Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
File:                     mo0OmoAqT1sF0LmwiVg0TYdylpw.mft (raw, json)
Hash identifier:          NI5+Tq3cl5LKKkeotbYNniMIwnwLCpTKy6F3V6S9/lk=
Subject key identifier:   CE:C5:0F:F9:DA:94:5B:13:89:75:31:9E:C4:84:33:B2:47:EF:B9:72
Authority key identifier: 9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C
Certificate issuer:       /CN=F3664A2AAF/serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
Certificate serial:       0147
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
Manifest number:          0145
Signing time:             Tue 28 May 2024 02:22:59 +0000
Manifest this update:     Tue 28 May 2024 02:22:58 +0000
Manifest next update:     Thu 30 May 2024 02:22:58 +0000
Files and hashes:         1: mo0OmoAqT1sF0LmwiVg0TYdylpw.crl (hash: 4s8wYN2+3dSgOZJF/EKop1AF5+v8W6eY46wcPeW0aAk=)
                          2: FAD19878AF2811EEAD20B67C775412E6.roa (hash: KeZJVF5ZjLjEnIAV97HonutazbaviIucTY7DmHs4RBc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 May 2024 00:04:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664A2AAF/serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
        Validity
            Not Before: May 28 02:22:58 2024 GMT
            Not After : May 30 02:22:58 2024 GMT
        Subject: CN=66554003-31b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:54:8a:87:bf:33:d0:2c:d6:27:d0:f9:8d:94:
                    e0:34:96:d1:6d:90:6e:5c:ac:2d:67:0a:86:17:8c:
                    af:12:38:3f:cf:be:4d:21:0d:e8:bb:59:ec:09:dd:
                    36:07:91:ac:72:e6:df:f1:8c:c6:25:20:3b:c2:31:
                    24:3c:7e:dc:b4:d6:9b:19:ef:51:23:3d:0b:be:ed:
                    b6:13:22:ed:b4:10:e8:c9:86:0d:5e:e4:cf:b9:3b:
                    14:a3:e3:aa:51:e3:ad:f6:d4:3a:f3:d0:38:e7:fd:
                    e5:75:94:c5:b6:76:1f:7b:a6:17:a2:69:86:6a:2f:
                    2a:a4:63:f7:16:5e:4f:87:36:f3:53:ae:26:11:d1:
                    f9:5f:8c:12:fc:c9:32:ab:3a:f9:31:ec:44:87:90:
                    58:70:2a:62:fc:83:b9:5b:96:fb:31:d0:69:e5:19:
                    48:70:4e:36:21:66:c3:38:fa:c2:1b:0d:97:7b:3a:
                    8b:6b:61:5a:a0:8b:a0:2c:40:91:05:ad:88:3f:4b:
                    a8:20:dd:11:5d:09:7a:e6:61:fc:90:a7:45:32:03:
                    06:be:04:8f:37:c0:29:d8:77:bd:ce:8c:c9:19:07:
                    0f:7d:6c:f5:d4:57:73:05:1d:c7:af:59:a0:87:08:
                    53:a6:57:9d:58:3c:0a:bc:fe:c9:b9:f6:32:9b:71:
                    0c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:C5:0F:F9:DA:94:5B:13:89:75:31:9E:C4:84:33:B2:47:EF:B9:72
            X509v3 Authority Key Identifier:
                keyid:9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:41:a8:b4:da:de:13:e8:a3:da:73:48:83:f8:fa:23:57:a9:
         51:67:be:b4:20:27:f3:8b:f7:a9:65:98:07:cd:a5:09:97:7d:
         a4:6b:f1:9c:df:d0:83:25:88:25:d2:ca:74:ed:b6:ed:5f:f4:
         31:59:90:e4:f6:1a:a0:d9:0f:a8:85:52:a7:eb:e9:df:ac:be:
         19:2b:6a:26:e4:59:9e:41:3d:9a:f9:1c:a3:42:80:72:21:2f:
         ed:1b:76:d1:54:00:7a:da:b8:ae:2b:dd:1e:89:f1:d1:5f:0a:
         7f:7a:d9:0c:56:7a:f6:7e:9e:6c:18:f6:ed:b8:18:ea:74:fd:
         98:9f:a3:86:98:31:68:4d:1b:71:92:ad:f5:df:a4:18:bc:9e:
         21:0e:2a:36:1d:08:f6:96:a3:3d:b9:c0:a2:d4:16:2b:ff:cc:
         b7:ef:39:72:3b:ee:b4:b2:55:23:e2:be:cf:a9:97:35:a5:2a:
         11:0d:31:31:38:ba:18:c8:7d:cd:7d:ae:2d:c6:84:c7:f3:1b:
         1a:18:29:90:45:a9:9d:32:c0:70:ab:72:ab:6e:22:45:cf:30:
         73:15:16:b7:4a:b2:c7:7f:d0:1a:82:ee:57:82:b8:9c:1c:18:
         0c:5b:61:16:2f:3f:0d:38:fb:f2:89:49:be:33:dc:6c:8e:d6:
         50:2b:2b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 28 04:28:55 2024 by rpki-client on console-ams.rpki-client.org