Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
File:                     Pw7qWRltFKMq812hcQ8VDV-d3dg.mft (raw, json)
Hash identifier:          MnqHIwEl8f/zrBcxsQSvYmrcC0YW7tYn+GbLYqllV4s=
Subject key identifier:   85:91:0D:4E:D5:A7:69:AF:EA:CD:8D:CC:F9:27:36:94:41:E5:A5:B6
Authority key identifier: 3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8
Certificate issuer:       /CN=F3652C3AAF/serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
Certificate serial:       016C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
Manifest number:          0168
Signing time:             Thu 21 Nov 2024 02:31:48 +0000
Manifest this update:     Thu 21 Nov 2024 02:31:48 +0000
Manifest next update:     Sat 23 Nov 2024 02:31:48 +0000
Files and hashes:         1: Pw7qWRltFKMq812hcQ8VDV-d3dg.crl (hash: f+Udrjvpr9XlmwTzxmlo7j6Ex+AgbwXtXrJuClHzKg8=)
                          2: D15451B8AEF411EE804D56A3775412E6.roa (hash: YBWjlP8F+YdvA9ozU69TQggPOcEWkXW+zdvhhb0CYsA=)
                          3: 9DB45F1AAEF411EEBD21E1A2775412E6.roa (hash: zk4qjNpUR6ox7pi92CW344nHF3kKf96YYdu89XzhQ3o=)
                          4: B918F940B04E11EEBBD2E697775412E6.roa (hash: ZrUlsRanFtsZhQlEVluoYbwWKfggdoIE9yZOZzdy4S4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652C3AAF/serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
        Validity
            Not Before: Nov 21 02:31:48 2024 GMT
            Not After : Nov 23 02:31:48 2024 GMT
        Subject: CN=673e9b94-a0a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:42:a5:1d:1f:75:79:49:03:ec:50:ca:41:7c:
                    d6:70:3f:ef:fb:bf:0e:4e:b0:0d:ce:97:62:d6:af:
                    88:5b:f8:9d:0e:43:13:82:6f:25:bb:7a:25:bc:11:
                    d7:4c:87:c6:cd:8d:27:06:87:99:9a:00:98:61:5b:
                    ab:86:df:25:f9:8d:fd:8d:67:23:30:06:e2:7a:7d:
                    d6:b1:f1:bb:e1:3e:44:1d:a0:d7:33:62:a2:b4:a5:
                    7c:61:01:5e:e0:8f:76:e8:a4:2b:a6:26:19:af:79:
                    72:40:ad:93:26:d2:a1:74:ed:8b:a4:a6:52:94:32:
                    bc:52:3a:a8:7a:b0:14:de:16:e2:33:81:ca:ac:f1:
                    cc:84:c9:e0:c2:75:70:1e:f7:24:22:ed:94:ac:dc:
                    fe:9a:0a:6a:1a:d2:6e:1e:d9:c3:b6:e8:c6:43:76:
                    b1:f8:1a:cb:32:b8:49:44:25:fb:57:35:33:52:88:
                    39:7b:27:05:f2:c6:eb:9e:ef:27:ea:2e:69:41:7a:
                    24:cd:ec:2f:e2:5a:20:fd:fc:be:9c:04:06:a5:85:
                    f8:1a:00:b8:72:32:46:e3:79:3e:0c:83:5a:1a:83:
                    b4:1d:51:28:c7:3e:50:fb:ab:52:92:43:a7:2e:0f:
                    d6:fa:94:8e:34:7c:f9:9a:06:82:f7:76:c7:88:a9:
                    4f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:91:0D:4E:D5:A7:69:AF:EA:CD:8D:CC:F9:27:36:94:41:E5:A5:B6
            X509v3 Authority Key Identifier:
                keyid:3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:da:10:60:e6:6e:93:4f:4a:b5:08:f8:c8:bd:63:d1:61:03:
         0a:d9:aa:e8:d2:b3:ee:db:9b:7f:ad:8e:a2:30:a8:67:55:7d:
         28:29:2e:47:2c:be:5d:3d:8e:d9:e2:3c:01:fc:ad:31:2d:17:
         7e:59:8b:58:ee:85:ec:49:7b:0f:e1:9e:d9:97:2a:8a:08:d1:
         b9:97:1e:3e:91:b8:54:7b:d7:0a:c0:6c:05:39:2b:96:d7:8e:
         69:89:6d:6a:c6:3f:d7:50:19:cc:1c:e8:96:00:f0:82:f4:0c:
         50:7e:a5:3c:ab:86:d9:d4:18:ef:2b:c2:4a:21:5d:49:05:4b:
         c9:4c:72:0c:f9:1b:a2:44:db:5b:c6:1b:bf:46:40:36:a0:db:
         ff:16:16:c6:97:cd:29:b0:76:dd:5d:0b:56:7e:8d:bd:cc:31:
         d2:10:19:52:0b:a4:7b:17:f5:08:5b:04:8a:80:bc:a2:5d:ce:
         6a:5d:5f:1b:27:16:ce:5d:64:7b:fc:f5:26:01:75:d5:8d:2a:
         d6:13:34:56:b1:03:53:8e:df:3d:48:37:72:bf:e1:80:a4:43:
         ce:48:76:4b:61:36:28:23:10:01:40:2e:48:76:d9:f4:2a:7a:
         8e:99:e3:4d:0f:d6:dc:eb:81:14:d9:15:c7:11:42:ae:6a:12:
         01:2d:b0:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:36:58 2024 by rpki-client on console-ams.rpki-client.org