Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
File:                     RQb8pqpV74TTpMAErIOrtQvu07k.mft (raw, json)
Hash identifier:          k4tBrBVn/7/AfFL2tJZXgml9Kdu7LlZ3GcWEAxCuzhM=
Subject key identifier:   54:77:A5:53:9F:05:CF:FD:AB:0C:DA:69:0A:B8:F4:6C:31:65:AB:04
Authority key identifier: 45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9
Certificate issuer:       /CN=F3658AE0AF/serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
Certificate serial:       0404
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
Manifest number:          0403
Signing time:             Fri 22 Nov 2024 01:46:56 +0000
Manifest this update:     Fri 22 Nov 2024 01:46:55 +0000
Manifest next update:     Sun 24 Nov 2024 01:46:55 +0000
Files and hashes:         1: RQb8pqpV74TTpMAErIOrtQvu07k.crl (hash: cLLVwlm5I3zc/P3UDY66glQL8BXJ/j8kT3A8rPnr1eg=)
                          2: 9DDD28FC9A3111EC8707D1B65A40D577.roa (hash: FZcB4QBBqx/jYH6PVYH2VRq/gBlCUQZrKAZfwhy/+S4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1028 (0x404)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658AE0AF/serialNumber=4506FCA6AA55EF84D3A4C004AC83ABB50BEED3B9
        Validity
            Not Before: Nov 22 01:46:55 2024 GMT
            Not After : Nov 24 01:46:55 2024 GMT
        Subject: CN=673fe290-f516
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:42:27:28:74:36:6c:5d:6d:60:42:14:f7:8c:
                    54:01:b4:27:59:00:7e:27:e7:72:c6:6f:84:68:b1:
                    f7:18:c9:87:39:15:94:df:2b:03:10:d5:3e:e0:fe:
                    3f:3e:73:03:0f:73:4e:18:88:cc:32:f9:e3:2c:a0:
                    e9:5e:10:81:93:dc:6c:67:02:49:0f:1e:91:62:17:
                    5b:da:9b:b3:e9:e8:79:85:c7:ec:d5:37:19:c2:41:
                    b9:58:39:7b:09:fa:4d:e0:97:39:00:c1:90:21:eb:
                    5e:7e:79:05:e6:8f:d0:a5:de:08:fb:d9:11:e5:83:
                    92:f7:9f:5b:e1:c9:c5:49:5e:eb:ea:ca:a3:94:77:
                    77:94:cb:30:7a:ec:9b:6d:91:aa:c1:7f:3e:98:3b:
                    08:fe:0c:dc:8a:7b:92:db:bf:c3:e6:d6:f4:21:f4:
                    78:55:f4:03:50:01:8f:d5:4b:ce:3e:a1:dc:d5:46:
                    71:ab:95:d6:bd:cd:b7:aa:61:70:b7:9d:da:47:da:
                    a5:65:c8:af:62:92:64:c5:f8:47:45:18:fb:40:46:
                    92:11:99:83:ac:ab:ca:b0:39:dc:b9:f1:80:da:c3:
                    40:60:ec:fa:34:a2:00:82:37:78:8d:a4:37:73:95:
                    57:8b:13:53:e7:ba:27:3e:8b:22:23:eb:9b:d6:b9:
                    84:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:77:A5:53:9F:05:CF:FD:AB:0C:DA:69:0A:B8:F4:6C:31:65:AB:04
            X509v3 Authority Key Identifier:
                keyid:45:06:FC:A6:AA:55:EF:84:D3:A4:C0:04:AC:83:AB:B5:0B:EE:D3:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RQb8pqpV74TTpMAErIOrtQvu07k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658AE0/E551C3EC9A3011ECB563A0B45A40D577/RQb8pqpV74TTpMAErIOrtQvu07k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:9c:a0:2c:00:95:d9:44:55:5d:16:c2:5f:66:34:05:05:fe:
         19:de:f0:f0:27:bd:12:a3:45:91:ba:e3:fc:bc:00:33:ac:37:
         20:22:14:b7:c4:32:1f:0d:67:d6:7d:07:fc:54:07:18:fb:da:
         c1:6b:ac:6d:3b:f4:23:37:46:75:84:a2:1d:6a:9d:e8:bb:8b:
         af:3c:8d:82:d5:ec:bf:48:93:29:2f:1d:c0:4b:71:d2:0d:d3:
         e7:dc:79:9c:ca:2e:1b:59:cb:af:dd:a8:0f:59:0e:8b:10:41:
         a3:17:da:50:3c:4b:59:f9:9d:0f:3d:db:01:54:e7:8e:a6:5a:
         b1:ad:c7:93:02:92:0c:1f:82:10:b3:a6:bd:3d:5b:31:91:4d:
         b1:bb:fa:4d:b7:f2:54:ce:62:34:cc:c6:b9:ba:2a:fb:a1:06:
         dd:8f:ea:0b:29:57:da:59:95:c4:1a:22:ee:0a:6b:d6:03:04:
         42:a4:31:c2:bb:55:7a:06:aa:42:23:c3:25:11:fb:67:cb:29:
         b3:b1:f0:52:95:cb:05:0e:1f:39:6c:a4:07:60:d8:19:23:16:
         3d:2f:c4:f7:03:04:5c:57:2a:2b:b8:01:a2:85:5f:9b:db:54:
         99:72:46:bc:c5:8d:05:10:09:1f:34:28:3a:ab:b2:8b:a3:c6:
         b3:8d:d8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:54 2024 by rpki-client on console-fra.rpki-client.org