Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
File:                     0cZXgBrfziVpTfuxqVxs2kR-O7o.mft (raw, json)
Hash identifier:          eCIvTJF8jijAqJvLxderuRkVKSGtASWQp/Lk8Si7zIw=
Subject key identifier:   DE:6B:0E:36:04:4E:14:AF:FC:3F:88:7A:8A:66:4D:DC:FF:FF:CE:C1
Authority key identifier: D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA
Certificate issuer:       /CN=F3656387AF/serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
Certificate serial:       0412
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
Manifest number:          0410
Signing time:             Fri 22 Nov 2024 01:46:00 +0000
Manifest this update:     Fri 22 Nov 2024 01:45:59 +0000
Manifest next update:     Sun 24 Nov 2024 01:45:59 +0000
Files and hashes:         1: 0cZXgBrfziVpTfuxqVxs2kR-O7o.crl (hash: aSWnGdvwe2FNxVBvTZB0cA7iOCGX5sJ8dfh4sI3pptQ=)
                          2: 5929BAD6881811EF9F8726B0762E951A.roa (hash: gqseLBT3raRF8qI8a39+TId/5s+ZYprcLYdDUSRWjC4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042 (0x412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656387AF/serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
        Validity
            Not Before: Nov 22 01:45:59 2024 GMT
            Not After : Nov 24 01:45:59 2024 GMT
        Subject: CN=673fe257-8e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:f5:11:37:4a:e7:44:4e:1f:ec:af:62:df:
                    6e:ae:21:ab:4d:0c:10:e3:94:a7:ed:df:ed:d8:71:
                    cd:a2:55:d7:1f:0a:a0:f7:57:17:c7:fa:df:da:f7:
                    f3:ab:c8:26:4c:bb:e7:5c:cd:5b:5f:53:2b:57:36:
                    d5:0a:26:fb:11:89:a9:33:c4:e2:c5:a2:f5:c6:1a:
                    11:00:e6:b8:45:cd:d9:f4:bd:53:ac:68:3e:5d:d9:
                    8b:7f:7c:6f:54:b1:50:ce:75:d5:12:03:87:fd:df:
                    0f:ba:12:e0:b2:52:ef:76:75:06:ad:d6:b0:74:6d:
                    62:bf:bc:cc:d9:55:db:05:45:d5:7c:b4:b5:40:22:
                    89:11:07:17:cf:b4:23:03:ec:10:a4:05:16:a1:00:
                    2d:a1:be:e7:17:6c:8a:20:7b:45:c0:bd:02:e0:6c:
                    1e:0e:a0:58:e3:c3:5b:01:51:e2:d8:82:84:bb:9c:
                    f8:16:37:01:30:84:f4:e5:eb:f5:00:d5:f6:4f:7d:
                    b7:0d:cc:11:d1:3a:a0:d7:39:1a:d8:8c:3b:9a:5d:
                    2a:0c:67:eb:ca:70:3e:6c:38:e6:59:47:e1:0c:a0:
                    d8:27:f3:b1:03:93:f1:1b:d0:f7:75:62:ed:ca:32:
                    a5:c4:5f:1d:97:db:d3:a1:89:f5:4b:ea:13:b3:30:
                    94:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:6B:0E:36:04:4E:14:AF:FC:3F:88:7A:8A:66:4D:DC:FF:FF:CE:C1
            X509v3 Authority Key Identifier:
                keyid:D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         e1:fa:49:1e:9e:e0:4a:79:a1:34:64:6b:53:a2:75:44:66:2c:
         55:25:38:a7:34:b2:0f:e3:38:04:95:43:7c:3d:3e:25:8b:70:
         8b:d1:10:05:75:53:1e:3e:da:0e:ea:20:1e:0a:64:76:f0:e3:
         86:f1:6d:b5:4b:13:c9:4f:ef:02:df:64:a4:3c:50:d3:5a:60:
         a3:dc:d3:f6:c7:1b:22:62:0d:a9:00:df:01:e1:ec:97:9e:18:
         36:74:8c:6c:1a:68:df:cb:cb:c6:46:ea:95:0e:af:71:14:9a:
         8a:ad:ba:3c:80:56:65:7c:96:27:f0:bf:94:03:c7:41:37:f3:
         f8:65:e8:61:e9:a8:f4:09:24:64:e0:de:9c:b8:5e:6c:89:fe:
         1b:63:3f:e0:9e:56:c1:0c:4b:93:21:4b:e7:b2:cd:af:75:00:
         a9:b5:30:ec:bb:cf:55:5d:91:a2:4e:28:b3:51:ee:69:b3:43:
         4e:80:86:69:39:af:9d:12:47:40:e9:8f:ac:9d:86:48:f7:51:
         14:63:8f:32:3a:2c:fb:81:eb:71:b6:9d:01:a5:57:8e:90:6e:
         44:12:2d:e1:55:38:47:e3:48:8a:60:8a:45:46:5a:7b:47:1e:
         4d:b8:e8:d8:0d:b0:48:97:db:25:1a:40:fc:70:eb:47:71:ad:
         9f:2b:7d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:54 2024 by rpki-client on console-fra.rpki-client.org