Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
File:                     cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft (raw, json)
Hash identifier:          iXBvNB/HDxtvO4TZACDQ5AOoWPbecRHzXi9tknNXvak=
Subject key identifier:   49:4B:57:52:75:FA:88:14:2A:F8:E4:7F:17:DB:20:8C:27:9A:D3:A8
Authority key identifier: 71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D
Certificate issuer:       /CN=F364E67CAR/serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
Certificate serial:       07AD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
Manifest number:          07AC
Signing time:             Fri 03 May 2024 00:52:31 +0000
Manifest this update:     Fri 03 May 2024 00:52:30 +0000
Manifest next update:     Sun 05 May 2024 00:52:30 +0000
Files and hashes:         1: cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl (hash: ag7oztY3pWqWP7O6rs1tBcjS+a2iNS4IKyvWgCxsmZY=)
                          2: 8506A5F2291811E9A5145C67F8AEA228.roa (hash: e7GGX/SmpzChmh64zBM/POWgME/v0x9TPuUkVYW9+Pg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                          rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1965 (0x7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364E67CAR/serialNumber=712EE46CCF1328087F2E3F286576118C1069B97D
        Validity
            Not Before: May  3 00:52:30 2024 GMT
            Not After : May  5 00:52:30 2024 GMT
        Subject: CN=6634354f-b857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:29:7c:70:c4:42:8e:ae:83:41:fe:be:c3:
                    1e:0f:98:78:a6:4c:fa:95:aa:f6:a1:ab:49:45:8e:
                    7d:3c:d8:91:56:72:db:6e:54:80:51:79:b7:94:d0:
                    05:74:6b:18:82:55:e3:76:44:95:7e:cf:eb:d3:13:
                    69:f0:dd:9e:9d:e4:e8:bc:7c:c2:28:04:03:de:28:
                    54:dd:cf:cd:67:da:6f:87:45:82:85:0d:a2:bd:cb:
                    8b:da:34:6d:f4:3c:dd:7c:dc:cd:dd:7b:a7:fe:bf:
                    d3:03:1e:c2:42:53:f5:33:14:97:b5:7d:86:69:49:
                    88:c3:29:9b:da:15:f8:a4:dc:e0:bf:b7:2c:df:71:
                    a1:ee:99:d9:4c:94:35:b4:a7:19:09:6e:5d:c0:c8:
                    35:ce:7d:77:e7:e5:5f:e4:15:9e:db:e1:85:f5:82:
                    f3:e7:fe:52:cf:a8:ed:e9:9e:0e:01:3d:9d:e1:b9:
                    06:61:15:81:82:9c:a7:1a:df:4c:33:e1:b8:7b:e1:
                    2f:31:19:75:c5:cc:ab:e9:c5:d7:ad:1a:63:d7:26:
                    ae:8a:d2:41:0d:a4:b5:ce:99:46:4d:45:63:b1:db:
                    4a:34:d5:5f:1e:f4:d9:28:91:72:22:89:bf:0c:1c:
                    cc:43:39:dd:ad:b4:e3:c4:8b:f7:ae:08:cf:5f:99:
                    78:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:4B:57:52:75:FA:88:14:2A:F8:E4:7F:17:DB:20:8C:27:9A:D3:A8
            X509v3 Authority Key Identifier:
                keyid:71:2E:E4:6C:CF:13:28:08:7F:2E:3F:28:65:76:11:8C:10:69:B9:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364E67C/8220BE6A291611E994A1E365F8AEA228/cS7kbM8TKAh_Lj8oZXYRjBBpuX0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:27:66:5f:b7:34:f7:cd:0f:54:7a:9b:cf:de:24:b5:78:15:
         61:61:2e:59:75:8f:59:af:64:c2:3d:81:a5:57:bf:e0:9c:48:
         33:c6:f6:a0:59:e3:40:31:ea:5d:df:e6:67:9d:af:62:38:18:
         4a:98:82:e8:cd:8e:dd:b2:e6:23:b6:47:eb:c9:bd:63:4f:6f:
         ec:f8:b2:94:82:63:9e:99:a9:0e:fc:ab:36:3e:dd:61:94:97:
         e4:9d:ea:2d:e9:ce:a0:be:2e:13:63:28:fd:56:1a:54:f7:53:
         b2:30:83:b4:34:ff:22:a2:cd:a4:5e:c5:f8:86:21:02:9c:8c:
         d2:00:26:df:67:33:7b:1f:ee:fc:c1:0b:d3:08:d2:18:09:69:
         8a:c5:08:0b:72:fd:48:43:fd:a4:ed:30:5f:ad:ed:90:f3:a0:
         f2:3d:a5:c7:85:d2:8f:2a:5e:b9:ee:5d:f8:c3:cf:5f:c9:44:
         c4:9a:69:0f:20:69:4b:24:f9:76:c7:43:d6:09:9b:ad:4e:ae:
         13:8d:8a:f1:ed:40:39:6b:4d:64:59:0a:2f:0f:3f:d9:65:28:
         6d:ce:91:49:96:df:50:09:39:d6:35:f3:08:6f:8d:42:57:e3:
         3f:55:c2:43:6f:a4:b8:47:32:25:f9:bb:ae:02:87:54:43:61:
         fe:e2:ae:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:29:40 2024 by rpki-client on console-fra.rpki-client.org