Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft
File:                     OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft (raw, json)
Hash identifier:          KmwCuuGL7sRBg0VIisBisuKFSrUFYgwtgAG0gRmYIyA=
Subject key identifier:   F1:8B:90:B8:8E:D9:F8:CD:99:12:11:8F:E8:3E:5D:72:27:C8:26:05
Authority key identifier: 39:9D:04:F1:16:8E:65:97:6D:1A:D6:E8:EC:C5:C0:14:14:78:1E:D5
Certificate issuer:       /CN=F365E0EFAF/serialNumber=399D04F1168E65976D1AD6E8ECC5C01414781ED5
Certificate serial:       02E5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft
Manifest number:          02E4
Signing time:             Tue 07 May 2024 01:47:39 +0000
Manifest this update:     Tue 07 May 2024 01:47:39 +0000
Manifest next update:     Thu 09 May 2024 01:47:39 +0000
Files and hashes:         1: OZ0E8RaOZZdtGtbo7MXAFBR4HtU.crl (hash: FTYbR2MuAn4RbnQXvUwf5LYwqikfyAj7akS+Z/PaoCM=)
                          2: 69929190DAAF11EC95FD60D7F1222468.roa (hash: NbSJymuAcwM1w1QslaAdbJN3ixqNpC41BNCGMkvy46M=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 741 (0x2e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E0EFAF/serialNumber=399D04F1168E65976D1AD6E8ECC5C01414781ED5
        Validity
            Not Before: May  7 01:47:39 2024 GMT
            Not After : May  9 01:47:39 2024 GMT
        Subject: CN=6639883b-884c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:79:48:71:da:9a:64:3d:f7:b3:69:26:98:11:
                    41:39:18:14:dc:ff:5d:f0:9f:76:32:88:77:21:73:
                    94:e4:96:99:ff:db:92:e7:9b:57:ed:5d:64:a5:82:
                    4e:94:9e:9d:a2:28:d2:89:f1:9d:e7:a4:53:33:5c:
                    6d:4a:78:28:4d:5e:39:7d:88:81:9e:59:a3:69:e6:
                    0d:bc:82:7c:f3:e6:46:85:70:1c:da:81:31:6f:ba:
                    56:dd:64:c2:aa:04:1c:93:f4:56:58:c2:9a:39:b0:
                    15:e1:db:69:34:b2:3a:9a:d4:3a:f9:98:ac:d0:70:
                    ff:e6:8d:36:94:c2:f8:87:b0:48:64:01:63:b0:29:
                    9b:40:52:2c:45:af:e3:d5:9a:0f:ff:49:42:34:34:
                    97:e7:fa:a4:73:3f:be:c4:c9:26:7a:18:4f:20:26:
                    16:f8:67:9c:c3:fe:e5:2c:7a:91:0b:e4:d8:d4:30:
                    5a:0e:f8:79:03:e1:4b:bf:4b:a7:d8:e5:72:a7:b8:
                    9f:7f:79:65:9c:ff:d1:1b:0b:2a:6f:c8:d0:c3:d9:
                    3e:ff:e1:05:e2:28:94:e5:5c:f3:4e:0a:d1:6c:e2:
                    9b:74:3b:d5:20:45:4e:e4:5d:b4:31:df:3e:61:bc:
                    2c:23:38:88:62:7c:96:d5:ba:41:bf:8e:5a:19:b7:
                    ac:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8B:90:B8:8E:D9:F8:CD:99:12:11:8F:E8:3E:5D:72:27:C8:26:05
            X509v3 Authority Key Identifier:
                keyid:39:9D:04:F1:16:8E:65:97:6D:1A:D6:E8:EC:C5:C0:14:14:78:1E:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E0EF/377530C4DAAE11ECA024B6D3F1222468/OZ0E8RaOZZdtGtbo7MXAFBR4HtU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:18:a4:3a:42:3d:a2:d4:da:6a:86:57:4e:c9:e9:cb:c9:75:
         4b:2a:53:3c:64:63:60:70:a8:fe:b6:58:0b:e1:6e:c2:11:cd:
         02:9e:cc:a6:8d:86:7b:9f:1d:bc:3c:a0:b7:7a:be:29:43:6c:
         1e:19:59:76:5f:c2:58:cd:70:08:bc:80:24:30:5a:12:13:df:
         c1:ce:31:e8:f8:eb:4f:5e:d7:99:47:b9:8a:fa:dd:07:23:ba:
         23:8f:ac:f4:d1:7a:2f:46:7a:d4:6c:73:c6:11:55:7c:d8:20:
         7e:76:b5:84:4d:d3:0e:d7:1a:e2:fe:2b:3a:ff:73:d7:91:3f:
         7d:84:cc:6f:58:f4:14:6a:e1:37:41:dc:62:c7:c1:88:3a:28:
         ea:5f:6e:08:b2:bc:d0:65:f5:09:3c:fb:e6:25:e2:46:8a:b3:
         fc:37:53:9e:5a:fa:c0:e7:70:b6:9e:ca:a8:c4:7e:63:49:41:
         85:7c:68:ed:88:2f:a2:33:d6:b8:77:29:36:9b:87:e1:1e:12:
         fc:2c:b9:82:27:c1:9c:cd:e5:41:35:4e:0b:f5:c7:a5:81:bc:
         be:ad:b9:d1:98:02:3f:f4:54:62:9a:50:0a:d2:27:dc:b0:68:
         73:d2:ee:70:3a:24:d7:17:36:26:b9:73:f1:72:c8:da:fb:90:
         ed:cd:a8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:09:38 2024 by rpki-client on console-ams.rpki-client.org