Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
File:                     MzQdyhYYc65_OkSzbhzbObXAoJo.mft (raw, json)
Hash identifier:          SjVD8bgMsFLCpHddwXt6EbOpwy61i7Dmi6ZeKCT8r5c=
Subject key identifier:   BB:DC:2A:63:0A:79:CA:FB:65:78:2F:43:13:DE:BA:27:DB:66:D5:A1
Authority key identifier: 33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A
Certificate issuer:       /CN=F3662123AR/serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
Certificate serial:       01E7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
Manifest number:          01E7
Signing time:             Tue 07 May 2024 02:06:17 +0000
Manifest this update:     Tue 07 May 2024 02:06:17 +0000
Manifest next update:     Thu 09 May 2024 02:06:17 +0000
Files and hashes:         1: MzQdyhYYc65_OkSzbhzbObXAoJo.crl (hash: 4kGMdVx658UKTBuGjRyrFM+k4j3PocH2uT0f7DTsdv0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
                          rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:16:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 487 (0x1e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662123AR/serialNumber=33341DCA161873AE7F3A44B36E1CDB39B5C0A09A
        Validity
            Not Before: May  7 02:06:17 2024 GMT
            Not After : May  9 02:06:17 2024 GMT
        Subject: CN=66398c99-3ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:a2:74:f5:37:ae:44:96:40:23:96:c8:84:
                    53:de:70:7f:d4:41:0e:a6:2d:f2:68:97:4d:6a:a5:
                    40:a3:31:25:94:e8:cf:05:10:57:96:24:f6:68:2b:
                    cd:89:c2:f4:9f:83:35:77:bd:84:54:0a:05:37:ca:
                    77:0b:61:ea:fa:7b:82:7e:0f:af:af:44:f4:67:51:
                    35:4d:08:cd:1d:90:b5:07:99:dc:74:9a:d7:dd:bd:
                    44:1c:87:e3:e0:65:6d:61:9e:9a:63:d6:6e:0e:a4:
                    15:16:7f:70:e1:d8:5e:37:ab:60:ba:a3:84:2e:14:
                    b0:e4:72:18:09:7c:f3:59:68:99:26:35:10:d3:42:
                    89:8a:ec:2d:56:84:33:3c:67:e5:95:f1:e9:46:3a:
                    78:52:86:81:d6:69:33:27:c4:cb:bf:5a:94:86:f0:
                    ca:9f:64:2c:73:5a:fa:80:e6:3e:92:38:ba:4b:2b:
                    72:64:e9:09:cf:6b:df:a3:22:7b:7c:95:63:02:0f:
                    fc:02:df:00:7c:60:4d:77:2b:3d:19:6b:7e:0d:c3:
                    da:cd:a7:19:c5:ab:32:5d:a2:9a:5d:84:35:8d:80:
                    84:f8:cf:5e:08:e5:20:15:49:00:92:c8:be:6b:32:
                    63:63:5d:c2:9a:c4:0a:8a:4b:62:37:f3:a5:4c:7c:
                    a1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:DC:2A:63:0A:79:CA:FB:65:78:2F:43:13:DE:BA:27:DB:66:D5:A1
            X509v3 Authority Key Identifier:
                keyid:33:34:1D:CA:16:18:73:AE:7F:3A:44:B3:6E:1C:DB:39:B5:C0:A0:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/MzQdyhYYc65_OkSzbhzbObXAoJo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/2BCF62489D2811EDB8F9258BF1222468/MzQdyhYYc65_OkSzbhzbObXAoJo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:49:d2:f2:48:3c:8d:6e:da:e4:6d:f2:8b:31:4d:97:68:4a:
         49:92:ba:66:bf:95:c8:b1:28:5d:64:73:5e:20:07:65:a3:3c:
         cf:04:8a:2c:fe:bf:6b:84:0e:3f:59:95:bc:d7:02:76:31:96:
         b1:6c:7c:ea:ae:ee:53:2d:ca:b8:8a:85:7c:c5:75:f0:8d:24:
         9a:7d:74:4c:ed:e3:fc:ee:0f:7f:f7:ea:32:87:de:1c:0e:54:
         fc:1b:da:d5:c0:c4:65:77:4b:68:02:bb:25:65:00:a4:cf:81:
         79:70:74:57:2f:19:de:ce:57:50:02:4a:47:57:a0:ae:ff:78:
         fd:fa:90:85:18:ed:47:32:98:a5:47:96:c8:5f:91:23:83:8d:
         3a:ed:d9:f9:3a:a1:34:9c:bc:c5:eb:1f:e9:17:61:39:13:a1:
         94:ef:56:af:06:b0:b8:9d:d4:d8:bc:04:a3:f9:01:22:f3:bb:
         f2:37:cb:4e:18:98:2e:d7:4d:0a:48:7e:e0:06:f9:58:e8:56:
         0b:3d:6c:8e:07:c2:90:be:4c:74:e5:72:75:54:19:d5:a4:20:
         b2:6e:37:05:ce:56:bb:83:65:57:34:c2:95:8b:ba:73:a2:7e:
         c4:44:e9:f7:cc:eb:8d:48:44:bf:72:3c:26:5f:71:34:e1:d6:
         17:50:10:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:11:27 2024 by rpki-client on console-fra.rpki-client.org