Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.mft
File:                     3-0dsxhpvczJZ7VA4i2wVkJULx0.mft (raw, json)
Hash identifier:          x8K+gBIobDW2MRVSam0JA0eslskXISuf390Dgvogtn0=
Subject key identifier:   8D:99:75:39:0A:19:D3:E6:57:33:CE:BE:7B:36:5F:60:CF:7D:09:12
Authority key identifier: DF:ED:1D:B3:18:69:BD:CC:C9:67:B5:40:E2:2D:B0:56:42:54:2F:1D
Certificate issuer:       /CN=F365C741AF/serialNumber=DFED1DB31869BDCCC967B540E22DB05642542F1D
Certificate serial:       0D11
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3-0dsxhpvczJZ7VA4i2wVkJULx0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.mft
Manifest number:          0D0A
Signing time:             Sat 04 May 2024 00:35:29 +0000
Manifest this update:     Sat 04 May 2024 00:35:28 +0000
Manifest next update:     Mon 06 May 2024 00:35:28 +0000
Files and hashes:         1: 3-0dsxhpvczJZ7VA4i2wVkJULx0.crl (hash: ZmLQsVbxikWVBWTErXHhSZgNsR1xZxP1Er38sFxJw4M=)
                          2: 51193AEC23D711E5AFB1712AF8AEA228.roa (hash: hld06b1p8PI84w7oNAYzjcyvZnMmRykKV11T0saNQDo=)
                          3: F803FE7823D711E5AC3CCD2AF8AEA228.roa (hash: ZU4qLO4pOPKT9klrIlYddTdXKCJ1dEkwcwieybY4RFk=)
                          4: ABD3CC5E23D711E594D1A12AF8AEA228.roa (hash: drQdHL3RR7Rr1MiuKtNqDguawW895RY9z/7WuQH7PY8=)
                          5: DD86921023DF11E59A291F2EF8AEA228.roa (hash: RoAjxCx6fWc/DsduBtMcW3qAUs5u+FRokq/oc2UIS+k=)
                          6: CDA8B9DE23D711E5BADABA2AF8AEA228.roa (hash: YbzTkgI3UmJsi9hJvJbU8OQ2bJ8AznZzEYZ8vLf0Wuc=)
                          7: 86AA770223D711E5AB708E2AF8AEA228.roa (hash: y0bl30bqJqkPEbAzXpZ5mftJq3ATD0qtRUuYQbxaJPI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3-0dsxhpvczJZ7VA4i2wVkJULx0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3345 (0xd11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C741AF/serialNumber=DFED1DB31869BDCCC967B540E22DB05642542F1D
        Validity
            Not Before: May  4 00:35:28 2024 GMT
            Not After : May  6 00:35:28 2024 GMT
        Subject: CN=663582d1-85b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c1:ed:df:cd:5e:70:75:f6:97:33:66:c6:0a:
                    96:3a:60:0b:b4:f1:98:6a:65:6e:56:15:00:0a:3f:
                    6f:7a:c2:8b:ef:86:3a:f4:15:25:5f:19:9d:40:7e:
                    e6:29:56:71:e2:72:dc:18:35:3a:e3:72:93:81:6b:
                    e4:8a:4c:d2:80:23:9e:65:0b:19:00:38:ce:b4:f9:
                    c5:ec:00:f0:7b:d0:ac:4e:b5:bf:3e:1a:6a:13:d8:
                    d9:92:ee:a1:49:45:97:fb:51:6d:da:65:24:12:0d:
                    0c:93:be:07:5e:ce:44:be:bf:93:4d:04:7c:c7:c3:
                    dd:7d:93:77:d9:1a:a8:43:21:62:47:74:3b:17:ab:
                    89:77:a9:84:73:b8:4a:28:e3:84:9c:00:05:7d:ee:
                    44:1a:33:68:76:3e:e3:84:4c:03:37:42:86:ba:95:
                    53:4e:76:f2:ff:01:88:15:48:ab:56:db:c4:5a:8e:
                    dd:a4:51:98:5a:31:23:c0:54:d5:6c:17:4b:6c:ac:
                    10:94:be:ef:1c:fb:e2:be:68:70:89:52:7f:c0:d9:
                    a4:e8:65:fa:18:b4:bb:91:f8:ff:cb:3c:3c:1f:33:
                    76:15:2d:22:df:50:95:f1:17:77:eb:36:25:e6:d2:
                    f4:19:50:d5:6d:f1:eb:96:74:7b:d5:65:9b:de:13:
                    36:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:99:75:39:0A:19:D3:E6:57:33:CE:BE:7B:36:5F:60:CF:7D:09:12
            X509v3 Authority Key Identifier:
                keyid:DF:ED:1D:B3:18:69:BD:CC:C9:67:B5:40:E2:2D:B0:56:42:54:2F:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3-0dsxhpvczJZ7VA4i2wVkJULx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:24:ee:11:e3:1b:64:04:23:38:f1:16:cc:6c:64:5c:a7:01:
         6d:25:88:9e:ca:53:cf:e5:e0:50:e5:7e:a3:72:21:81:10:7b:
         9a:0d:e9:2e:fe:26:c5:f5:7a:23:1c:62:a8:c9:1a:c9:07:e4:
         14:a0:fe:a9:53:b8:03:99:06:a5:58:f8:96:49:79:6d:9d:4d:
         6f:f0:e2:08:50:45:0b:5e:c8:b3:2c:49:03:30:35:55:ef:54:
         81:12:b0:96:99:32:56:37:8c:29:b5:27:f2:03:a7:2d:b4:82:
         74:42:a5:38:35:60:0d:e8:0f:3b:13:6f:24:1c:b0:6a:24:95:
         a9:89:99:32:45:a8:77:55:42:bb:0f:8e:7b:77:23:43:e8:c0:
         fe:74:b9:a7:8f:5d:39:3c:14:6b:7b:3e:a3:50:c6:93:f3:c9:
         94:54:b3:fc:ad:f8:0c:08:27:8d:34:7e:e0:e0:63:8a:f2:f0:
         39:e4:ee:7f:d8:2b:e7:2c:43:ee:dd:5c:1d:99:51:aa:b5:e1:
         82:bf:32:7a:35:8c:79:6e:76:e0:9d:3c:fa:2b:8a:aa:ce:11:
         a8:a1:f4:23:f3:de:c0:85:46:58:db:b2:89:ca:4e:48:d4:d2:
         d7:43:09:4f:9c:b6:c4:71:ee:a6:9d:de:0a:80:8d:fe:3f:09:
         98:a2:07:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:52:46 2024 by rpki-client on console-ams.rpki-client.org