Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File:                     rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier:          IIK53K+qPGmOyUhLw9nYUTlqMNfxh7rdwQX3MNfPCIQ=
Subject key identifier:   C2:F7:E7:44:F7:5A:03:BC:EF:76:B1:18:0A:FF:15:61:F9:AF:3F:37
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer:       /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial:       07E5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number:          07E5
Signing time:             Fri 22 Nov 2024 01:05:01 +0000
Manifest this update:     Fri 22 Nov 2024 01:05:00 +0000
Manifest next update:     Sun 24 Nov 2024 01:05:00 +0000
Files and hashes:         1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: jfjLRQC7/NfphmYDf2OPYhoUnsiq7W5s8YAO/mZDs3Y=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2021 (0x7e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
        Validity
            Not Before: Nov 22 01:05:00 2024 GMT
            Not After : Nov 24 01:05:00 2024 GMT
        Subject: CN=673fd8bd-0f5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:33:71:20:5c:37:b4:b4:66:da:05:6c:78:2b:
                    3f:c2:68:34:5f:63:a6:5f:d7:cf:4c:94:05:1b:7f:
                    14:0a:f4:1b:0c:45:16:37:08:d4:d3:60:f4:dd:35:
                    dd:80:ad:fa:8b:5d:61:09:44:28:b2:33:fb:7c:58:
                    a5:4e:f1:70:66:10:1b:89:f2:01:1d:2b:79:db:71:
                    15:4b:9c:6a:fd:ca:a0:2d:46:9e:c2:12:6e:d3:46:
                    45:61:81:9d:a0:11:ef:6a:ae:af:f6:3c:a8:6c:86:
                    43:6b:c9:6a:e9:0c:ae:b9:59:c3:d6:75:af:e7:b4:
                    d1:25:13:47:d4:85:cb:ca:51:5d:f1:83:74:db:ee:
                    63:b4:78:b8:50:f8:05:3c:8e:1d:c2:00:ea:c7:01:
                    0f:6b:ec:da:34:4f:63:26:dd:47:48:66:54:7e:7a:
                    52:fb:aa:07:5c:7e:33:de:a8:fe:8d:e4:5d:dd:7e:
                    a2:60:af:2d:d4:65:b4:c5:ba:52:d6:33:8f:97:7f:
                    8d:ac:99:35:e2:42:36:e5:ec:2e:93:62:fb:9b:81:
                    e0:31:2a:97:c5:da:bd:30:81:4a:d7:86:35:32:f2:
                    44:2f:22:80:ee:f2:02:ac:ab:6d:b0:78:e0:f2:c4:
                    5a:73:95:e0:eb:7c:3e:3b:60:be:f7:ef:38:45:d3:
                    64:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F7:E7:44:F7:5A:03:BC:EF:76:B1:18:0A:FF:15:61:F9:AF:3F:37
            X509v3 Authority Key Identifier:
                keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:8b:09:76:83:9a:67:8f:d5:61:7e:90:46:57:fc:bc:35:aa:
         21:f3:8f:ab:72:00:ad:ac:11:18:03:b0:4f:05:61:17:82:e0:
         f9:e8:89:94:49:5e:2d:d6:6e:d2:79:86:85:4a:21:72:f1:f8:
         02:f0:a7:cb:68:7d:a2:78:22:e8:56:18:f8:33:81:a3:a6:b6:
         af:06:7a:01:dc:7f:57:ec:08:ef:26:39:22:27:73:da:64:fd:
         a1:1a:24:a0:1b:44:05:9b:05:64:61:74:69:2e:3f:82:37:6b:
         66:41:cc:b1:5b:a3:de:e6:53:8e:18:4c:bf:9f:17:e2:bd:33:
         e0:7a:f9:7e:ff:e0:95:c2:4e:0b:f2:9a:90:d1:e8:18:c2:e6:
         a4:05:9a:70:bb:5a:e3:cc:7a:de:7f:0d:36:65:8e:3b:a7:bf:
         8d:d9:f3:71:2d:4b:b7:9b:e7:7c:05:0e:3f:cc:7a:8e:93:c7:
         b1:5d:ac:aa:4f:67:13:f4:c8:e3:b4:d8:23:0d:6a:23:29:84:
         fa:f5:a1:b2:9b:c0:d4:32:c2:44:37:14:bb:96:14:ba:ff:85:
         ee:70:df:d4:77:af:42:41:0d:b2:3b:4b:ce:97:f1:c7:d2:37:
         f6:aa:88:a8:2a:c1:7b:ab:22:53:45:ed:c5:b3:ae:89:4e:a3:
         7f:f1:11:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org