Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
File:                     -wkj-GnVLjM4ArnFPXizuoZUMMw.mft (raw, json)
Hash identifier:          9/7MkHTYhBNKUzYer9cQ0yqa7LwKMJlRjabt+kH71oQ=
Subject key identifier:   77:05:A2:92:4E:32:BE:92:33:7C:C2:C4:46:5B:53:12:F8:1F:B3:9F
Authority key identifier: FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC
Certificate issuer:       /CN=F364B494AF/serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
Certificate serial:       027B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
Manifest number:          0279
Signing time:             Wed 08 May 2024 01:57:05 +0000
Manifest this update:     Wed 08 May 2024 01:57:04 +0000
Manifest next update:     Fri 10 May 2024 01:57:04 +0000
Files and hashes:         1: -wkj-GnVLjM4ArnFPXizuoZUMMw.crl (hash: gu/QCR7iIwqyWSoDrSbFDNEITZ97NSdGV+fYNrh2ftg=)
                          2: 83ACCE309C0411EDB12456CEF1222468.roa (hash: TIYICNTcucn9WwS8nowmdJ5oP58ro1vC+nknb7WxgMg=)
                          3: 7E6D0BDA329411ED83690DA6F1222468.roa (hash: 9vBXav7hVf2XlLbTRQ+k6U2z6DcdpesgBwg/u89dKXo=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 10 May 2024 00:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 635 (0x27b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364B494AF/serialNumber=FB0923F869D52E333802B9C53D78B3BA865430CC
        Validity
            Not Before: May  8 01:57:04 2024 GMT
            Not After : May 10 01:57:04 2024 GMT
        Subject: CN=663adbf1-cad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8b:b7:0d:2f:ec:98:21:11:5a:7d:cd:1f:79:
                    87:f3:02:70:16:16:24:d1:a3:39:73:f0:10:ac:0c:
                    8a:a4:03:96:5e:c4:77:68:e7:5e:aa:22:a7:31:fb:
                    e8:7e:98:a1:f7:e7:e4:c3:e1:ea:cb:81:a1:6e:6a:
                    23:d4:62:1f:25:f1:8a:d3:76:b7:ab:3c:3c:ef:30:
                    09:fa:c4:af:c6:63:39:a9:d0:38:35:7b:9c:97:8f:
                    4e:d5:42:41:55:fe:86:03:6e:24:61:17:23:80:85:
                    bd:79:c6:61:06:59:34:7d:d5:9e:a1:66:14:eb:36:
                    1b:bf:f5:49:fb:d6:74:e9:51:06:29:27:12:fd:76:
                    dd:0a:db:1c:26:f8:db:a2:93:5e:3f:39:d8:5a:4d:
                    f7:e8:20:b2:8c:bd:ca:43:53:e5:93:ed:df:7b:0a:
                    4e:cc:cf:b2:e0:1b:92:4c:8f:37:3f:36:a0:af:88:
                    39:dc:57:18:b9:59:fd:03:62:d0:af:48:fc:7d:f1:
                    e7:30:54:c5:15:fb:d8:84:eb:77:bb:af:c2:9b:67:
                    6c:25:ea:2d:93:99:56:18:50:95:73:38:9b:0e:3d:
                    a5:bf:0d:93:33:ad:47:70:a9:6d:cf:10:65:76:d6:
                    f1:df:8a:b7:cf:40:f1:e8:b5:b2:bd:54:0d:23:73:
                    27:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:05:A2:92:4E:32:BE:92:33:7C:C2:C4:46:5B:53:12:F8:1F:B3:9F
            X509v3 Authority Key Identifier:
                keyid:FB:09:23:F8:69:D5:2E:33:38:02:B9:C5:3D:78:B3:BA:86:54:30:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-wkj-GnVLjM4ArnFPXizuoZUMMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364B494/38F78A12329411ED96CD57A5F1222468/-wkj-GnVLjM4ArnFPXizuoZUMMw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:54:02:a8:01:c0:43:1c:b3:2c:ea:01:7b:fe:f0:a2:2a:23:
         a7:15:cb:93:88:f6:69:89:8b:6c:b3:ad:73:4e:3a:28:9a:80:
         ed:70:b1:20:76:4a:a6:3d:a4:54:4b:0a:e4:5c:5c:35:cb:3e:
         5f:de:c3:5a:ff:17:26:98:0c:50:0a:3b:80:13:74:07:e6:49:
         c9:64:3e:2f:f0:86:3a:c5:40:20:cb:c8:8e:b6:3f:d8:c8:c1:
         6d:2a:79:01:0b:5c:aa:c7:97:ae:cd:95:9e:8c:49:6c:7a:46:
         49:da:d5:48:51:8b:96:30:c3:4d:e4:c3:e7:60:8b:cf:8b:35:
         71:5a:82:d3:cf:8b:d6:d6:79:68:53:e0:05:79:d4:45:dc:8a:
         59:95:ce:d3:7b:a1:59:cc:08:fd:e9:e5:5f:a7:6b:3a:0d:76:
         a6:c0:f1:37:41:e6:2d:b4:02:d5:c5:ec:5d:5a:7c:96:3f:25:
         f0:bd:d2:99:f9:cf:3a:33:43:85:55:f8:a3:6c:f4:30:10:58:
         53:d4:c4:86:39:c0:a2:c5:99:75:18:da:e9:71:a0:c2:06:d1:
         37:6b:85:16:21:d0:d8:07:25:a8:f1:09:18:a1:d5:f6:9b:1f:
         e4:c4:27:43:89:ca:fb:f3:8b:c1:ed:43:be:48:48:4d:a9:13:
         c8:71:e2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 04:39:25 2024 by rpki-client on console-fra.rpki-client.org