Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
File:                     UJroMu1ribFqno9wWdMQAuvfVRY.mft (raw, json)
Hash identifier:          VcTc1ESbVXNS1H4u0ihvNLP7W+bcca5KGYhZR5v5ePY=
Subject key identifier:   F1:34:72:26:1A:50:7C:57:21:8D:C9:0C:03:8C:EE:30:65:C7:48:BB
Authority key identifier: 50:9A:E8:32:ED:6B:89:B1:6A:9E:8F:70:59:D3:10:02:EB:DF:55:16
Certificate issuer:       /CN=F3652893AF/serialNumber=509AE832ED6B89B16A9E8F7059D31002EBDF5516
Certificate serial:       50
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
Manifest number:          4B
Signing time:             Wed 23 Oct 2024 02:57:52 +0000
Manifest this update:     Wed 23 Oct 2024 02:57:51 +0000
Manifest next update:     Fri 25 Oct 2024 02:57:51 +0000
Files and hashes:         1: UJroMu1ribFqno9wWdMQAuvfVRY.crl (hash: eVhdks+vIVF1NJXhxD4NzMxsZQtP9u4kT8fPI3jDg1s=)
                          2: 25947A965EEF11EFA8CE8E84762E951A.roa (hash: w3FPrtTUNywICvBHUNi6Z9IDVeEht1kgjHG+aqy64j8=)
                          3: 0B46727E5EF011EF8D699F89762E951A.roa (hash: nreAgp5N7RBReJoLfOebgUnXd2HE0IWmlaF+azLEc+E=)
                          4: D1B2AC1C5EEF11EF93C62C89762E951A.roa (hash: vRmvo/WQ/7K1j/7ZFTOcVY6BLEhOIM6uf+eDFKl2Nlc=)
                          5: D2BD519A6F5F11EFB5A556BC762E951A.roa (hash: eDObOCF32CjsmNceS5K7zEOzteA210reg1RT/KbBTaY=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652893AF/serialNumber=509AE832ED6B89B16A9E8F7059D31002EBDF5516
        Validity
            Not Before: Oct 23 02:57:51 2024 GMT
            Not After : Oct 25 02:57:51 2024 GMT
        Subject: CN=67186630-c56a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b8:15:e2:1a:2b:76:11:da:43:88:a7:cb:5a:
                    8e:fb:58:dc:6b:ab:6a:c4:96:38:e4:ca:20:be:a3:
                    52:68:ae:ad:ac:1c:7a:e5:69:60:08:d2:99:4a:91:
                    3e:e4:cd:c7:ca:78:89:96:c5:46:c5:63:ca:0b:00:
                    43:9f:81:3c:9c:81:6e:7a:cf:2b:1a:c7:b7:ba:f8:
                    31:af:4a:74:5c:46:7d:a7:67:3a:46:ec:f7:ae:fb:
                    a9:98:4e:6d:e1:34:85:e7:11:56:3e:02:08:03:ba:
                    b1:36:46:54:52:f7:28:07:a6:de:19:ae:ac:7b:3c:
                    fa:24:7b:60:42:32:3f:01:ce:03:a1:1c:16:6a:81:
                    85:44:b1:b6:8c:de:28:5c:94:e7:76:fb:3e:75:9e:
                    e0:cc:1a:ce:16:f8:6d:24:76:04:4d:a4:8d:3d:41:
                    2b:c4:0d:56:1a:c9:b2:50:9f:6d:22:e9:99:58:8d:
                    ff:a4:e5:fc:94:27:30:9b:04:fe:17:86:dc:55:59:
                    7e:c0:08:f1:af:df:91:51:bd:92:02:c9:8f:4d:70:
                    9c:1f:fa:1e:ae:96:a4:3b:cc:3e:4e:3f:8c:38:62:
                    f7:16:40:3a:81:58:96:4e:28:9b:f0:09:4e:6c:00:
                    d1:f5:86:04:47:fa:e0:57:1c:b6:48:78:0a:28:02:
                    c6:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:34:72:26:1A:50:7C:57:21:8D:C9:0C:03:8C:EE:30:65:C7:48:BB
            X509v3 Authority Key Identifier:
                keyid:50:9A:E8:32:ED:6B:89:B1:6A:9E:8F:70:59:D3:10:02:EB:DF:55:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:26:eb:14:01:2b:39:d5:ca:bd:b6:dd:98:54:f0:eb:3d:f9:
         f5:05:ad:a1:c2:7a:e9:2a:4d:1d:fd:01:c2:bf:f1:ec:c2:6f:
         4c:03:27:9a:07:d1:e4:2f:d2:05:1e:ed:d7:af:5d:38:76:32:
         de:c5:30:f1:29:6d:12:4a:98:87:ce:b7:0a:dd:80:f1:77:0f:
         36:41:e8:50:da:81:1c:1c:60:55:a1:0e:44:d0:39:ef:03:4c:
         f8:86:7a:c7:a9:be:60:4c:ec:2c:47:6e:d5:83:24:9e:c4:4a:
         27:be:a4:9f:a3:79:67:31:23:be:cd:9f:bb:f5:c5:be:6c:30:
         70:e2:2d:ca:bb:30:45:dc:8b:4d:8f:eb:20:27:00:da:28:22:
         b2:1b:fa:f5:c3:e7:6f:19:3c:0b:45:c3:5b:47:39:c0:eb:24:
         00:59:31:97:c9:3d:a8:c2:93:db:94:92:10:81:5a:9f:aa:72:
         c0:09:50:34:94:b7:4b:9f:45:24:94:62:6f:e4:be:30:56:94:
         28:95:2d:a3:e4:98:20:b3:92:ee:da:f3:eb:d3:77:aa:43:39:
         28:15:a7:c6:32:d5:bc:ee:23:c8:37:01:11:d8:47:da:0f:45:
         44:0a:98:6f:28:4e:c8:0d:d0:8b:15:75:8e:29:6d:7b:27:8f:
         48:a7:b4:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:41:11 2024 by rpki-client on console-ams.rpki-client.org