Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.mft
File:                     v9wvL9xcp90IakuaxSzjvdvFqXc.mft (raw, json)
Hash identifier:          SPIPDcb0bu+JQu7mZAfA7UmsiiJg1Hopp6T5rmd14gM=
Subject key identifier:   2F:9C:31:4D:76:62:EF:61:66:7E:CF:44:C9:2B:0A:05:48:71:F1:1C
Authority key identifier: BF:DC:2F:2F:DC:5C:A7:DD:08:6A:4B:9A:C5:2C:E3:BD:DB:C5:A9:77
Certificate issuer:       /CN=F364AE1CAF/serialNumber=BFDC2F2FDC5CA7DD086A4B9AC52CE3BDDBC5A977
Certificate serial:       0271
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v9wvL9xcp90IakuaxSzjvdvFqXc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.mft
Manifest number:          0269
Signing time:             Fri 22 Nov 2024 02:15:31 +0000
Manifest this update:     Fri 22 Nov 2024 02:15:31 +0000
Manifest next update:     Sun 24 Nov 2024 02:15:31 +0000
Files and hashes:         1: v9wvL9xcp90IakuaxSzjvdvFqXc.crl (hash: ufOdRHo43Db8CDXBA6jSMU2Ri+13V9cwkMrwvzwGU2g=)
                          2: C0EC0090938311EF98A16646762E951A.roa (hash: GzasKaBmXrrJLN1LqVLOfWaseyvdqtkdIgndwB98alM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v9wvL9xcp90IakuaxSzjvdvFqXc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 625 (0x271)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AE1CAF/serialNumber=BFDC2F2FDC5CA7DD086A4B9AC52CE3BDDBC5A977
        Validity
            Not Before: Nov 22 02:15:31 2024 GMT
            Not After : Nov 24 02:15:31 2024 GMT
        Subject: CN=673fe943-cc0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:70:7b:f4:9d:6c:2b:70:a8:df:f1:fb:44:9b:
                    b4:d0:6a:91:65:e4:51:f2:cb:10:f4:02:b4:67:0d:
                    de:f2:7a:12:6c:4e:85:86:c2:1a:9b:81:42:14:3f:
                    8e:a0:b5:e0:ae:bd:19:f5:f5:3a:99:be:55:08:a4:
                    e9:66:4c:3b:d5:64:fa:bd:7d:6e:4a:d8:30:d9:d2:
                    ed:be:69:3e:f7:c8:96:9b:75:11:b0:9b:44:a5:62:
                    18:63:ea:f9:cf:19:ba:60:3a:e5:91:7d:32:94:9f:
                    8c:4d:94:03:6e:21:dc:d3:93:a5:1c:c3:50:e5:30:
                    42:5f:d4:f7:2b:b1:6b:b3:8d:38:ba:09:f0:2c:b6:
                    e9:e7:8b:95:34:b0:11:87:56:9e:6f:b5:10:2e:d2:
                    7f:cb:14:bb:3f:e0:ca:14:be:f7:23:28:56:d3:73:
                    3d:11:9a:ce:1b:6f:f9:fb:25:c4:eb:fc:8f:fd:f0:
                    0a:00:09:2d:4a:b3:ca:a9:59:b3:dd:a5:47:0a:4d:
                    63:bc:69:4d:36:88:f4:15:92:81:28:e3:28:67:27:
                    55:91:f6:f2:a8:23:05:29:91:bf:01:e8:8f:25:de:
                    4f:bc:98:7a:6c:a2:cd:16:e6:e0:c7:06:f3:d5:ed:
                    02:bc:e8:22:8d:ff:ec:63:db:b5:e3:86:1c:ed:ea:
                    f8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9C:31:4D:76:62:EF:61:66:7E:CF:44:C9:2B:0A:05:48:71:F1:1C
            X509v3 Authority Key Identifier:
                keyid:BF:DC:2F:2F:DC:5C:A7:DD:08:6A:4B:9A:C5:2C:E3:BD:DB:C5:A9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v9wvL9xcp90IakuaxSzjvdvFqXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AE1C/23AC93DEE34F11ED9FACB09D2F6D8C1D/v9wvL9xcp90IakuaxSzjvdvFqXc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6f:54:cc:f9:8b:a3:47:e7:41:cb:89:35:a2:2e:6a:5e:3c:
         db:64:fb:86:14:7f:00:60:9f:98:cb:db:89:9a:f5:69:6b:a9:
         b4:ce:07:4b:d8:42:65:e0:c5:e2:06:16:89:1a:6f:da:8c:71:
         e0:22:53:79:b9:08:90:1e:e7:e8:49:51:69:a3:fc:ea:43:7b:
         6f:52:e1:b9:ef:58:44:92:cb:f4:56:45:ab:f1:14:02:f0:ab:
         2f:cc:58:4a:f4:3b:16:68:28:48:f1:af:df:fa:61:56:40:c3:
         d4:a0:c9:53:b0:05:6c:b8:a8:32:f5:e7:99:e1:95:5d:1e:b4:
         e4:91:32:0c:3d:3c:1b:7f:ca:60:4a:c9:2f:4e:a5:be:f5:29:
         e2:cb:13:6a:45:59:99:ba:e9:63:28:dc:6f:24:e3:7c:b1:29:
         37:54:83:f5:cb:de:35:23:92:9d:10:4b:a1:eb:14:89:9d:94:
         2c:ba:8e:a9:cb:36:83:ac:d2:22:63:0c:0f:6a:cd:95:df:9f:
         8e:17:9e:59:e4:77:76:f1:4d:04:69:01:51:a6:33:77:67:1b:
         2b:93:a5:11:5a:7d:43:9d:82:08:66:79:0e:f3:41:e5:0e:8f:
         ca:44:38:3b:25:88:46:7a:c3:e2:6e:ba:84:3c:13:fa:44:d8:
         b4:b8:29:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----