Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/xfGhRZFy1JLkhg3RsOFyWgAnJPI.mft
File:                     xfGhRZFy1JLkhg3RsOFyWgAnJPI.mft (raw, json)
Hash identifier:          W+FOLYDyx3gCkfl1azf9gRZln1fSkZ3+PiHgrvo/PCQ=
Subject key identifier:   F4:0B:49:92:DA:77:3F:FE:40:34:A9:23:FC:B6:A5:86:66:10:AD:54
Authority key identifier: C5:F1:A1:45:91:72:D4:92:E4:86:0D:D1:B0:E1:72:5A:00:27:24:F2
Certificate issuer:       /CN=F364A64DAF/serialNumber=C5F1A1459172D492E4860DD1B0E1725A002724F2
Certificate serial:       0820
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xfGhRZFy1JLkhg3RsOFyWgAnJPI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/xfGhRZFy1JLkhg3RsOFyWgAnJPI.mft
Manifest number:          617A
Signing time:             Tue 07 May 2024 00:51:18 +0000
Manifest this update:     Tue 07 May 2024 00:51:18 +0000
Manifest next update:     Thu 09 May 2024 00:51:18 +0000
Files and hashes:         1: xfGhRZFy1JLkhg3RsOFyWgAnJPI.crl (hash: B3Q5ZaqejuTP9+VwP7W5JEFWVY1S9wovrlIeEPY/JYU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/xfGhRZFy1JLkhg3RsOFyWgAnJPI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/xfGhRZFy1JLkhg3RsOFyWgAnJPI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xfGhRZFy1JLkhg3RsOFyWgAnJPI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2080 (0x820)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364A64DAF/serialNumber=C5F1A1459172D492E4860DD1B0E1725A002724F2
        Validity
            Not Before: May  7 00:51:18 2024 GMT
            Not After : May  9 00:51:18 2024 GMT
        Subject: CN=66397b06-9d83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:db:d6:2f:85:a7:fd:06:98:d8:55:07:5c:3f:
                    53:c9:f2:52:2d:c6:b5:56:ac:5e:e0:b9:1b:8e:99:
                    5e:aa:27:0e:14:81:fc:e8:e3:bd:5d:2a:51:7b:9c:
                    36:cd:ea:86:74:10:84:84:b8:e5:3d:72:1d:64:cd:
                    fe:49:7f:e3:bd:ca:b9:40:1b:fb:18:5a:2f:74:58:
                    fb:9c:35:82:44:52:1a:ec:b2:cb:0a:f6:d0:a3:6e:
                    f6:fc:60:31:94:37:20:f8:bd:ed:8c:2e:1c:c2:db:
                    ea:ef:f3:69:67:34:3e:b4:c4:98:7d:95:00:7f:0e:
                    10:a1:fd:5f:4a:12:aa:e5:f1:f1:4f:87:95:73:98:
                    2f:66:34:52:cf:3c:b8:b6:a9:56:15:44:bf:1b:08:
                    d9:fd:0c:60:47:d7:bc:58:e6:28:51:c8:b3:a4:19:
                    67:1e:3a:80:ce:30:36:7c:39:15:87:9e:f1:7e:e0:
                    1c:0a:8c:0f:f0:73:21:d6:18:82:28:5e:9e:d0:81:
                    5c:5e:6a:c0:c2:29:f1:b9:18:53:7e:f4:71:6e:8b:
                    77:45:0e:a9:07:85:ce:d2:6e:7a:fa:aa:ae:3c:a9:
                    ed:59:84:58:df:bb:0b:75:db:6a:cc:59:23:9f:e8:
                    0a:fe:1d:8f:3e:5a:da:14:a2:6a:97:e0:f5:84:6a:
                    8a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:0B:49:92:DA:77:3F:FE:40:34:A9:23:FC:B6:A5:86:66:10:AD:54
            X509v3 Authority Key Identifier:
                keyid:C5:F1:A1:45:91:72:D4:92:E4:86:0D:D1:B0:E1:72:5A:00:27:24:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/xfGhRZFy1JLkhg3RsOFyWgAnJPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xfGhRZFy1JLkhg3RsOFyWgAnJPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A64D/6232C5A6CC9811E8BD93D157F8AEA228/xfGhRZFy1JLkhg3RsOFyWgAnJPI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:65:b2:c7:8a:83:cc:ab:96:36:93:0d:64:76:42:38:af:76:
         ef:5f:4f:4a:e9:e2:5d:27:45:95:16:46:d8:0b:f9:15:42:69:
         6c:7e:7b:a4:7d:63:ad:1e:ad:de:62:42:a5:f6:cd:37:87:9a:
         04:17:39:0d:33:45:92:bd:8a:97:1a:54:98:fa:e8:73:c0:82:
         bd:48:1b:d0:b3:79:d6:15:0c:ba:d1:68:9f:18:de:c9:c6:39:
         40:ea:bc:aa:4d:d6:86:9a:0e:4e:df:3d:16:d9:c0:5b:7e:3c:
         b8:94:5e:5c:7b:d3:7b:42:c2:fa:65:4b:d7:f7:23:b8:53:cc:
         34:73:8f:9f:97:c1:d8:53:54:48:f1:95:c6:3e:b9:3c:59:15:
         ab:f7:ac:67:37:c0:34:cc:af:70:e8:5a:63:69:58:69:c7:4c:
         d7:c6:b9:9c:3f:d0:13:c0:96:b2:b4:eb:88:c8:2f:96:8a:74:
         50:85:37:11:fa:07:e5:fa:a2:81:7b:dd:21:c2:0b:72:10:cc:
         c4:48:5f:31:ee:d7:cf:96:f3:dd:00:fb:9c:a1:f3:58:21:ef:
         7b:88:df:b8:22:2b:95:f4:86:47:70:5e:80:3d:21:c8:34:3c:
         e4:2c:bb:a1:ba:0c:da:91:49:86:ab:23:cb:ff:88:63:95:22:
         d7:98:c3:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:57:29 2024 by rpki-client on console-fra.rpki-client.org