Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
File:                     ARf_NlB776Kb324d58jVMKSepOM.mft (raw, json)
Hash identifier:          1LLv6maJ879aoRFIpmobExaOkoIMqMboHaSHa/+f7Ro=
Subject key identifier:   01:20:77:20:C3:E1:9B:35:AA:0C:AC:10:44:88:6F:D7:7E:DB:A7:83
Authority key identifier: 01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3
Certificate issuer:       /CN=F3656177AF/serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
Certificate serial:       0BE9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
Manifest number:          0BE7
Signing time:             Fri 22 Nov 2024 00:49:28 +0000
Manifest this update:     Fri 22 Nov 2024 00:49:28 +0000
Manifest next update:     Sun 24 Nov 2024 00:49:28 +0000
Files and hashes:         1: ARf_NlB776Kb324d58jVMKSepOM.crl (hash: O6z4YYwUfOsdD74gJ7y6wvqAVJFoukH5SFJ5oeQ1e3Y=)
                          2: B638C7E6C8C711E997C29757F8AEA228.roa (hash: EisbOpC1Y+D87WQCpz01JdeRv1C7VPmD55bEQs7AK5Y=)
                          3: 7DB93F0EC8C711E9BC304257F8AEA228.roa (hash: UV0937nnVyRu+QQ+Af7r5v4ImK92QTguDEzt+VyalNw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3049 (0xbe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656177AF/serialNumber=0117FF36507BEFA29BDF6E1DE7C8D530A49EA4E3
        Validity
            Not Before: Nov 22 00:49:28 2024 GMT
            Not After : Nov 24 00:49:28 2024 GMT
        Subject: CN=673fd518-fa85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:f3:c5:d6:f0:7c:94:fc:51:78:5f:ce:6b:51:
                    b9:31:c7:c4:84:f1:50:47:a7:6a:af:6c:8e:58:14:
                    b8:3a:93:d7:dc:60:14:0c:86:e4:e3:fb:3e:33:46:
                    43:0e:e1:b0:1a:87:11:59:b7:45:16:89:91:c2:45:
                    91:a3:d7:f3:86:8c:01:39:9a:cf:f5:ce:cf:f9:43:
                    7a:d0:8f:ab:12:6d:e5:d6:65:c5:26:30:72:cf:ff:
                    f8:1b:5d:42:ea:24:5b:aa:9e:52:1f:d8:7a:16:95:
                    22:57:c1:d4:9c:30:bc:d9:e8:f3:ab:ee:35:8e:67:
                    36:09:fe:f5:0f:8e:3e:81:b0:be:80:20:ba:55:f9:
                    e7:63:f6:d9:f4:e1:f9:d6:cd:99:81:75:ff:9a:32:
                    10:3c:75:ba:8e:04:e6:f8:a8:2d:d5:ae:2f:df:19:
                    d6:9b:b7:28:c1:2b:22:4e:27:b5:3e:d6:b1:9d:64:
                    0a:16:03:3d:7b:24:78:29:f1:cf:b6:78:3b:4a:ec:
                    b9:92:83:bf:50:b2:91:51:de:ba:a4:14:58:06:9f:
                    b7:f9:9a:39:5b:56:0d:e3:28:ff:20:83:71:92:28:
                    4a:1f:5b:ac:f4:8b:1d:49:03:e2:5e:6f:94:22:77:
                    6b:c2:13:62:64:45:4b:68:10:d4:b4:31:5a:a3:a0:
                    0a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:20:77:20:C3:E1:9B:35:AA:0C:AC:10:44:88:6F:D7:7E:DB:A7:83
            X509v3 Authority Key Identifier:
                keyid:01:17:FF:36:50:7B:EF:A2:9B:DF:6E:1D:E7:C8:D5:30:A4:9E:A4:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ARf_NlB776Kb324d58jVMKSepOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656177/8F51AB8E83BF11E681ABEC37F8AEA228/ARf_NlB776Kb324d58jVMKSepOM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d8:60:1c:92:48:e0:d7:1f:ff:83:10:45:f5:54:b3:79:dc:
         10:c8:a2:4f:c8:e8:ff:bf:7b:78:63:fa:f8:24:39:32:62:11:
         97:5d:8e:8c:3d:55:45:8f:85:b0:b8:4b:a6:75:79:81:da:91:
         47:72:1e:99:7b:9b:6f:d7:4c:41:b0:58:a4:9a:6a:c0:2c:d9:
         0c:12:e4:63:6c:dd:9b:83:15:ee:28:c6:e8:ac:f6:9d:c7:98:
         6b:c6:6d:7b:ff:f5:8e:98:e6:bb:3c:67:c4:7f:28:95:ea:e7:
         a2:fe:bb:6d:10:67:ae:f6:7c:c9:68:a9:de:49:48:3d:67:d4:
         36:ea:db:e7:93:9e:12:0c:6e:ad:79:08:ce:b7:ee:0d:dc:6c:
         a5:fb:3c:71:0c:70:e8:0f:2e:4e:67:2b:02:4b:4f:e8:66:1c:
         8a:4a:34:bb:cd:2a:59:b3:a9:6e:4d:3d:e2:4f:e6:fb:fc:b3:
         cf:1f:e4:7d:6c:3c:29:e0:04:a1:14:8e:b5:10:7f:e3:cc:7d:
         cf:d6:bd:eb:60:b4:98:87:52:d3:f7:fa:e7:b9:45:5a:cc:d1:
         c9:39:f5:43:76:34:c4:a4:d1:e2:2f:12:71:02:37:42:74:74:
         df:23:5e:00:bd:90:2b:62:f4:3f:0b:c7:84:68:5f:66:94:67:
         d8:5d:4c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----