Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
File:                     0cZXgBrfziVpTfuxqVxs2kR-O7o.mft (raw, json)
Hash identifier:          77w2I/loaW1te/Fgl2i5D6PLsmfdf7suwpVT1IO4F2I=
Subject key identifier:   1E:4F:E3:0D:C6:CE:A9:5A:96:3F:1B:BE:92:75:B6:60:0C:B4:21:5C
Authority key identifier: D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA
Certificate issuer:       /CN=F3656387AF/serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
Certificate serial:       033F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
Manifest number:          033E
Signing time:             Fri 03 May 2024 01:46:15 +0000
Manifest this update:     Fri 03 May 2024 01:46:14 +0000
Manifest next update:     Sun 05 May 2024 01:46:14 +0000
Files and hashes:         1: 0cZXgBrfziVpTfuxqVxs2kR-O7o.crl (hash: 9QErolcsL+gydNUf+Q33KNFvpvyX60bdcYPpTSssoTY=)
                          2: CCFC233E90CE11EC9AD705A35A40D577.roa (hash: mjvqoYrPS4lGj1pYBU0qLZonXujTfVbi4rs7RwmSlJk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831 (0x33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656387AF/serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
        Validity
            Not Before: May  3 01:46:14 2024 GMT
            Not After : May  5 01:46:14 2024 GMT
        Subject: CN=663441e7-c8d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:37:bd:17:72:89:fd:36:fb:5c:80:45:79:
                    4d:1c:1f:f7:cc:8e:82:24:62:91:b6:c0:84:2d:01:
                    36:6d:ea:4e:3c:4f:19:e4:9d:f3:5f:a0:d2:e4:33:
                    a1:84:ce:ac:ed:a6:6c:66:d1:b5:37:86:dd:a1:1b:
                    50:e8:18:1f:73:4a:85:c6:8d:1e:61:b1:c4:ae:ef:
                    08:fe:f7:1c:59:56:c1:71:ca:b8:ce:2b:30:96:22:
                    8b:09:89:c5:71:b7:6a:c4:7c:d1:36:77:ee:05:27:
                    8e:ee:f7:98:4f:b4:66:d4:9d:5e:a5:dc:59:6b:37:
                    43:e1:60:e2:7a:fe:01:81:64:c3:d5:4f:96:e8:01:
                    60:fe:67:46:75:93:f2:98:b5:cc:ec:74:b8:94:69:
                    32:c7:33:ba:d6:f0:85:f2:98:c5:c9:15:1f:ca:d1:
                    14:b8:c5:05:e4:22:65:f1:ab:a4:2a:70:a5:11:e9:
                    dd:b0:eb:d2:28:c9:e6:a5:b0:d4:70:33:eb:d0:bf:
                    f7:2b:20:91:52:ec:47:d3:99:cf:32:89:5d:e1:04:
                    2c:ff:47:fa:85:76:16:49:2c:ee:24:ca:1a:72:b2:
                    9d:da:37:6f:c5:ec:13:0e:d9:66:cd:1c:88:76:0b:
                    fd:31:25:6d:2d:5a:08:f6:c6:46:6e:55:79:ae:7a:
                    61:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4F:E3:0D:C6:CE:A9:5A:96:3F:1B:BE:92:75:B6:60:0C:B4:21:5C
            X509v3 Authority Key Identifier:
                keyid:D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:05:31:a6:ff:ad:73:a5:b9:fe:88:b7:1d:81:13:3f:54:35:
         10:7f:46:86:07:4c:11:84:cc:a5:70:fd:8d:53:f8:e8:43:2b:
         1f:f0:3f:8a:41:05:f3:83:35:b8:80:4f:92:1f:5a:61:7e:b0:
         44:52:7f:df:9d:3e:16:4d:78:0f:a8:2e:f6:38:86:9e:1d:63:
         1a:cf:34:46:5c:4f:68:78:ff:6c:4c:30:c5:fc:3f:2a:08:21:
         8c:82:d1:c8:dc:a4:44:c6:64:53:6b:1c:89:5c:23:4d:95:79:
         ab:47:0a:97:b4:b3:89:a8:d9:28:25:a3:ce:20:e5:0c:57:1a:
         28:e6:9e:9e:2b:6a:bb:4c:37:f4:ab:2b:71:36:37:e2:9f:71:
         ab:1b:44:6e:44:6b:d2:fa:fe:29:88:ea:16:59:70:31:e6:2c:
         82:ce:3a:0b:9e:4e:ce:cc:17:62:c4:bb:83:2a:c6:4d:52:c3:
         ea:0b:55:82:bf:b9:c8:4b:92:10:95:90:12:fd:4a:27:e7:0b:
         32:b5:e9:54:1d:fe:08:d2:77:3b:98:db:72:2a:6e:29:57:dc:
         8e:31:33:cc:eb:67:9d:83:b7:5d:48:0a:d5:9b:f6:e1:92:65:
         74:2d:e1:48:5e:4f:75:df:62:f2:19:34:84:71:a1:6a:33:4b:
         39:49:79:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:09 2024 by rpki-client on console-fra.rpki-client.org