Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
File:                     g2HVptDz1JxnYMDqaGxnxBSd1t8.mft (raw, json)
Hash identifier:          1Kxwitjujk+CsE5WYdjYo/PYng6AQV2O5yAG/aBJRoI=
Subject key identifier:   6D:B6:7C:8C:15:75:D6:E2:7E:02:9B:E3:EE:98:3F:4C:9B:F2:DA:48
Authority key identifier: 83:61:D5:A6:D0:F3:D4:9C:67:60:C0:EA:68:6C:67:C4:14:9D:D6:DF
Certificate issuer:       /CN=F36580B0AF/serialNumber=8361D5A6D0F3D49C6760C0EA686C67C4149DD6DF
Certificate serial:       01DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
Manifest number:          01D9
Signing time:             Thu 21 Nov 2024 02:24:21 +0000
Manifest this update:     Thu 21 Nov 2024 02:24:21 +0000
Manifest next update:     Sat 23 Nov 2024 02:24:21 +0000
Files and hashes:         1: g2HVptDz1JxnYMDqaGxnxBSd1t8.crl (hash: t1d2iwevyqlocYS3PlfoccbOxBSfDs2b1lznG4aLeoc=)
                          2: 5CA7913C41CF11EEABA50B154AD9E6FC.roa (hash: mPw4RDOXZXo/bpdC9fVPFx1LHe7Ee57R4RWVqSxmsVQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36580B0AF/serialNumber=8361D5A6D0F3D49C6760C0EA686C67C4149DD6DF
        Validity
            Not Before: Nov 21 02:24:21 2024 GMT
            Not After : Nov 23 02:24:21 2024 GMT
        Subject: CN=673e99d5-5eb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:39:ef:cf:5e:ac:a8:93:d0:3c:e0:26:d2:55:
                    d0:24:3e:ee:39:40:e7:ea:00:e2:0c:d6:fb:1d:d4:
                    c8:f2:6f:f2:5e:77:09:80:6d:40:31:5f:ec:41:19:
                    d9:ca:b9:cd:64:9d:e8:51:d7:58:dc:5d:ab:09:77:
                    a1:8b:89:d8:f0:50:00:96:cb:2e:b0:95:cf:b2:a7:
                    aa:02:ef:28:f0:cc:a8:bc:08:65:94:95:a7:c0:a5:
                    c0:19:27:06:24:2d:be:ab:f3:5d:2d:ac:e4:c1:81:
                    4f:e8:68:90:e3:a5:6e:cd:e2:49:23:40:1e:81:c9:
                    d1:b7:87:c8:b6:3f:17:cd:75:a3:0c:f4:38:52:f6:
                    46:5d:54:79:4b:6f:95:59:13:ff:3b:04:b2:82:f7:
                    a9:3e:94:74:c7:42:b0:98:d0:3c:c9:82:8d:f6:89:
                    5e:98:37:41:73:85:66:09:8b:a5:5c:5b:f6:4c:19:
                    75:b7:e2:0a:cb:5f:78:42:bb:2b:b8:26:fc:91:3e:
                    93:2b:5b:3c:e1:21:29:52:c7:c1:08:18:ae:d7:50:
                    6c:23:1b:98:7c:5f:9d:0a:9b:8d:68:ab:20:b1:c8:
                    1d:2e:17:80:e0:6c:f8:8a:4b:33:47:24:67:c6:d0:
                    90:cf:fc:61:bd:5b:ce:4f:b6:4b:c5:82:99:bd:2c:
                    f7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B6:7C:8C:15:75:D6:E2:7E:02:9B:E3:EE:98:3F:4C:9B:F2:DA:48
            X509v3 Authority Key Identifier:
                keyid:83:61:D5:A6:D0:F3:D4:9C:67:60:C0:EA:68:6C:67:C4:14:9D:D6:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g2HVptDz1JxnYMDqaGxnxBSd1t8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36580B0/24B7AD5841CE11EEB62278114AD9E6FC/g2HVptDz1JxnYMDqaGxnxBSd1t8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:b8:6b:91:83:9f:b4:da:57:07:1e:9a:eb:dd:17:2b:79:f6:
         1a:cd:8c:19:c5:61:c8:f2:45:23:44:e3:7d:d9:c8:4a:76:92:
         4a:a1:f6:01:97:3b:97:f6:83:67:c1:2f:36:a0:d5:57:54:20:
         a0:b8:07:5a:a3:e1:70:42:03:5d:31:b9:f7:79:1c:66:46:f2:
         e3:3c:aa:9d:73:71:98:8c:f1:0b:95:69:69:99:43:02:55:de:
         69:93:e0:79:19:ec:f0:d4:a8:e2:33:4b:af:0e:5d:b1:6f:a9:
         79:57:79:65:a7:a6:48:13:15:0c:55:14:9c:1f:d8:e7:71:b0:
         2d:de:d2:4f:79:22:b1:0e:3b:99:35:30:a4:50:ba:f5:91:25:
         c8:14:88:29:01:77:62:7a:a2:32:1b:3b:38:2a:5e:af:22:96:
         28:15:02:af:59:2a:0c:58:d3:13:04:53:df:e6:f9:24:0d:8f:
         9e:5a:59:03:a7:3b:8a:34:0b:0b:f5:86:e0:68:ea:c8:f0:ae:
         13:ac:8a:21:3f:21:5a:9d:c1:d9:35:05:44:d4:17:57:2a:ff:
         c7:99:bb:55:db:56:a3:b3:de:01:6f:dd:5e:20:f3:5d:7b:00:
         32:73:a2:9f:de:15:a6:a2:11:f3:fc:17:9d:86:12:59:1e:43:
         11:a9:66:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:19:40 2024 by rpki-client on console-ams.rpki-client.org