Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
File:                     2_aMnFwB1o68DJDe5MB0naI6L9Y.mft (raw, json)
Hash identifier:          oh05vZudH90wXjvkYhjO21d+7chHH/aTyievOJ9AxbA=
Subject key identifier:   9B:75:7D:AD:52:10:51:FD:38:84:FA:6A:FD:23:1D:D3:6F:1B:F3:65
Authority key identifier: DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6
Certificate issuer:       /CN=F36576E8AF/serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
Certificate serial:       038E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
Manifest number:          038B
Signing time:             Thu 21 Nov 2024 01:54:10 +0000
Manifest this update:     Thu 21 Nov 2024 01:54:10 +0000
Manifest next update:     Sat 23 Nov 2024 01:54:10 +0000
Files and hashes:         1: 2_aMnFwB1o68DJDe5MB0naI6L9Y.crl (hash: vYkTl5NLLccYrJGFsmHhCLBuJLeVojGZvqOg6Dk3fS4=)
                          2: E10AF0E22C4211EEB4DC88104AD9E6FC.roa (hash: 42KgK6RdN4y6CGvKncWwBdL1NNaaBRBg0A8wytUPgDU=)
                          3: 94A6F8682C4211EE9CAAB80F4AD9E6FC.roa (hash: o0TXx110b3JBiu3Cl6xOs7wBGLlTo9OQb+P0VILZhd0=)
                          4: 95E5589CFCF911EC91C59591F1222468.roa (hash: rnLUsfXlrYCyRp7IztJ9xzb5+MMJaSe1lmd7KitFfus=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 910 (0x38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36576E8AF/serialNumber=DBF68C9C5C01D68EBC0C90DEE4C0749DA23A2FD6
        Validity
            Not Before: Nov 21 01:54:10 2024 GMT
            Not After : Nov 23 01:54:10 2024 GMT
        Subject: CN=673e92c2-848d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9d:24:e6:50:01:f0:82:bb:4f:96:86:26:28:
                    97:2b:eb:ce:a6:ba:76:1d:67:72:b4:95:b4:ae:ab:
                    63:2d:5c:4b:39:2a:e7:18:fa:fb:3e:f8:6c:cd:e3:
                    f3:5d:d3:83:ff:61:31:2b:07:aa:43:9e:e9:77:85:
                    0f:af:33:74:47:be:24:f0:90:c2:60:9e:38:79:d3:
                    9f:9b:7a:80:1c:6f:98:13:e8:22:29:0a:06:9c:ec:
                    06:c0:32:87:b8:9f:30:a2:99:9d:ba:27:af:35:53:
                    bb:06:70:eb:de:1f:d8:1d:24:57:2d:07:c1:ca:46:
                    34:56:4b:fc:47:64:71:65:47:59:9b:6e:6d:f3:68:
                    d9:4f:17:8c:31:33:ab:26:6c:5d:77:bf:d8:4d:09:
                    d9:16:14:da:3f:73:68:77:53:ec:f3:96:9a:55:4e:
                    f9:a5:5a:56:e1:f6:06:42:35:18:3e:33:da:15:73:
                    94:9d:37:c1:ce:08:5c:fc:70:2c:2c:fd:88:96:f3:
                    50:62:e6:d3:1e:44:4b:db:31:14:ee:5c:44:03:de:
                    61:d2:e7:7d:5c:4e:07:c5:7e:b8:29:a9:9f:39:47:
                    51:6b:69:53:ca:f6:6d:13:d7:e8:75:77:48:b2:13:
                    d7:75:4a:e4:72:51:65:ae:05:61:bd:75:df:cc:25:
                    4e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:75:7D:AD:52:10:51:FD:38:84:FA:6A:FD:23:1D:D3:6F:1B:F3:65
            X509v3 Authority Key Identifier:
                keyid:DB:F6:8C:9C:5C:01:D6:8E:BC:0C:90:DE:E4:C0:74:9D:A2:3A:2F:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2_aMnFwB1o68DJDe5MB0naI6L9Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36576E8/C3808986FC6111ECB17E22ABF1222468/2_aMnFwB1o68DJDe5MB0naI6L9Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d7:d4:a5:5e:13:02:9a:1a:2f:b7:45:b4:7c:50:98:3f:d3:
         e3:27:fc:84:cc:65:d2:80:47:e5:9d:f6:8d:31:73:0c:3c:80:
         87:da:50:25:74:0a:b0:31:97:3c:60:67:3d:31:7f:d0:28:55:
         b8:97:eb:74:97:90:dd:05:26:d4:03:51:0d:7b:cd:2b:7b:bc:
         91:df:1c:17:43:3f:48:68:02:c4:15:d9:8e:6a:41:b3:a7:4d:
         4d:a1:1e:f5:99:39:6a:aa:f0:37:44:82:0f:cc:02:be:6e:72:
         0c:de:2a:08:5d:ff:7b:5a:8a:4e:30:d6:fc:b8:af:ed:fa:75:
         dc:9a:bf:06:bf:48:a7:0a:b3:05:eb:d9:fb:58:25:d2:65:ba:
         ea:66:d9:ef:54:fa:8c:12:5f:68:d8:3c:0f:ac:a1:65:41:52:
         1b:55:8b:15:28:11:2a:59:bf:78:e1:77:b5:bf:d9:e4:78:44:
         78:bb:82:1c:28:53:89:ec:f8:db:a4:02:84:ca:69:af:31:b3:
         a2:4f:94:4b:9b:03:d7:08:ec:7e:3c:c0:fb:e7:56:4b:3c:df:
         9f:72:af:4a:d3:e9:d4:f9:aa:9b:fc:5d:8b:b9:59:34:39:22:
         08:34:45:56:78:f9:d3:66:14:43:46:f4:84:20:da:5e:7e:41:
         22:01:79:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:19:40 2024 by rpki-client on console-ams.rpki-client.org