Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
File:                     nLoUINchzAMCPFAG0iUcILr0yII.mft (raw, json)
Hash identifier:          nIkrVIdPokZJzpynOYmROUGtYixGJwLvw3gGLYXBui0=
Subject key identifier:   1C:54:39:29:7A:74:89:7A:93:2E:4B:FB:DA:56:89:DE:1A:E5:D3:DA
Authority key identifier: 9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82
Certificate issuer:       /CN=F3651E73AR/serialNumber=9CBA1420D721CC03023C5006D2251C20BAF4C882
Certificate serial:       0B3A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
Manifest number:          0B35
Signing time:             Thu 02 May 2024 00:43:54 +0000
Manifest this update:     Thu 02 May 2024 00:43:54 +0000
Manifest next update:     Sat 04 May 2024 00:43:54 +0000
Files and hashes:         1: nLoUINchzAMCPFAG0iUcILr0yII.crl (hash: s6U+vxPTFTLj5M/ofZqKIdxM1aicCicNLmNxnlZlHeA=)
                          2: 35AAF9269B8511EC9C57BEA05A40D577.roa (hash: IkRiEA4+pjihvXLHrg2ngxaBC/GnITy6qHEusBSCBlo=)
                          3: FE7EF4DEA9A011EA8E58EF35F8AEA228.roa (hash: N7Iw9MeumlpaJ1CJWOcoOBYQ72/5ZVnOPL/BKPNdyjA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
                          rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2874 (0xb3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651E73AR/serialNumber=9CBA1420D721CC03023C5006D2251C20BAF4C882
        Validity
            Not Before: May  2 00:43:54 2024 GMT
            Not After : May  4 00:43:54 2024 GMT
        Subject: CN=6632e1ca-bf84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e5:7e:18:15:9b:7d:64:4c:d8:3a:ba:e7:a3:
                    bd:5d:88:22:24:46:e7:ee:2f:b3:dd:29:1d:53:d5:
                    c5:9b:b1:b1:ef:7a:f1:90:37:02:fc:7f:06:db:2f:
                    8e:9a:d8:c3:23:35:eb:21:b9:43:78:da:2c:86:ca:
                    d9:78:5d:ea:6d:5c:67:55:b3:17:f1:be:45:20:be:
                    bd:50:2c:d3:3a:d5:63:d4:e0:64:10:bf:f3:12:eb:
                    42:dc:4e:aa:94:79:e0:78:8d:7b:a8:b5:b8:a9:98:
                    ca:e9:0f:79:43:68:d2:1f:fa:60:76:0f:03:df:1f:
                    0a:46:d0:7a:31:eb:6f:43:98:32:a1:16:7e:12:4e:
                    bb:8e:15:30:ed:b2:4f:b2:da:44:07:2b:5c:e9:91:
                    da:6b:00:b1:4a:fb:84:f8:b8:ab:df:0a:eb:3c:4d:
                    fa:1e:39:2d:47:1c:fa:73:19:f9:9e:3b:ef:23:d4:
                    de:4f:f2:41:99:c6:e9:79:9d:1c:52:4c:12:df:9a:
                    73:0a:3d:d7:e6:8b:d6:3f:8a:d5:7a:57:64:7a:84:
                    ea:f6:58:17:dc:f1:b8:50:aa:be:4b:84:67:7c:d1:
                    60:7d:07:de:bd:fc:95:f1:25:19:d9:3f:3b:b4:e3:
                    58:da:81:dc:e8:2c:18:57:37:01:12:57:ec:22:18:
                    c5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:54:39:29:7A:74:89:7A:93:2E:4B:FB:DA:56:89:DE:1A:E5:D3:DA
            X509v3 Authority Key Identifier:
                keyid:9C:BA:14:20:D7:21:CC:03:02:3C:50:06:D2:25:1C:20:BA:F4:C8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/nLoUINchzAMCPFAG0iUcILr0yII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/4D3CFA1A78C411E6BB9D4831F8AEA228/nLoUINchzAMCPFAG0iUcILr0yII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:8b:ea:e2:24:4e:bc:39:19:57:9a:1d:a2:1e:0c:92:4b:f7:
         cb:af:07:a0:aa:bf:90:e3:89:6b:18:e0:a6:5e:37:6d:5c:43:
         b3:68:47:88:c7:a0:dd:17:36:6d:e5:d8:0f:52:46:fc:20:dd:
         da:c2:6d:02:26:b6:4d:3f:be:a0:28:bb:c7:d0:b8:cb:30:30:
         f0:84:b4:62:6b:4b:24:26:b4:14:23:99:bb:86:c0:5a:5d:7e:
         85:9a:20:22:5b:dc:f6:07:fa:f2:30:98:58:4b:d2:b5:bc:52:
         74:78:94:f0:54:58:28:cb:28:63:38:ce:0a:0f:92:0d:46:b5:
         9a:52:8b:bd:97:12:57:8d:a9:df:ae:15:dc:7a:76:b4:b5:24:
         f6:76:dd:38:6a:ab:fa:a0:23:12:f8:7d:d8:42:2a:5b:fe:f6:
         ba:6a:15:dd:a6:a0:0a:f0:4d:cc:ea:12:f7:7f:14:38:15:b9:
         82:30:cd:cf:52:fe:97:13:26:6c:e0:d6:18:ac:96:a8:2f:c5:
         e2:2d:ca:f0:ee:31:aa:7e:56:7c:0a:92:0d:1e:55:e7:d6:4c:
         92:2e:65:f3:31:a2:ea:95:ad:5a:9c:d8:ec:89:5a:5c:b0:c1:
         da:09:a3:60:68:20:7c:de:e7:ce:3a:8f:ac:a3:8f:9b:eb:78:
         f7:33:1e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 03:12:13 2024 by rpki-client on console-ams.rpki-client.org