Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
File:                     Hn0bbhJkcIQEOHneXdkHkKatUAs.mft (raw, json)
Hash identifier:          V0OlwgUbHDzmbXlyMSo2T0wwYTrRNqeRnoDRF5SCEXA=
Subject key identifier:   89:08:98:8E:8D:AE:9D:A4:FE:16:76:01:E9:B4:55:4A:13:DE:A0:24
Authority key identifier: 1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B
Certificate issuer:       /CN=F3662123AF/serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
Certificate serial:       02B1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
Manifest number:          02B1
Signing time:             Thu 21 Nov 2024 02:07:36 +0000
Manifest this update:     Thu 21 Nov 2024 02:07:35 +0000
Manifest next update:     Sat 23 Nov 2024 02:07:35 +0000
Files and hashes:         1: Hn0bbhJkcIQEOHneXdkHkKatUAs.crl (hash: tf3aCQIQPF5BEchYyJ4W77VxY1hheTOfOsNybta65co=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 689 (0x2b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662123AF/serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
        Validity
            Not Before: Nov 21 02:07:35 2024 GMT
            Not After : Nov 23 02:07:35 2024 GMT
        Subject: CN=673e95e8-daa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:22:7d:3c:34:7e:0e:3f:42:08:cd:72:95:7b:
                    29:6f:ae:c9:c4:93:0a:28:13:9a:8f:f6:e1:79:3d:
                    7f:0d:cb:d8:84:49:92:6a:27:d5:8c:a4:53:d7:20:
                    66:76:43:a0:e5:8d:e3:2a:3d:dd:a2:a8:2c:30:8c:
                    31:4c:51:d3:a7:1a:e9:99:25:f8:30:5c:e9:f2:72:
                    26:72:05:24:4b:be:e6:3c:ec:eb:66:7b:84:c1:38:
                    0b:40:e3:e1:20:16:b7:7d:00:10:12:eb:b5:c0:4f:
                    d2:a1:98:c1:aa:73:0c:fd:a4:17:7f:f6:e5:ff:0e:
                    ff:93:7f:51:14:b3:27:28:de:2d:47:b2:19:25:9e:
                    77:f9:c7:5a:04:2b:1e:43:ce:50:80:2e:b7:f7:a8:
                    e0:1c:bb:8c:02:e5:3a:df:c4:5b:9d:c6:5a:1a:a4:
                    0e:09:9e:8a:8a:1b:de:56:09:4c:d0:7d:51:e2:34:
                    2e:3e:02:40:c2:e6:74:eb:68:a9:c6:ec:ef:c5:85:
                    7a:93:a6:88:ba:2e:32:46:ef:02:7b:4c:49:55:73:
                    9a:2f:e5:49:87:2d:24:c3:6c:b8:50:03:24:22:71:
                    a9:28:d5:0a:59:28:f0:38:1c:bf:4a:fc:ab:c4:6a:
                    58:7d:f6:e3:de:bb:e5:b5:1c:d8:4c:a4:95:4d:cb:
                    43:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:08:98:8E:8D:AE:9D:A4:FE:16:76:01:E9:B4:55:4A:13:DE:A0:24
            X509v3 Authority Key Identifier:
                keyid:1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:0e:6e:4e:b9:5f:08:74:4c:0a:0f:eb:a7:dc:1a:0c:9b:d3:
         32:71:4e:f0:7e:77:a8:79:ce:29:0c:d5:a4:56:c5:e1:bd:bd:
         7f:da:92:fa:f9:4d:ab:f0:bd:81:c0:4c:27:08:4a:79:71:59:
         38:52:43:cc:54:45:e7:d1:63:c9:2c:0f:e1:97:6e:0b:34:36:
         be:2e:4c:b0:ba:08:2d:98:71:7f:40:75:13:89:c3:c2:48:cb:
         30:06:d6:2a:3f:55:0c:f6:7c:db:dd:ce:8d:62:f7:15:95:f5:
         5b:51:39:66:32:6d:ee:9b:42:ca:bb:c5:0b:5d:0c:d7:2c:8a:
         d6:ec:c6:ca:fa:17:5f:b1:c3:9d:6a:b9:57:e2:ef:a7:71:8f:
         cb:07:f8:bc:e1:b9:69:67:06:61:07:26:ef:f9:45:7d:45:cf:
         b5:0b:cc:f2:bb:7c:ff:81:60:76:39:83:96:f0:e1:59:5c:7e:
         1f:11:ce:61:df:27:f6:87:62:ca:8c:d6:99:11:92:d3:c8:31:
         37:92:aa:74:31:e5:b8:49:89:d8:69:25:5d:f3:24:ba:96:47:
         04:13:60:28:26:56:56:2a:8a:b7:36:30:44:93:49:14:fa:e7:
         26:e3:98:b1:2b:20:ff:09:1f:86:16:53:39:48:82:80:80:61:
         00:fe:b1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:10:17 2024 by rpki-client on console-fra.rpki-client.org