Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
File:                     GDcf6QPvCG9cH_b2hAumd2cmdnA.mft (raw, json)
Hash identifier:          +CCzK0NnZ7q+yRAsawPLCDIHo50FQyk2PYBg1R7QRUo=
Subject key identifier:   AD:7B:A6:94:82:37:C3:7F:CE:51:9D:47:25:C1:B0:C6:30:6B:64:56
Authority key identifier: 18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70
Certificate issuer:       /CN=F3655EE4AR/serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
Certificate serial:       067C
Authority info access:    rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
Manifest number:          0679
Signing time:             Sun 05 May 2024 01:07:15 +0000
Manifest this update:     Sun 05 May 2024 01:07:14 +0000
Manifest next update:     Tue 07 May 2024 01:07:14 +0000
Files and hashes:         1: GDcf6QPvCG9cH_b2hAumd2cmdnA.crl (hash: zupoXwTcjwFt0J7B2xNLuIY/PUMSSqK8ZaGLxU6puLo=)
                          2: F31E6B76755711ED9B93B29DF1222468.roa (hash: NAQ4ruRr3CeKBEbG5bbYSwTINb1GDpCxoruFb42Xz/o=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
                          rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1660 (0x67c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AR/serialNumber=18371FE903EF086F5C1FF6F6840BA67767267670
        Validity
            Not Before: May  5 01:07:14 2024 GMT
            Not After : May  7 01:07:14 2024 GMT
        Subject: CN=6636dbc3-6a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:28:91:fd:0d:3c:40:59:1f:1f:05:b7:c2:81:
                    5b:bf:99:4f:0a:18:b1:be:f3:13:18:e8:88:f7:c3:
                    26:9e:f7:2a:09:10:e8:ae:8e:d3:d7:6c:4e:81:ad:
                    90:0a:40:f6:5d:ee:ef:9b:18:7d:da:be:e7:62:2e:
                    ae:82:9d:df:5c:c1:6a:c0:c0:8a:00:bf:de:7f:53:
                    cb:db:95:63:40:13:e6:a0:ca:d2:e9:77:19:8f:6a:
                    f9:09:2a:4c:1c:17:ea:ac:fb:92:6d:36:27:61:0a:
                    eb:8b:2b:31:a6:91:4e:f8:67:5a:90:ec:31:d3:74:
                    5a:78:c0:be:e2:e9:09:ea:6a:b5:7a:50:a4:5e:5e:
                    65:40:b7:76:08:c8:fc:71:60:e4:ed:76:dc:43:a2:
                    1d:49:13:f5:78:a6:d4:d9:78:aa:3b:b2:ba:5c:49:
                    4b:c8:a4:62:45:12:e7:0f:c8:cc:37:5b:d6:73:39:
                    b6:5c:20:07:05:86:2d:38:98:c1:ad:7f:00:db:82:
                    95:2f:1e:cb:c3:d7:14:ba:6d:76:1d:e2:f1:74:f5:
                    8d:86:94:76:d9:3a:9b:cb:1b:e7:19:cb:5d:df:64:
                    e1:14:b3:f4:3f:54:1c:98:77:62:7b:2f:0e:81:0c:
                    e5:56:7e:a4:eb:e2:4a:b4:d8:09:52:79:a7:71:26:
                    20:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:7B:A6:94:82:37:C3:7F:CE:51:9D:47:25:C1:B0:C6:30:6B:64:56
            X509v3 Authority Key Identifier:
                keyid:18:37:1F:E9:03:EF:08:6F:5C:1F:F6:F6:84:0B:A6:77:67:26:76:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/GDcf6QPvCG9cH_b2hAumd2cmdnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/AD6F655A181511EAB31E4F7EF8AEA228/GDcf6QPvCG9cH_b2hAumd2cmdnA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:80:1c:94:00:32:2d:1c:e8:97:f6:47:f2:8c:9a:33:74:93:
         17:27:6b:32:53:8a:b4:45:8f:d4:0c:69:d4:3a:3c:49:f6:46:
         2a:b5:f6:9d:28:63:71:2a:c7:bd:9c:2d:7a:ce:b6:1c:44:7a:
         55:c8:dc:e3:b7:f7:79:95:47:da:77:36:92:e8:f5:d7:8c:e4:
         c6:a0:68:3b:5c:e9:e8:bd:5b:08:52:70:09:8f:d0:6d:e8:68:
         dd:84:df:91:ac:85:17:c9:4a:ed:36:6b:80:fd:06:ce:7f:37:
         35:c1:e3:f1:71:b2:7c:75:c5:dc:9f:bc:9d:e0:b2:03:e2:72:
         ac:b7:20:40:e4:5c:9c:13:e3:60:d0:24:51:81:bc:1f:93:7f:
         19:43:12:72:fd:32:ad:58:7d:5b:b9:c3:f0:0f:71:94:8b:a8:
         de:fc:82:58:43:23:3f:3c:9c:84:81:19:f3:b5:eb:2d:3d:0d:
         96:d2:42:cd:fb:d8:2f:88:c8:0a:45:94:c6:35:3a:62:68:82:
         95:95:c9:ea:cb:aa:8f:53:7f:0d:97:f6:b9:b6:d4:ba:4a:47:
         55:2d:cf:87:a6:da:32:29:59:e9:2a:e4:aa:cf:87:26:06:f0:
         86:d9:97:e4:6a:54:9f:69:e7:7f:ef:2b:77:66:98:ab:a2:2d:
         be:a6:02:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:32:42 2024 by rpki-client on console-fra.rpki-client.org