Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft
File:                     CW2z073uu30kcGbciyW5ZMxAmdc.mft (raw, json)
Hash identifier:          g6ceSRSZ/KjTykPz2zaAaOIg/Uh+M8lYIoxZ3Y06P0U=
Subject key identifier:   58:45:86:CD:50:72:FB:36:B1:35:EF:E6:A4:AA:9E:68:B8:48:6F:41
Authority key identifier: 09:6D:B3:D3:BD:EE:BB:7D:24:70:66:DC:8B:25:B9:64:CC:40:99:D7
Certificate issuer:       /CN=F3654AEEAF/serialNumber=096DB3D3BDEEBB7D247066DC8B25B964CC4099D7
Certificate serial:       59
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CW2z073uu30kcGbciyW5ZMxAmdc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft
Manifest number:          56
Signing time:             Sun 19 May 2024 02:33:36 +0000
Manifest this update:     Sun 19 May 2024 02:33:35 +0000
Manifest next update:     Tue 21 May 2024 02:33:35 +0000
Files and hashes:         1: CW2z073uu30kcGbciyW5ZMxAmdc.crl (hash: qrazP0HfeihIUJpcdJUZh5hjGYr44BFpmuh2cuytpmI=)
                          2: 788D2BE0D8AC11EE9DB58DA2775412E6.roa (hash: 65eF1Tp/RlXNcWyLpB3YoIRfdS2c/kR79xeADgOJBXo=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CW2z073uu30kcGbciyW5ZMxAmdc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654AEEAF/serialNumber=096DB3D3BDEEBB7D247066DC8B25B964CC4099D7
        Validity
            Not Before: May 19 02:33:35 2024 GMT
            Not After : May 21 02:33:35 2024 GMT
        Subject: CN=66496500-e5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:5b:6f:ac:93:7c:f5:80:3f:e2:6e:61:76:8e:
                    07:f7:5d:44:69:43:2b:41:5b:e8:60:aa:fa:34:b0:
                    3d:91:b5:eb:eb:91:8e:a2:e1:ce:27:b8:69:62:90:
                    0a:7f:aa:bb:ad:91:71:97:15:66:2b:9c:f5:5b:a9:
                    ac:af:7e:82:72:16:7a:55:5a:1b:5f:ec:36:11:35:
                    be:35:cf:2c:89:32:15:80:3b:94:be:1d:5c:1e:b6:
                    2f:9b:1e:39:8b:85:5a:46:06:68:21:e8:6e:b7:8f:
                    55:e8:68:12:7c:a4:81:15:06:2a:17:ee:7e:1e:c0:
                    b2:fd:bb:ce:fb:41:a5:9f:91:fd:b7:8b:fc:22:4d:
                    23:ec:a3:2f:02:d8:2e:69:28:17:6e:e8:85:cd:73:
                    44:c9:1e:10:26:d4:c6:98:69:dc:13:4d:fb:4b:01:
                    30:33:3d:47:1e:15:05:6d:b2:2c:21:9f:5e:34:54:
                    15:a2:a3:d5:2e:3d:25:b1:5c:56:ca:cf:8e:7e:f3:
                    be:48:b5:c8:27:0b:56:78:37:b8:0e:79:07:49:31:
                    36:3c:88:2b:0c:9b:4f:b0:ac:59:64:ed:0b:9d:8b:
                    57:60:cb:6e:84:d6:c7:14:c6:be:5a:36:a7:0b:5b:
                    77:b7:25:38:c3:6e:f0:88:02:0c:30:46:16:62:b9:
                    25:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:45:86:CD:50:72:FB:36:B1:35:EF:E6:A4:AA:9E:68:B8:48:6F:41
            X509v3 Authority Key Identifier:
                keyid:09:6D:B3:D3:BD:EE:BB:7D:24:70:66:DC:8B:25:B9:64:CC:40:99:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CW2z073uu30kcGbciyW5ZMxAmdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AEE/20C2F95ED87411EE97DDF74D775412E6/CW2z073uu30kcGbciyW5ZMxAmdc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b4:b9:96:a8:9b:c2:ac:76:1a:b0:64:cd:f1:db:45:17:73:
         83:c4:f6:5a:02:ef:d7:87:12:a6:c4:79:6b:03:62:c5:9b:d9:
         3e:11:f4:29:64:19:b3:18:ba:0f:f2:dd:ec:cc:8f:5a:90:45:
         75:6f:22:e9:1c:f1:02:93:0a:60:53:df:10:b0:54:f9:cb:ee:
         b4:9d:2d:c0:6d:37:df:7a:c1:9e:8c:80:9c:23:5a:51:41:e0:
         7b:d0:4c:40:5d:4a:00:dc:cb:1d:c9:36:78:04:46:b5:e4:e9:
         9b:a5:37:8f:03:71:37:61:aa:65:4d:6f:94:1f:ad:12:17:31:
         20:61:24:36:36:eb:46:14:f5:9d:33:a7:ff:5a:77:03:a0:85:
         e3:9c:69:c3:da:b6:e0:d1:f2:cb:61:7e:d1:80:9f:78:62:62:
         75:84:df:c0:75:50:8f:2a:49:de:2d:a4:27:f4:74:d7:2b:9c:
         0f:20:d7:4c:96:4c:33:8e:e1:8d:e5:61:e2:8c:7f:19:2e:5a:
         4c:3a:21:1a:f1:76:77:6a:0a:4b:82:3c:67:c6:22:54:87:f2:
         54:99:1f:80:48:2e:5d:ad:55:9a:90:56:7b:9b:56:c5:a9:79:
         86:ab:b7:bc:83:c9:c0:7a:85:5c:69:75:c3:de:4c:fb:0b:f4:
         66:77:47:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:14:46 2024 by rpki-client on console-fra.rpki-client.org