Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
File:                     7XZlKQ0TEj69LBHPCH2D_1DLck8.mft (raw, json)
Hash identifier:          y9vKOCHp423VMfZueiOT1ML8XDKRAeS2E2Jc/vDJCeA=
Subject key identifier:   D7:8B:A7:3A:F9:B1:42:58:5D:3F:F4:A0:C5:3C:CA:AF:5B:47:E1:91
Authority key identifier: ED:76:65:29:0D:13:12:3E:BD:2C:11:CF:08:7D:83:FF:50:CB:72:4F
Certificate issuer:       /CN=F364C329AF/serialNumber=ED7665290D13123EBD2C11CF087D83FF50CB724F
Certificate serial:       0171
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
Manifest number:          016E
Signing time:             Sun 19 May 2024 02:12:11 +0000
Manifest this update:     Sun 19 May 2024 02:12:10 +0000
Manifest next update:     Tue 21 May 2024 02:12:10 +0000
Files and hashes:         1: 7XZlKQ0TEj69LBHPCH2D_1DLck8.crl (hash: 8l/VCjeng7RZQ2G7bajxn9tJFrIlNInHWxq4WMwWmBI=)
                          2: 4B8EEDB40A2F11EEA86653594AD9E6FC.roa (hash: XtlDMiWVbKF1PyU7Dxovz8F8BLVHU9h4HjWuTp4MLtA=)
                          3: D7EB6984752A11EEB254CC514AD9E6FC.roa (hash: e8Yg1q8uhr1rstOhjFp5SdC4n2JFQo6GzBoRmLQV7es=)
                          4: 8E2AFAC4048E11EEA671536C4AD9E6FC.roa (hash: 6Jqn2aGmjDcmImvw5mjB/z8k1HYXJolq+lf84m8vfCY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364C329AF/serialNumber=ED7665290D13123EBD2C11CF087D83FF50CB724F
        Validity
            Not Before: May 19 02:12:10 2024 GMT
            Not After : May 21 02:12:10 2024 GMT
        Subject: CN=66495ffb-4ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d5:c1:b5:56:9a:8b:f8:13:e9:55:44:fb:db:
                    d9:b4:53:d2:24:85:14:fb:94:7d:0b:ad:d2:fd:20:
                    2c:05:22:75:50:65:93:f5:d1:e1:5d:ef:0d:f1:b2:
                    9e:c0:4f:37:c3:a3:b9:1d:ac:db:58:da:c7:a8:17:
                    0e:dd:b4:ba:c6:b1:2d:da:31:4c:3f:54:86:85:29:
                    74:70:b5:9b:aa:ff:9b:24:81:39:b6:1d:de:c7:40:
                    47:f8:c8:8d:6c:d3:18:b8:31:81:b9:14:60:bd:ac:
                    ed:e3:b6:fb:08:19:9c:fb:a8:8b:e4:fb:2c:4c:cb:
                    42:a4:e1:1b:88:91:fa:69:1e:b4:4f:6b:6e:d6:82:
                    19:0d:c5:0f:38:23:f3:5d:fb:99:2c:3b:84:66:81:
                    3f:ba:6e:93:64:4e:e2:ec:10:73:23:bf:c5:14:f5:
                    aa:fd:07:ec:70:9c:ff:ef:85:3e:85:67:ed:86:9d:
                    41:37:0a:c3:7d:5a:e2:f1:75:4a:5c:5f:32:ab:64:
                    73:9a:5f:01:53:17:5f:c6:1e:fb:8a:79:15:d4:45:
                    b4:12:e1:32:04:f2:07:fe:b4:7c:4e:5a:8e:29:eb:
                    40:9b:d2:69:90:5d:3b:b3:af:22:4e:47:58:ad:1f:
                    b4:cb:a9:ae:dd:29:f2:18:0c:9d:61:ba:6f:6a:37:
                    20:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8B:A7:3A:F9:B1:42:58:5D:3F:F4:A0:C5:3C:CA:AF:5B:47:E1:91
            X509v3 Authority Key Identifier:
                keyid:ED:76:65:29:0D:13:12:3E:BD:2C:11:CF:08:7D:83:FF:50:CB:72:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7XZlKQ0TEj69LBHPCH2D_1DLck8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364C329/E383A4E0048D11EEA39B4C6A4AD9E6FC/7XZlKQ0TEj69LBHPCH2D_1DLck8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:f4:bc:fb:a6:7b:21:72:c9:bd:22:1c:23:cb:93:ae:41:63:
         a8:cd:02:81:83:d3:db:a3:db:25:68:25:f6:96:03:60:55:6c:
         72:06:93:15:d2:25:96:95:91:88:35:02:a1:d9:60:05:06:4f:
         e8:7b:45:f4:2e:52:6e:ab:42:c7:5a:72:22:43:f5:f3:d3:84:
         8b:5d:27:a5:9d:09:9d:56:34:64:c5:57:db:b6:e5:83:ac:50:
         d5:bd:a8:e7:96:94:51:54:a1:f9:1e:2b:88:c6:79:86:48:ae:
         d6:27:dd:b6:3f:cb:d9:bb:42:01:29:3b:fd:6b:a3:6e:94:a1:
         cd:43:de:c8:00:83:47:03:cd:76:fd:5a:33:9a:e1:81:62:a1:
         ca:6f:16:4f:66:5b:82:75:9b:af:43:a0:60:e9:4b:20:1c:2c:
         d2:72:5a:56:30:4a:c9:80:47:a3:3d:0d:e2:ed:b5:34:f9:2d:
         8f:f4:7b:5d:dc:40:0e:c3:3c:2b:db:30:59:1b:5b:21:18:ce:
         e7:47:c5:4e:ed:04:3b:a0:4a:7f:60:75:59:13:af:9f:93:b4:
         81:0d:2c:71:77:b7:f0:bd:d6:aa:13:6c:8d:44:b0:71:95:45:
         55:b7:10:d2:fc:b7:e4:fb:cf:39:ef:f3:d7:4f:15:fb:34:66:
         a4:0b:35:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 02:58:53 2024 by rpki-client on console-ams.rpki-client.org