Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
File:                     wMDnGZy4QKJJjB47pWdvngwGKGg.mft (raw, json)
Hash identifier:          6+6SQ2WkNXqpPSBeBDS2cGb5SfIpdbydQGnSj5XIWok=
Subject key identifier:   0C:84:D0:CD:75:C9:10:1A:3C:4F:DD:4E:13:C7:C7:DF:E6:3F:DD:7E
Authority key identifier: C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68
Certificate issuer:       /CN=F3650F65AF/serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
Certificate serial:       65
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
Manifest number:          63
Signing time:             Wed 23 Oct 2024 02:54:39 +0000
Manifest this update:     Wed 23 Oct 2024 02:54:38 +0000
Manifest next update:     Fri 25 Oct 2024 02:54:38 +0000
Files and hashes:         1: wMDnGZy4QKJJjB47pWdvngwGKGg.crl (hash: +TyUqEIAH9xDSrEDK9kMl6gLQ0IdlQ6n/blR2xT5IBk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650F65AF/serialNumber=C0C0E7199CB840A2498C1E3BA5676F9E0C062868
        Validity
            Not Before: Oct 23 02:54:38 2024 GMT
            Not After : Oct 25 02:54:38 2024 GMT
        Subject: CN=6718656f-35ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:85:a4:66:32:b9:c4:c0:a7:d2:2a:72:77:51:
                    57:55:97:da:e9:60:34:08:07:80:a0:7d:03:9e:03:
                    01:f4:a3:95:91:8b:d4:c0:f0:01:17:b2:cd:8b:0b:
                    1d:5d:84:37:e4:5d:68:e5:f7:c2:33:81:25:15:01:
                    57:ac:c2:59:6d:8d:ee:31:2c:20:e9:10:76:ed:03:
                    db:5b:df:da:52:df:87:1f:7a:4e:89:7f:79:76:e8:
                    15:fc:88:a6:44:e0:66:8e:40:54:bd:ea:75:a3:56:
                    70:e0:09:22:d8:67:ab:49:af:49:41:4e:05:9a:5b:
                    06:0f:70:82:93:62:c2:a3:4b:59:3b:e2:90:52:55:
                    bb:13:b3:0b:a1:68:3c:80:d1:93:8b:d2:b1:14:f4:
                    a6:68:de:e3:e7:7d:cf:27:e2:22:6d:1f:40:8a:f9:
                    8b:0a:9d:20:d2:bf:55:0c:9f:3f:1d:9c:04:cc:61:
                    7c:63:54:c4:ae:c9:36:9d:5e:a9:0d:81:97:cc:a8:
                    2a:f1:8d:98:35:e1:61:08:ab:eb:62:06:dd:a3:62:
                    1b:5f:31:e6:36:55:c7:bf:77:92:88:f1:a4:66:24:
                    07:cc:72:8f:69:5c:10:fc:f5:4c:1c:39:2a:e1:35:
                    3b:9e:c8:d8:68:31:73:fc:23:52:98:4a:34:e6:e8:
                    39:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:84:D0:CD:75:C9:10:1A:3C:4F:DD:4E:13:C7:C7:DF:E6:3F:DD:7E
            X509v3 Authority Key Identifier:
                keyid:C0:C0:E7:19:9C:B8:40:A2:49:8C:1E:3B:A5:67:6F:9E:0C:06:28:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wMDnGZy4QKJJjB47pWdvngwGKGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650F65/F43C863A498311EFA2F45FB4762E951A/wMDnGZy4QKJJjB47pWdvngwGKGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:a8:c6:d7:fe:c2:66:ec:ed:eb:af:8c:ec:a6:c4:39:4a:d0:
         ec:2e:90:ce:2d:19:df:24:d2:90:c8:45:cf:44:d2:51:94:6e:
         53:1a:9b:19:58:c4:ab:6e:80:79:28:82:0b:ee:c1:24:fe:d3:
         fb:71:69:38:fe:15:45:da:a7:35:ee:7d:11:4f:8e:c8:d2:0b:
         c9:fd:a1:6a:bc:83:8d:d9:51:0b:81:1f:67:63:e7:a3:c6:a7:
         ff:d1:3a:1e:22:df:d4:04:57:2b:95:91:a8:5d:a5:fd:54:c6:
         58:b6:c0:53:dc:ed:7e:a1:dc:b5:69:01:f5:ea:40:b3:37:60:
         8c:5e:ad:7f:cf:7b:3d:cd:eb:45:5b:9d:97:82:b4:31:d4:5c:
         d5:f6:c1:a7:cf:52:07:1a:e7:db:00:5c:ea:fa:ba:9d:d8:c7:
         bf:e2:95:44:a7:ca:9e:51:ba:57:6f:b0:cb:ce:7c:c7:34:8f:
         6b:3f:33:13:f1:be:b0:be:4e:5e:19:e5:ea:76:9b:ff:7d:94:
         ee:4a:a5:21:9e:6a:e4:78:07:5b:cc:c2:e4:98:e5:b3:5b:83:
         ce:8d:ae:21:f5:96:a8:d0:e7:74:8b:b3:a6:3e:e9:c2:1b:3a:
         51:ed:90:f8:07:40:c4:9c:98:c1:7e:b0:bc:47:3f:bb:82:d8:
         cf:43:16:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:41:11 2024 by rpki-client on console-ams.rpki-client.org