Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
File:                     SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft (raw, json)
Hash identifier:          4kVU/spONUrN9k0LSjJ8QRPlgvnq1JucCn7edtWT3X0=
Subject key identifier:   E4:57:B8:53:63:AF:9A:C1:FD:12:5C:EB:EB:95:06:03:4C:DB:FD:7E
Authority key identifier: 4A:6A:66:3E:7B:46:90:35:3D:2D:F7:B9:50:C9:80:97:C2:80:D5:98
Certificate issuer:       /CN=F3654A44AF/serialNumber=4A6A663E7B4690353D2DF7B950C98097C280D598
Certificate serial:       02B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
Manifest number:          02B2
Signing time:             Fri 22 Nov 2024 02:08:24 +0000
Manifest this update:     Fri 22 Nov 2024 02:08:23 +0000
Manifest next update:     Sun 24 Nov 2024 02:08:23 +0000
Files and hashes:         1: SmpmPntGkDU9Lfe5UMmAl8KA1Zg.crl (hash: pnRS1siR3EfmIuwSstxhSM6ci+Oq4zxNpwiKRDz9nV0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 690 (0x2b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654A44AF/serialNumber=4A6A663E7B4690353D2DF7B950C98097C280D598
        Validity
            Not Before: Nov 22 02:08:23 2024 GMT
            Not After : Nov 24 02:08:23 2024 GMT
        Subject: CN=673fe798-2ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:61:64:e4:46:09:7d:5d:e6:c0:e7:ca:2f:07:
                    21:d5:f5:16:07:50:15:6a:90:71:5e:6e:d9:90:06:
                    78:12:ec:69:b2:4e:de:ca:68:60:91:c8:ee:38:dd:
                    79:1e:77:dd:87:2a:f8:a2:69:c4:d7:34:e2:40:c7:
                    c2:3e:ff:28:43:8e:e4:ab:5a:30:ed:54:6b:53:d6:
                    2f:89:ad:18:4c:81:ce:6c:12:ba:2e:7f:7a:5a:e9:
                    5b:95:e3:78:38:f0:a5:24:43:4a:95:24:e6:0c:16:
                    10:dd:64:e2:d8:2d:29:66:9c:0c:c1:29:81:3d:41:
                    0e:65:f3:9e:11:a0:0c:da:d2:8c:01:62:40:78:d8:
                    bb:71:07:c7:f3:94:0b:8b:d2:07:c1:a7:1a:cc:d7:
                    fc:f8:f1:98:c7:6d:d6:01:4a:41:eb:5f:5e:2b:cc:
                    df:db:30:67:13:ba:14:51:a3:3c:4c:6e:75:cd:75:
                    08:c1:b6:85:f6:ff:86:ed:60:98:97:5d:2f:85:61:
                    9e:50:b5:99:81:da:25:a0:ad:89:cf:24:bf:8d:25:
                    85:14:88:24:d4:7d:3a:9a:a2:ca:0b:c1:35:ab:d6:
                    8c:5a:0b:06:c0:f3:a5:5e:99:4c:b2:bc:91:21:45:
                    f1:95:80:d5:60:00:7b:e8:60:69:40:8f:ec:18:ad:
                    aa:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:57:B8:53:63:AF:9A:C1:FD:12:5C:EB:EB:95:06:03:4C:DB:FD:7E
            X509v3 Authority Key Identifier:
                keyid:4A:6A:66:3E:7B:46:90:35:3D:2D:F7:B9:50:C9:80:97:C2:80:D5:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:91:1e:f5:b9:c5:13:b5:0e:ba:a3:dd:bb:00:67:a9:d0:2e:
         da:25:e1:fd:85:b8:b5:5f:ef:76:a1:c9:a9:a9:d7:83:38:db:
         be:71:85:b1:9c:1f:d8:2e:57:0c:bf:52:74:d8:5a:34:54:70:
         39:c3:a8:10:ea:4c:b7:d0:a1:00:81:64:51:b9:ab:dc:00:d2:
         65:e7:85:38:ec:ed:6f:91:c2:ff:dd:c3:a6:53:d2:6c:bd:31:
         8e:53:9b:1a:7e:ae:14:b9:1d:25:c3:c7:5e:48:63:ca:66:03:
         fd:5c:4c:5b:14:5f:7f:af:0d:36:35:cb:96:06:02:31:9e:93:
         af:44:df:d9:5a:3e:c5:3b:d9:79:89:2a:ad:9e:e4:a2:df:2b:
         12:9f:58:66:30:c3:18:9e:25:c7:bd:bf:2f:26:1a:61:92:6d:
         9b:89:de:8e:10:88:46:d3:fa:f1:14:fa:57:8d:32:b6:9f:17:
         c8:3b:e3:e5:78:78:cc:ee:b2:85:16:b1:70:ca:cd:27:47:17:
         4c:64:fc:9d:69:81:1e:22:e4:12:ab:b6:c1:57:1d:b6:43:d4:
         0d:e4:9a:13:86:2f:a9:70:41:63:90:aa:ee:0d:e8:82:ce:36:
         05:23:bb:f3:42:11:4c:5a:87:99:15:62:f1:c0:c3:b4:6b:88:
         e6:74:1e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:34 2024 by rpki-client on console-ams.rpki-client.org