
                    25:f9:1f:b5:78:f6:20:1d:34:64:7b:9b:43:34:47:
                    19:47:33:ae:68:da:a1:b4:89:2b:dd:8f:02:62:06:
                    82:26:b0:00:7e:3a:87:e4:1b:74:a8:47:5b:86:e1:
                    fc:31:10:8a:cb:41:33:d1:1c:69:de:fd:75:9a:6e:
                    9e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:68:15:A0:90:E9:B7:5D:1B:C9:A2:1B:2E:99:91:D8:26:5F:12:D4
            X509v3 Authority Key Identifier:
                keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:ae:40:e4:9c:46:08:1d:99:8e:14:42:c4:f8:77:85:22:31:
         9f:c9:7a:c2:8a:9f:78:d6:80:bf:26:de:9b:ac:31:a9:e1:93:
         c2:5a:61:e7:85:62:a5:ea:b0:b3:2a:38:1c:a9:7b:e1:2d:5f:
         83:d0:bf:47:54:6c:4f:2b:7e:d8:72:2e:58:f7:b6:12:43:eb:
         40:67:8f:5b:ca:d8:20:19:03:a7:2e:a8:8a:37:a1:59:21:df:
         0f:9c:e9:22:a5:4b:ce:a1:37:9e:80:1e:75:c6:26:d8:5d:4b:
         67:eb:95:06:36:a7:a9:e2:13:43:fd:58:e6:08:f3:a2:dc:1b:
         8f:0f:89:94:dd:8d:31:b2:71:c9:05:06:16:4c:47:43:aa:1e:
         4f:c8:b0:5f:42:f2:fc:69:7a:51:1a:3a:02:0a:f0:af:3c:bc:
         17:52:1e:0f:1c:f8:70:9a:8a:15:aa:3e:e5:68:4e:c2:29:80:
         03:24:07:53:75:8a:6e:0f:28:19:77:ea:f1:1e:bf:8d:fa:39:
         2a:c1:b8:3b:83:48:e8:56:aa:70:bf:0c:f4:49:b9:0d:b2:07:
         38:20:ad:92:f7:8f:86:ae:46:15:7a:b4:b3:3d:7d:1f:c2:d1:
         5c:ee:6b:48:7f:88:50:21:c7:e1:86:fa:cd:81:9b:ee:f9:5c:
         3b:95:41:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:19:40 2024 by rpki-client on console-ams.rpki-client.org