Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.mft
File:                     BW6zzs3ua4NtH6CPCHznRGcD3qE.mft (raw, json)
Hash identifier:          Nw1fc6kRbrvCRVmXb1XAq+8H7c9XnJ5dhuAJV08CgQo=
Subject key identifier:   5E:26:32:89:F0:29:4E:6E:44:2C:71:E1:77:9F:3B:96:02:CE:18:0E
Authority key identifier: 05:6E:B3:CE:CD:EE:6B:83:6D:1F:A0:8F:08:7C:E7:44:67:03:DE:A1
Certificate issuer:       /CN=F3664036AF/serialNumber=056EB3CECDEE6B836D1FA08F087CE7446703DEA1
Certificate serial:       5B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BW6zzs3ua4NtH6CPCHznRGcD3qE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.mft
Manifest number:          5A
Signing time:             Wed 23 Oct 2024 02:55:01 +0000
Manifest this update:     Wed 23 Oct 2024 02:55:00 +0000
Manifest next update:     Fri 25 Oct 2024 02:55:00 +0000
Files and hashes:         1: BW6zzs3ua4NtH6CPCHznRGcD3qE.crl (hash: Mzk1BM7S4tn5qjrwZRjnRkK5OWf6qe++dIdVg7eOuSA=)
                          2: 66B953BA4D9311EFA7586846762E951A.roa (hash: byh4Eg9udfVVMXX0HCkdJJZ1KKKQasdGqUIYmXZmtrg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BW6zzs3ua4NtH6CPCHznRGcD3qE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Oct 2024 00:05:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664036AF/serialNumber=056EB3CECDEE6B836D1FA08F087CE7446703DEA1
        Validity
            Not Before: Oct 23 02:55:00 2024 GMT
            Not After : Oct 25 02:55:00 2024 GMT
        Subject: CN=67186585-6882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f4:78:42:13:f3:bc:ce:f8:8d:28:ed:fe:cf:
                    09:cf:8a:5a:eb:6d:11:4e:eb:37:39:90:75:56:66:
                    7c:0c:8e:a3:b8:b4:c6:5c:a3:61:9b:33:c8:d4:1b:
                    2f:26:d7:9f:dd:dc:90:a1:68:a1:1e:b8:80:5a:42:
                    df:c2:32:ea:fe:51:7c:1e:95:b2:6d:af:82:28:83:
                    6c:07:47:34:30:df:62:22:2c:92:3e:89:de:88:44:
                    b3:ca:57:f3:a1:67:90:b6:2e:2a:5b:04:0e:c0:09:
                    ff:9d:ef:77:27:3d:a2:c0:59:bd:62:49:e7:82:af:
                    e0:5b:24:a6:ce:28:9b:58:d5:a8:81:fe:81:6a:84:
                    28:e1:02:af:f0:4d:7c:31:3b:fe:9d:41:98:5e:aa:
                    f9:f6:26:ed:0c:94:62:46:a2:ea:50:0f:f9:16:d3:
                    16:f6:72:70:82:24:4b:0b:d3:de:a8:69:ca:ac:2e:
                    ac:99:12:f7:4d:de:80:8b:da:e8:db:39:14:6f:e0:
                    7d:38:cb:43:da:4b:2b:18:6b:68:58:92:d3:d3:52:
                    5b:1a:1b:6a:58:9a:51:c2:e7:7f:09:8d:19:33:aa:
                    05:b6:ea:f8:49:85:15:0f:4e:4b:b6:c5:5a:fe:74:
                    d6:50:eb:1a:e1:da:32:29:2b:be:0e:4e:b0:21:06:
                    34:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:26:32:89:F0:29:4E:6E:44:2C:71:E1:77:9F:3B:96:02:CE:18:0E
            X509v3 Authority Key Identifier:
                keyid:05:6E:B3:CE:CD:EE:6B:83:6D:1F:A0:8F:08:7C:E7:44:67:03:DE:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BW6zzs3ua4NtH6CPCHznRGcD3qE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664036/4840029A4D9211EF9858CABB762E951A/BW6zzs3ua4NtH6CPCHznRGcD3qE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:f0:a0:f0:d9:3a:f9:51:bf:b2:23:8f:4b:78:4e:d2:a8:50:
         dc:d7:e2:25:0b:11:cb:5b:e9:9c:11:05:7c:df:fd:12:c0:84:
         b0:6b:aa:9c:ad:05:75:78:aa:56:30:8d:c1:6a:c3:de:c2:75:
         cf:22:36:40:26:a0:f4:c0:7e:88:72:b0:1d:0e:2a:c4:26:a4:
         f5:00:4a:a3:d5:ae:4c:8a:81:fb:7b:32:61:60:68:8b:ff:4a:
         05:2c:93:34:3b:e4:2a:92:54:8c:21:9f:51:03:12:d2:56:28:
         6f:ed:d1:78:86:db:50:ee:fb:6d:9a:46:96:b5:0c:fb:75:32:
         cc:bb:eb:1d:d8:48:c8:79:74:ae:82:2a:a1:d7:3e:18:0e:a3:
         d0:b8:c7:db:9f:a2:b8:4b:f2:4d:0e:70:20:2d:88:9f:9c:1c:
         15:57:e6:7f:80:fc:db:b4:c4:f9:4b:5a:0e:93:0f:05:0e:89:
         10:a2:53:9f:2b:20:c8:bb:e2:b4:3a:51:d2:2c:8a:c3:fd:dc:
         f4:54:40:81:81:18:9c:31:46:54:33:37:ac:20:cc:5a:99:de:
         8c:1d:29:cf:44:f7:3a:c7:f1:a5:17:db:a1:c7:c0:99:b1:c0:
         93:c9:e3:5c:a1:c1:53:93:2e:ab:60:73:3a:eb:1d:f1:6c:d6:
         da:e0:6c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 04:00:57 2024 by rpki-client on console-fra.rpki-client.org