Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
File:                     CmexDhaar6MDUON3kxMx2R85q5Y.mft (raw, json)
Hash identifier:          G++B8KCmU/NPK3ihkfoLHCaErjbt6kLZG91UGEf/e2I=
Subject key identifier:   27:DD:FC:83:48:A1:6A:1C:DF:4A:0B:9A:DC:73:47:5F:6F:F8:96:D1
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Certificate issuer:       /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial:       0676
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
Manifest number:          0671
Signing time:             Thu 25 Apr 2024 01:06:58 +0000
Manifest this update:     Thu 25 Apr 2024 01:06:58 +0000
Manifest next update:     Sat 27 Apr 2024 01:06:58 +0000
Files and hashes:         1: CmexDhaar6MDUON3kxMx2R85q5Y.crl (hash: DkUPfMZcvOyRIa79Cg3GC9kph6wKYs1UOsrSJ8yWY6s=)
                          2: C6A2BFC405E511EEBD45AA854AD9E6FC.roa (hash: Q1IVIvXiqdltQfSEHcyv3gRXZTV0bEmCpfge3Kg/Cb4=)
                          3: D7C38FFA755711ED8288669DF1222468.roa (hash: PQHxtKv0UDmTHySSXriAgQgTxVwVkFl4QLy3ZSWrPUk=)
                          4: 0BB5A474755811ED8757D89DF1222468.roa (hash: OhvKA82g/2G8xwPFY7Ln9+Cew82izds05rzgS/FGkpM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 27 Apr 2024 00:04:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1654 (0x676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
        Validity
            Not Before: Apr 25 01:06:58 2024 GMT
            Not After : Apr 27 01:06:58 2024 GMT
        Subject: CN=6629acb2-b293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ff:17:6f:29:57:9b:28:6b:14:2c:97:90:7d:
                    35:f5:a0:cb:d9:cd:0f:1d:d8:43:23:2c:2f:f4:35:
                    ee:5c:b1:be:be:e8:b3:8a:08:9f:bf:e6:a3:56:2a:
                    ba:46:c0:94:51:38:84:10:fa:22:47:2f:a7:81:10:
                    0b:11:b7:a9:ce:2f:1f:e3:f9:22:58:93:45:49:72:
                    ba:50:61:de:19:df:95:3b:e0:d6:08:f1:9e:b4:a7:
                    0f:27:62:1f:21:09:3a:24:21:d5:6c:fc:09:f6:5d:
                    95:a4:68:e3:0e:44:cd:dd:00:77:df:39:8c:f1:5b:
                    85:17:01:a6:75:cf:c3:51:b6:cb:f4:74:85:eb:6b:
                    3a:e9:e5:22:b8:35:be:73:70:c5:8a:45:2f:04:fd:
                    35:ab:13:35:5b:f9:a6:33:7b:ef:54:78:cf:50:fd:
                    d4:cc:31:a6:90:14:23:c7:04:7f:4e:38:a2:f0:bf:
                    95:15:42:09:9e:34:75:2c:06:f8:3c:dc:08:49:61:
                    bf:54:82:28:2b:60:ac:76:9c:0b:14:15:e0:88:d4:
                    b3:28:53:c7:b9:92:17:56:08:6a:53:a9:46:23:cf:
                    a0:90:e7:39:bd:4b:e9:41:f4:b2:fd:2c:a4:65:e3:
                    9d:0d:13:a0:50:73:b9:df:9c:56:9f:15:a4:98:2b:
                    b8:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:DD:FC:83:48:A1:6A:1C:DF:4A:0B:9A:DC:73:47:5F:6F:F8:96:D1
            X509v3 Authority Key Identifier:
                keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:66:ce:c3:5a:1e:08:3a:7e:c4:ac:70:f5:05:80:c3:d3:cb:
         7b:49:a2:ad:9f:0c:d0:4b:3f:02:e4:f4:45:65:2a:c0:df:e8:
         14:19:a7:7b:a7:0c:c8:04:e7:d4:a6:41:c1:2a:d4:dc:12:1d:
         3d:22:c6:3d:9c:a3:90:95:51:8e:58:5f:c0:fc:0c:31:a3:99:
         25:8b:9a:de:9e:ef:2c:64:5b:0d:3b:f2:8a:ef:7f:6c:40:89:
         83:c1:e2:3c:12:09:fb:49:fe:93:bf:64:7a:1d:e1:7e:91:dd:
         88:8e:73:2d:09:0a:2e:d2:bc:77:bc:dd:21:82:c5:60:e7:04:
         c3:18:6e:28:89:73:0f:e5:6c:a1:84:86:d6:ce:11:b8:ce:52:
         8b:8d:73:65:18:7c:6b:3c:92:8f:fe:f7:10:a2:c7:6f:95:8a:
         01:7d:b9:8e:f5:ad:22:a3:3f:8d:54:3c:54:ec:a5:fb:63:10:
         83:04:42:85:31:07:ee:03:63:dd:c0:c9:74:41:89:ab:d2:1c:
         69:3d:1a:44:04:01:f3:a8:60:ad:98:96:26:10:7e:d2:5a:65:
         eb:53:82:e0:12:80:05:1f:97:48:61:3d:50:d7:05:72:fc:0e:
         e2:1a:70:e4:f0:1c:59:3d:7b:c9:3c:fc:98:e6:2b:14:77:90:
         7d:c4:52:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 02:05:20 2024 by rpki-client on console-fra.rpki-client.org