Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
File:                     -_THz17IYtQtyBCgQwAhG6K3xQg.mft (raw, json)
Hash identifier:          gkQOo/isfL2zFAp4xAVyCvHbDZ9ElnlBjN2mkJEXs6E=
Subject key identifier:   73:4D:42:C2:BF:8B:79:08:ED:B6:4A:B6:87:C1:E8:4C:3B:F4:19:0E
Authority key identifier: FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08
Certificate issuer:       /CN=F3658583AF/serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
Certificate serial:       57
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
Manifest number:          57
Signing time:             Wed 23 Oct 2024 02:55:08 +0000
Manifest this update:     Wed 23 Oct 2024 02:55:07 +0000
Manifest next update:     Fri 25 Oct 2024 02:55:07 +0000
Files and hashes:         1: -_THz17IYtQtyBCgQwAhG6K3xQg.crl (hash: SjiE0WxKBh4qOY7K+8uioexGE0iyn9DM4dL8098EEm0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658583AF/serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
        Validity
            Not Before: Oct 23 02:55:07 2024 GMT
            Not After : Oct 25 02:55:07 2024 GMT
        Subject: CN=6718658c-6b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:aa:2c:bd:d9:cf:ab:d8:8d:e3:8f:0e:a0:24:
                    e2:a4:be:fd:8b:e7:53:dc:80:f0:4e:56:c4:91:fd:
                    69:5d:49:1a:4f:86:b3:d1:ba:70:f5:32:64:78:1e:
                    4c:ad:49:60:d3:0e:48:09:fc:60:8a:50:77:c1:87:
                    1f:9c:2e:64:ce:49:59:1d:81:bf:e2:d6:50:ce:90:
                    7d:c5:d5:06:c4:b0:6b:39:f3:93:e6:69:8c:b2:82:
                    f6:f5:81:af:8e:2a:6d:58:cd:cd:cf:8d:cf:c5:5f:
                    dc:21:25:d6:47:65:0e:cc:92:d8:90:cd:25:9f:27:
                    1f:4b:dc:f4:55:3e:db:4b:46:f8:be:2e:63:c4:06:
                    99:fb:35:5b:15:e5:6a:40:0f:ea:32:50:b2:9c:a9:
                    ba:ba:4b:b4:f2:34:f9:72:71:d5:4d:18:37:ad:6b:
                    df:c4:b2:39:47:85:34:0f:c6:9d:2e:bc:1d:75:d7:
                    b9:18:af:e8:21:1a:35:b6:ea:bb:53:8a:e1:dc:e2:
                    f8:20:b9:22:e4:7a:1d:ad:8a:39:7b:f7:fd:db:11:
                    69:b5:a3:af:d9:6e:bf:39:60:32:b4:04:d1:d0:bc:
                    2d:da:46:71:1a:37:6f:ef:17:34:9b:8c:63:35:12:
                    31:97:66:2a:fe:02:85:67:62:df:4a:b5:89:fc:7d:
                    40:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:4D:42:C2:BF:8B:79:08:ED:B6:4A:B6:87:C1:E8:4C:3B:F4:19:0E
            X509v3 Authority Key Identifier:
                keyid:FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:85:70:5e:ef:f8:ee:8a:86:e6:9b:7f:b2:77:8c:da:01:54:
         92:68:e1:f2:ef:8f:2a:7d:90:6d:65:d0:68:66:f8:6c:d6:8a:
         53:20:f7:01:e7:2f:84:7a:a6:5f:dc:bb:03:74:ad:da:f6:1e:
         a9:b5:cd:d5:f0:8a:81:33:a5:44:2d:1b:b4:a6:37:ad:bc:36:
         36:b6:9a:21:36:59:cb:7c:3d:64:8d:a9:eb:97:c7:50:8b:38:
         90:7e:9a:83:d8:3e:37:65:85:bd:4a:9d:c0:93:6e:c0:11:b7:
         3e:22:f2:a1:ec:09:a2:dc:98:71:89:91:e1:02:8a:c7:18:de:
         0e:1b:c5:30:ad:d7:09:c3:1f:76:96:fc:37:92:56:ea:7a:91:
         99:16:80:b7:f8:f5:7b:09:da:61:85:c2:de:f0:bb:31:b6:07:
         c9:13:4f:e7:58:ba:30:d9:f8:cd:de:0c:f3:0d:3e:bb:48:3c:
         2a:25:04:60:46:89:61:52:7f:96:fc:94:f9:5f:e4:77:a7:8e:
         58:aa:26:ab:4d:90:56:86:35:c4:16:7e:dd:55:7b:48:27:84:
         c9:a3:c8:a7:b9:71:aa:3c:10:da:24:52:63:6f:1e:1b:9c:f9:
         9f:34:58:0c:ee:8f:23:b4:c3:a6:c5:a1:ce:14:d9:03:d3:6d:
         74:fa:3b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:41:12 2024 by rpki-client on console-ams.rpki-client.org