Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
File:                     RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft (raw, json)
Hash identifier:          pzVp3CNWTFqK3BcasPB8uUzXBoeAzkYbbI9HxFH8wWE=
Subject key identifier:   58:78:5B:EC:D2:8A:6A:C5:82:B4:5E:D8:40:C8:E2:A4:0E:DC:05:94
Authority key identifier: 46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC
Certificate issuer:       /CN=F364AFECAF/serialNumber=46466D356ACB19519D64CD829BED403D042004EC
Certificate serial:       16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
Manifest number:          16
Signing time:             Wed 23 Oct 2024 03:06:18 +0000
Manifest this update:     Wed 23 Oct 2024 03:06:17 +0000
Manifest next update:     Fri 25 Oct 2024 03:06:17 +0000
Files and hashes:         1: RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl (hash: x+YttYDNUUKMTxBMNb5g1By0vbCLPd7lqPQybjzvOr4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364AFECAF/serialNumber=46466D356ACB19519D64CD829BED403D042004EC
        Validity
            Not Before: Oct 23 03:06:17 2024 GMT
            Not After : Oct 25 03:06:17 2024 GMT
        Subject: CN=67186829-20ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d8:69:df:dd:92:c7:9b:6d:e6:44:5e:cf:98:
                    9d:ac:00:21:15:9e:74:c3:20:07:4a:aa:53:49:1c:
                    d4:ef:fe:6a:e2:6f:a5:1e:4d:e7:67:4d:84:f2:6b:
                    e0:96:57:03:98:8d:5c:c4:86:19:d2:54:e5:5e:aa:
                    5d:72:f0:17:f2:6d:79:f4:50:5d:ca:5b:77:8e:c1:
                    da:8a:18:ef:f9:de:be:04:a1:ac:4c:51:81:63:5c:
                    f0:04:03:9e:fc:0f:a3:50:86:9c:40:d3:f2:e9:19:
                    4e:75:29:d0:9d:aa:ca:fb:70:9e:32:51:87:0d:83:
                    fb:0a:d6:7f:ef:6a:6a:2a:67:90:3a:7f:80:c4:4d:
                    14:3f:0e:13:7d:e1:35:0b:34:87:86:01:c8:62:3d:
                    98:cb:29:88:74:ce:7e:e8:a7:56:a6:02:5c:6b:be:
                    50:06:02:a8:16:10:7f:a3:c0:c1:31:b6:5d:a5:22:
                    42:5c:d3:1d:f7:41:56:1b:99:14:5a:c5:5b:48:21:
                    fd:29:86:39:c4:f3:53:c8:86:22:c9:de:c0:7e:a1:
                    9b:bc:b5:10:23:e1:e4:16:d5:55:55:e6:a2:81:e6:
                    ae:2f:42:e8:8a:19:71:a0:f5:e9:3c:c3:83:a2:16:
                    d1:cf:d4:3b:35:ef:9e:05:2c:cb:02:ce:06:bb:bf:
                    90:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:78:5B:EC:D2:8A:6A:C5:82:B4:5E:D8:40:C8:E2:A4:0E:DC:05:94
            X509v3 Authority Key Identifier:
                keyid:46:46:6D:35:6A:CB:19:51:9D:64:CD:82:9B:ED:40:3D:04:20:04:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RkZtNWrLGVGdZM2Cm-1APQQgBOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364AFEC/C1CCFE3680F711EFACC908AA762E951A/RkZtNWrLGVGdZM2Cm-1APQQgBOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:9d:9c:e3:23:31:74:33:83:e9:ae:db:cb:f7:c1:94:29:33:
         51:50:07:6a:cf:d6:6b:a9:6d:b4:fd:00:65:bb:76:83:e8:63:
         f3:25:53:e4:a0:0b:82:49:49:b4:87:1e:b1:36:5a:b1:32:99:
         e5:28:1e:36:0b:10:2a:26:4b:6f:0a:c1:d0:b0:a0:2a:8a:4d:
         0c:89:67:4c:ad:87:9b:35:d7:5f:85:a1:20:98:ae:ea:5f:39:
         40:d4:a3:87:a1:93:f0:2d:ef:ad:c1:66:59:d6:1a:db:60:7e:
         eb:bf:3f:9c:68:8d:5c:41:49:81:af:22:7c:4f:c5:60:a7:fe:
         22:b8:b4:b6:fd:7a:fc:15:f5:9d:5d:56:2a:8d:fa:8a:3a:0f:
         7c:8e:f6:f9:0d:02:aa:8f:0a:c0:a7:1d:c4:2d:b3:fb:5b:d1:
         1c:66:e2:eb:55:fd:be:19:77:4f:44:8e:50:5d:48:8b:b9:bf:
         0e:c0:5b:54:97:e3:c4:74:f9:e3:40:2c:2e:3c:90:6e:99:03:
         ba:52:12:0a:e7:24:b7:97:7e:28:04:36:99:39:f2:01:4d:66:
         3f:82:88:63:71:ca:93:3d:db:14:db:a0:3f:44:3c:01:c5:c4:
         5a:c0:c1:9f:39:98:6f:d8:a1:34:57:bd:09:34:bd:33:0f:ef:
         bc:1f:b5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:00:55 2024 by rpki-client on console-fra.rpki-client.org