Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
File:                     XKOJ-4BR0kErpd-AHYmyys5XJZw.mft (raw, json)
Hash identifier:          Jw+w365WaBumopdOHcAquDvdt/tupLcSKT3x89tfzx4=
Subject key identifier:   43:A6:5D:00:8E:64:4A:E5:DB:6A:41:90:55:39:90:CD:BB:31:AE:AF
Authority key identifier: 5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C
Certificate issuer:       /CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
Certificate serial:       01F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
Manifest number:          01F7
Signing time:             Wed 01 May 2024 02:00:18 +0000
Manifest this update:     Wed 01 May 2024 02:00:18 +0000
Manifest next update:     Fri 03 May 2024 02:00:18 +0000
Files and hashes:         1: XKOJ-4BR0kErpd-AHYmyys5XJZw.crl (hash: Phr1ZIFhtkpBSeO8CaTf7KVzYPeqjMuMZdS7R0oQznk=)
                          2: DC9F0AEE94B111EDB5B35AEFF1222468.roa (hash: cBfEg9usM7R7JAg38/WBIq6OqmrPjq8Iy9i0geJ6WGM=)
                          3: FF42A1988F3211ED86A292BAF1222468.roa (hash: x+yQ5t8NNejDnfE2F13L3hSaxA+eL6ATRpRXB3MRfYU=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 03 May 2024 00:04:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662DABAF/serialNumber=5CA389FB8051D2412BA5DF801D89B2CACE57259C
        Validity
            Not Before: May  1 02:00:18 2024 GMT
            Not After : May  3 02:00:18 2024 GMT
        Subject: CN=6631a232-cb6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:2a:18:68:7f:f4:47:fe:4f:9d:7d:5a:9c:
                    7c:ca:ee:6c:85:24:e2:2d:ea:2c:94:e3:c4:49:ec:
                    01:5f:36:83:1d:b0:2a:74:ac:93:d3:de:a4:4b:7d:
                    ae:b0:f1:d7:5a:c0:d3:e6:2d:7f:71:79:b8:89:a3:
                    48:a6:2e:fd:35:82:68:75:65:20:bb:e2:26:60:1b:
                    86:fd:3f:89:69:6d:b6:de:34:05:9b:dd:22:b1:1a:
                    16:aa:7c:92:21:f9:17:f6:15:7a:75:1e:41:f5:00:
                    d8:3e:dd:6b:0f:5c:f7:06:0d:1b:ef:ea:8c:14:65:
                    33:13:06:7a:24:f8:81:65:a7:9b:b5:0a:c2:f3:74:
                    c1:81:14:70:dd:13:7c:0a:e3:42:4f:73:b6:97:c5:
                    da:d9:06:28:b1:55:30:bd:a2:87:a4:d4:ac:ef:b9:
                    44:c8:b6:00:7b:68:cd:bd:5f:9f:9f:1c:8f:36:80:
                    d3:c5:0b:8f:9c:e6:7f:61:d7:10:af:0e:8c:55:20:
                    8b:39:44:fe:0f:dc:30:ce:2f:22:3b:92:05:ac:cf:
                    c0:0a:d2:2e:f3:3b:6c:13:ee:85:db:d7:e9:d7:30:
                    b8:c0:44:9d:a0:08:42:23:2a:60:72:d9:5e:18:95:
                    1b:9a:ad:3e:d2:b6:ae:6d:7f:6d:2e:13:f7:80:9f:
                    a6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:A6:5D:00:8E:64:4A:E5:DB:6A:41:90:55:39:90:CD:BB:31:AE:AF
            X509v3 Authority Key Identifier:
                keyid:5C:A3:89:FB:80:51:D2:41:2B:A5:DF:80:1D:89:B2:CA:CE:57:25:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKOJ-4BR0kErpd-AHYmyys5XJZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662DAB/048F88108F3211EDB0EEF1B7F1222468/XKOJ-4BR0kErpd-AHYmyys5XJZw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:55:c1:75:de:71:23:3e:0b:02:24:ff:88:1b:ee:8e:a0:96:
         18:54:77:58:c1:6f:c1:f9:e1:7e:71:74:89:9a:50:1e:17:b2:
         b3:3a:90:7f:bd:f9:6c:1c:03:60:65:6c:e5:df:1d:47:5d:ee:
         ef:f9:b6:c0:92:d8:65:31:05:31:bc:f6:6d:52:61:3f:ef:f5:
         b5:01:af:ea:3c:bc:5f:ac:c6:d8:9f:32:34:08:60:a3:6b:d3:
         40:74:ee:1e:0f:8b:7a:31:6d:93:55:1f:cf:eb:d8:3f:07:96:
         89:4a:4e:5d:b8:4b:36:c7:1d:9c:31:05:fb:ea:90:14:1e:67:
         20:b2:5c:df:8a:8f:bc:ce:52:af:eb:95:ac:59:bf:86:94:22:
         b0:c0:73:1c:ae:b5:22:2e:63:e8:f2:8e:77:47:86:48:a9:7e:
         e3:e3:d8:8e:34:c5:98:6c:a8:7a:0a:f3:ea:34:5d:81:11:3d:
         a0:da:3f:e1:4d:92:a7:a2:ef:91:ea:ef:b5:51:c9:82:d2:49:
         1b:6e:26:ef:2f:9d:ae:94:53:66:bd:62:9d:94:8c:c9:f6:43:
         a8:e1:12:ac:36:69:49:1c:05:00:a5:f2:51:ef:a1:dc:fe:f9:
         29:ae:36:a7:2e:c6:8a:dc:60:e8:5e:f2:70:c7:5f:6e:f3:5a:
         12:fa:b1:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 02:46:10 2024 by rpki-client on console-ams.rpki-client.org