Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
File:                     h4TuSgLa-JcmVvEkUr8npJEcNik.mft (raw, json)
Hash identifier:          YVN2TzxAxLsfYXHiNg+nqH52YKUNjEA6cBTHD0da/xw=
Subject key identifier:   33:24:8C:DD:8D:C0:DC:7B:50:F9:96:AF:9A:90:A2:5E:65:FD:29:30
Authority key identifier: 87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29
Certificate issuer:       /CN=F3651E73AF/serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
Certificate serial:       0C07
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
Manifest number:          0C04
Signing time:             Fri 22 Nov 2024 00:48:37 +0000
Manifest this update:     Fri 22 Nov 2024 00:48:37 +0000
Manifest next update:     Sun 24 Nov 2024 00:48:37 +0000
Files and hashes:         1: h4TuSgLa-JcmVvEkUr8npJEcNik.crl (hash: GFuqOAiobL7FN12NASsYF9rLnBpQ0GpEqj6xGqT8sQU=)
                          2: F9EF37C6A9A011EAB3F8E035F8AEA228.roa (hash: hv8nqq5P9PSxsiqqebiaxojUmKUtWuVUeKogAVthKqk=)
                          3: 322E59C89B8511ECA6E8B6A05A40D577.roa (hash: BnWYJ3FTlStYEMUn5ujbi/xmcBESttAp1iVk0y8JFFk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3079 (0xc07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651E73AF/serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
        Validity
            Not Before: Nov 22 00:48:37 2024 GMT
            Not After : Nov 24 00:48:37 2024 GMT
        Subject: CN=673fd4e5-2139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8c:2b:a8:33:a4:cf:2e:d4:bc:fc:62:3d:2a:
                    c8:b9:c4:48:3b:b1:88:6c:fb:fd:75:cc:d8:dd:7e:
                    bc:a6:df:72:e4:ac:33:4d:23:ba:5d:1f:c1:42:ce:
                    60:4c:ed:c1:ff:59:56:11:10:d4:20:34:68:5c:95:
                    68:f6:64:4e:c0:48:48:57:30:17:e6:1c:d6:1d:bc:
                    fc:bd:b6:88:10:60:fc:35:61:36:f5:ba:30:35:dd:
                    c0:e8:cc:e6:8b:fe:f1:52:35:a6:13:ad:2b:f1:f8:
                    c3:ae:9b:76:36:3c:53:60:19:98:2c:cc:2a:05:bb:
                    72:2d:b9:a2:a4:00:4e:0a:28:35:82:b0:e3:14:e2:
                    0b:d2:18:d0:7b:4a:cd:08:a2:60:f7:a8:d8:ba:34:
                    f8:54:23:b1:6e:44:18:32:b7:b2:8e:56:03:e3:aa:
                    01:70:4e:7b:ee:32:31:c9:76:fd:9b:ca:41:1b:15:
                    fb:ae:4b:55:2a:73:36:9a:2b:0d:45:b0:06:8e:19:
                    1b:cd:77:cd:34:7f:a0:d9:e4:42:8e:3a:8b:17:e2:
                    0b:ce:85:97:7a:de:92:a6:5e:1e:d0:f8:8e:eb:d2:
                    de:1c:78:8f:db:28:89:c4:48:ce:34:99:66:6d:48:
                    67:f5:54:16:cb:c9:bc:9d:fc:90:34:5a:34:c5:34:
                    12:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:24:8C:DD:8D:C0:DC:7B:50:F9:96:AF:9A:90:A2:5E:65:FD:29:30
            X509v3 Authority Key Identifier:
                keyid:87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:43:82:c7:5f:53:ed:50:bf:61:d9:a9:47:57:a1:f4:a4:92:
         91:31:8a:e4:0a:79:4d:b5:72:29:fd:f0:55:46:25:b1:d3:9d:
         f5:c8:ff:b6:f0:cc:75:6f:94:f3:5f:c4:dc:2d:cc:cb:a8:e6:
         95:31:c0:b3:32:9a:d4:7d:43:83:bb:ae:34:66:6c:b7:ff:9a:
         67:ea:ff:35:b8:45:f8:50:84:81:d8:b0:69:de:a5:90:15:9a:
         2c:93:76:68:3c:de:9a:d2:e7:48:c7:b1:df:cc:61:04:c9:76:
         ef:8e:c6:39:f1:5e:0d:75:27:a2:3b:a8:60:e4:f4:2a:85:20:
         24:c8:1d:be:32:3d:c9:09:17:2d:62:e7:98:2a:32:a8:c0:55:
         c1:41:b8:f2:50:b3:c8:54:1f:6d:cc:87:d3:49:83:21:13:16:
         8c:f5:ef:de:86:c0:a7:8d:25:c6:63:ef:7b:dd:d7:76:78:e1:
         3c:b1:27:fd:23:54:8b:f9:31:f6:c7:a8:c4:ab:4a:eb:34:e4:
         38:b6:f5:d5:0a:3a:74:0c:c0:cc:98:d9:ba:4c:1a:9c:c5:03:
         78:58:db:a1:18:47:9e:b0:d0:9d:a7:b7:50:5f:f8:c5:2e:f2:
         dc:3d:c8:69:c0:52:78:6b:62:00:a5:86:b5:cf:dd:38:d9:87:
         05:1b:01:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:53 2024 by rpki-client on console-fra.rpki-client.org