Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File:                     rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier:          iZkpFkLLspErZ512XwXnSFORG1vx8UYV3dUGYpy//rs=
Subject key identifier:   0B:BD:D0:25:81:4B:A7:4E:D0:AB:75:A3:1B:3C:A0:9A:E7:70:33:3D
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer:       /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial:       01BF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number:          01BF
Signing time:             Mon 27 May 2024 02:07:15 +0000
Manifest this update:     Mon 27 May 2024 02:07:15 +0000
Manifest next update:     Wed 29 May 2024 02:07:15 +0000
Files and hashes:         1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: 9vYvUJzIt6jd7TU/A9rWoGy6h1OIKNv5VyYlTAK5yGw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 May 2024 00:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
        Validity
            Not Before: May 27 02:07:15 2024 GMT
            Not After : May 29 02:07:15 2024 GMT
        Subject: CN=6653ead3-c92a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6f:cf:40:c3:96:c4:9e:dc:3f:3f:8f:78:60:
                    a1:b5:01:5a:6e:c3:ec:4c:d6:c8:bd:6b:88:bf:91:
                    98:32:1e:be:e4:50:14:e7:c5:9c:51:06:0d:82:b6:
                    87:55:1e:0f:18:27:f0:07:b7:77:0d:64:ed:4f:b4:
                    8a:e2:30:a0:a2:f8:d8:91:0d:7a:49:17:fb:e2:e1:
                    2f:a5:b9:0b:86:d7:99:6a:8a:32:19:41:01:2c:b8:
                    fb:5a:a4:4b:af:76:f5:aa:38:18:04:ef:9c:41:dc:
                    84:30:8a:3b:72:5f:bf:a9:23:e3:01:bf:1f:e5:85:
                    08:9c:40:2b:d6:bd:64:4e:85:37:7a:8c:5a:23:c2:
                    9c:7a:10:a2:72:06:26:38:59:62:29:60:d1:3a:93:
                    5d:c5:a3:f0:be:bc:13:a1:ef:e1:a3:df:91:55:a9:
                    00:9b:e2:77:1d:ea:50:38:48:3f:d6:5e:2d:f2:c1:
                    6c:fe:63:7b:4c:3b:98:0a:a4:12:8a:3e:1d:de:58:
                    18:e1:9e:1f:44:7e:3a:af:f7:a1:aa:bb:87:07:00:
                    5d:32:48:ae:38:ee:26:b2:65:6f:d8:15:23:ea:19:
                    c3:13:aa:48:37:c5:0a:75:47:b1:b4:3a:bb:07:c8:
                    28:56:38:1c:31:76:48:0d:2c:14:8f:72:6d:73:d6:
                    19:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BD:D0:25:81:4B:A7:4E:D0:AB:75:A3:1B:3C:A0:9A:E7:70:33:3D
            X509v3 Authority Key Identifier:
                keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:ee:c9:68:67:c8:43:c7:38:9e:19:55:97:4a:2f:e6:a9:dc:
         8d:03:3d:cd:8f:1d:5b:24:ae:10:58:b5:b7:a0:c4:9c:d4:53:
         8e:01:34:b1:ae:a3:c2:a4:4a:70:58:5c:e2:c0:e7:35:e7:4d:
         d1:9f:48:08:c1:13:38:85:01:2c:ef:8b:6d:68:97:09:b5:b8:
         de:dd:60:5f:cf:f1:53:44:8b:5c:44:6a:81:47:b6:92:55:72:
         d5:af:aa:92:a0:2b:28:be:6a:bf:68:78:4a:50:e6:87:ca:55:
         58:c2:f1:d5:03:13:c9:43:59:af:0a:e0:43:cc:46:08:13:15:
         c0:0c:58:c0:bd:48:75:21:f0:f2:eb:0c:49:4e:e4:b7:c7:84:
         66:de:6a:e5:d4:4a:2d:d1:76:48:50:54:ae:13:8c:48:aa:67:
         09:8b:e7:c6:09:cd:62:da:27:dd:dc:63:ca:8e:ef:32:5a:20:
         ec:e8:6b:53:a7:ff:0a:79:2b:09:09:c4:74:eb:02:5a:45:e4:
         6c:fe:bc:85:45:48:9d:1e:08:f9:a9:89:62:d8:7f:21:f9:56:
         b6:69:ed:24:c8:4a:58:e1:59:bb:74:5f:62:44:d9:51:ee:d2:
         15:24:22:27:e1:80:ca:99:81:7f:e3:6d:80:55:3d:11:e7:09:
         4f:63:e0:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 02:56:54 2024 by rpki-client on console-fra.rpki-client.org