Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File:                     rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier:          ULO/VdPA9bwmGTHlg4J57p7xG6mC4gdLUX6UiOrZ3Xw=
Subject key identifier:   01:BF:53:C1:DB:AA:5E:0A:53:7E:8C:B5:1A:DE:65:08:DD:35:91:B3
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer:       /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial:       0715
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number:          0715
Signing time:             Thu 02 May 2024 01:01:05 +0000
Manifest this update:     Thu 02 May 2024 01:01:04 +0000
Manifest next update:     Sat 04 May 2024 01:01:04 +0000
Files and hashes:         1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: y+ceVc439iZGwDLhAZqoT+eLvQkqvH7yVWqN7jw98BM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1813 (0x715)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
        Validity
            Not Before: May  2 01:01:04 2024 GMT
            Not After : May  4 01:01:04 2024 GMT
        Subject: CN=6632e5d1-29c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:94:4a:66:9f:f1:54:52:64:2b:07:7d:25:a4:
                    a5:d1:8c:be:94:32:6f:2c:aa:6c:92:c1:79:b7:d4:
                    4b:a9:83:f4:88:07:41:bf:76:e1:9c:4c:69:4b:d9:
                    8d:77:4f:63:ad:0b:bf:ed:2c:39:60:10:b6:f1:e8:
                    c1:3b:04:5a:f7:61:e0:ca:92:7c:de:72:d5:48:02:
                    e4:42:d6:d0:f0:f1:83:8c:68:c2:fc:cc:12:14:37:
                    83:fe:0f:b5:2e:87:73:74:2e:79:7f:7b:b6:9d:33:
                    18:47:32:c5:c1:c3:32:28:82:1e:d0:a7:11:5e:c1:
                    e7:83:12:15:73:23:31:4d:1f:bc:a8:fd:0e:79:f8:
                    0d:af:17:48:1b:c9:7b:d1:96:e5:b6:e6:06:fe:b4:
                    0e:08:ca:ae:b9:d0:b9:a2:47:37:de:70:6d:4e:fe:
                    73:a6:69:dc:f3:c9:18:ae:cd:bd:9f:f0:24:80:07:
                    93:fa:f7:d1:b8:a6:3a:78:21:08:de:b7:ed:9b:6a:
                    64:7a:0d:55:e8:4a:e3:e4:03:ce:f2:b3:97:4b:71:
                    50:be:ac:11:bb:11:24:6e:41:23:38:64:61:26:00:
                    75:01:0c:30:c5:0e:7d:f7:50:a7:dd:17:94:7e:e6:
                    d6:1e:ae:f9:cd:2c:c4:5d:56:5c:82:00:48:9a:7a:
                    8f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BF:53:C1:DB:AA:5E:0A:53:7E:8C:B5:1A:DE:65:08:DD:35:91:B3
            X509v3 Authority Key Identifier:
                keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:9a:07:bd:5c:c0:36:88:88:96:59:0f:b6:a0:27:a4:5e:c1:
         1d:2f:da:13:69:0c:5c:57:61:71:98:11:cd:f0:6f:68:e9:ed:
         b9:f3:d7:eb:2e:51:ac:8f:2f:1a:35:83:65:ac:dc:8f:99:0e:
         f4:2b:e5:44:78:43:9c:7c:ed:af:73:29:d2:4b:a8:71:3e:97:
         d8:46:b7:ad:9f:5c:dd:06:7c:83:2d:51:3d:f7:a8:1f:8e:1c:
         bb:02:89:1e:21:63:7b:38:cf:c3:47:2f:f0:55:87:13:75:26:
         84:fb:24:39:fd:fc:60:fd:5e:eb:18:ef:e9:55:c5:fb:e7:1c:
         9e:5a:47:06:65:f3:2a:8c:7e:b8:8a:c6:e2:d6:96:e2:76:3d:
         46:86:cc:a1:9d:6d:c0:60:2d:8f:dd:f3:cf:86:61:0e:c3:bd:
         79:23:df:02:b3:f6:c1:3b:1a:36:40:ff:07:ee:2d:49:ec:40:
         36:61:15:6a:9d:1b:0d:0f:bd:f6:bb:5e:a7:3b:db:fe:b8:24:
         81:45:c1:c8:b8:e5:fb:dd:4b:bb:44:40:f5:02:77:3f:28:30:
         01:46:e5:53:19:26:cc:1a:8a:16:de:21:60:fe:5b:07:30:3d:
         9a:3e:6d:8a:0a:7a:d9:52:a3:bc:8e:9d:77:da:f6:36:2b:a1:
         94:89:f8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:03:39 2024 by rpki-client on console-fra.rpki-client.org