Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
File:                     qO2f3Jdp7203QbndrnI9MYFl51A.mft (raw, json)
Hash identifier:          ZkPfSMwHok7r3njRJ1S9UpI4CF/bzdKoTR1M1hVlF1U=
Subject key identifier:   AB:7F:39:5B:02:BB:05:25:3A:5F:DD:D4:D5:01:72:74:45:8D:88:8A
Authority key identifier: A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50
Certificate issuer:       /CN=F36628E9AF/serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
Certificate serial:       034A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
Manifest number:          0349
Signing time:             Sat 27 Apr 2024 01:58:50 +0000
Manifest this update:     Sat 27 Apr 2024 01:58:50 +0000
Manifest next update:     Mon 29 Apr 2024 01:58:50 +0000
Files and hashes:         1: qO2f3Jdp7203QbndrnI9MYFl51A.crl (hash: IbedpiSooFSoCoYHHgTcKUvApaicgFki/tyYjGnMsCU=)
                          2: 4A7BCEDE833411ECA330C8B25A40D577.roa (hash: w7j8NF07MRPRcWLZHO+fmpCs8k7Jimz6EpCqZnbOkz8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 28 Apr 2024 11:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 842 (0x34a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36628E9AF/serialNumber=A8ED9FDC9769EF6D3741B9DDAE723D318165E750
        Validity
            Not Before: Apr 27 01:58:50 2024 GMT
            Not After : Apr 29 01:58:50 2024 GMT
        Subject: CN=662c5bda-c96a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:11:cc:b5:85:9c:4e:ad:f9:90:d1:75:f0:fe:
                    47:58:4d:b9:9b:42:be:92:23:eb:66:16:1d:c6:ec:
                    8b:60:ee:15:13:4f:26:63:e7:04:3f:ba:19:ce:9f:
                    34:c2:6c:f2:2b:8b:a6:8b:8b:b8:13:e7:ca:1d:8a:
                    e1:67:c6:0a:b2:01:16:60:55:d6:76:f5:04:45:90:
                    49:5d:fb:b7:10:74:da:0b:e5:7a:6c:da:72:fe:cd:
                    61:d7:01:1f:11:20:4c:40:94:f3:2a:5f:fd:12:48:
                    3d:78:e6:21:16:3b:33:d7:19:5f:2c:5f:da:af:3a:
                    8d:04:92:90:4a:bb:6b:81:a6:95:3f:73:3d:ba:88:
                    36:bc:3e:ef:e8:a5:4f:a7:5c:3f:fc:9f:18:16:8b:
                    6d:68:21:c3:c1:dc:5d:d8:84:d8:70:98:03:b5:34:
                    f2:06:8f:83:cf:0f:e6:7e:ab:b7:d3:a0:9b:ea:2f:
                    50:dd:cd:9a:5c:e4:cf:f1:cd:0c:da:fb:81:d0:94:
                    22:54:2f:10:b4:ed:7a:c4:d2:f3:bb:6d:27:86:62:
                    4a:8b:a0:2e:76:2e:29:a3:8e:28:86:db:65:9e:3b:
                    1a:e0:aa:11:30:fc:83:ef:a7:db:34:d2:cd:93:fe:
                    52:f5:6d:0c:8b:cb:e0:f8:c3:c9:f4:8e:0d:97:ef:
                    c6:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:7F:39:5B:02:BB:05:25:3A:5F:DD:D4:D5:01:72:74:45:8D:88:8A
            X509v3 Authority Key Identifier:
                keyid:A8:ED:9F:DC:97:69:EF:6D:37:41:B9:DD:AE:72:3D:31:81:65:E7:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO2f3Jdp7203QbndrnI9MYFl51A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628E9/FCDCD124833211EC890A0BAF5A40D577/qO2f3Jdp7203QbndrnI9MYFl51A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:18:3e:61:97:10:16:1f:90:28:af:86:45:c0:50:08:76:3a:
         20:6f:ae:21:d1:b2:81:ab:b0:bb:b3:ab:50:aa:fd:b3:9b:a1:
         05:c4:f6:38:e8:8a:6c:04:7d:55:5d:16:09:bb:f9:e9:cf:da:
         cf:a7:0e:2f:c5:9b:d4:fc:7c:b8:f6:7f:59:25:bb:88:b0:1a:
         58:9a:13:5c:34:66:65:01:4b:15:6a:2c:e8:c4:5d:82:52:13:
         02:8b:f7:c3:b6:f8:c0:c2:43:21:6e:9d:00:e9:39:92:10:28:
         32:4a:ff:9e:e3:95:b8:eb:86:6b:a9:f2:b0:45:1b:51:7e:7d:
         2d:9c:c1:16:7f:d8:3e:40:aa:97:f5:4a:b0:29:78:20:c7:0f:
         67:b5:1f:43:a8:a2:5f:87:0f:80:f7:03:36:3a:08:ca:97:f0:
         7e:6a:47:fc:7a:78:86:f0:46:3e:5d:c3:f6:a2:c3:48:d1:da:
         ef:3a:23:c0:d7:e2:2f:74:b1:6f:22:47:32:81:e4:48:3a:98:
         9d:73:d3:24:24:93:b7:00:a2:3d:69:23:e8:dd:33:51:a4:5a:
         71:fb:80:aa:6b:50:65:7f:74:8e:d6:a4:b7:04:fc:4a:3f:ab:
         a2:f3:9a:c7:78:ed:61:93:11:16:fd:07:54:3f:85:ab:52:ba:
         1d:2e:6d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:17:33 2024 by rpki-client on console-ams.rpki-client.org