Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
File:                     NaE6RzFmxUdFBUsur-85WeOenW8.mft (raw, json)
Hash identifier:          DFgNVVofXSFjC4hrQpVcZyX+rBrFJu0EgfXYiDiM88o=
Subject key identifier:   C5:6B:94:8A:9A:8D:52:88:92:29:58:B3:FF:77:36:74:44:64:94:C3
Authority key identifier: 35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
Certificate issuer:       /CN=F3666101AF/serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
Certificate serial:       0335
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
Manifest number:          0333
Signing time:             Sat 04 May 2024 01:44:04 +0000
Manifest this update:     Sat 04 May 2024 01:44:04 +0000
Manifest next update:     Mon 06 May 2024 01:44:04 +0000
Files and hashes:         1: NaE6RzFmxUdFBUsur-85WeOenW8.crl (hash: JZxyRmBkHukCWu22MOJElMiDsGVjnHUARNUEQVIasm0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 821 (0x335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666101AF/serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
        Validity
            Not Before: May  4 01:44:04 2024 GMT
            Not After : May  6 01:44:04 2024 GMT
        Subject: CN=663592e4-4008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:1b:54:72:5c:36:bb:0d:16:0b:fe:e2:15:2d:
                    98:f9:18:df:55:85:09:21:33:78:40:c6:40:71:03:
                    22:f8:3b:22:af:7f:06:d5:d8:7f:82:58:73:8a:d1:
                    d0:cf:1e:99:e6:bf:8c:e4:f2:35:8e:d2:e6:84:b7:
                    93:4a:0d:fa:f7:4d:a6:f6:33:cf:ec:b7:69:7f:6c:
                    18:39:6f:d2:d7:13:88:26:e6:5a:da:3d:9b:95:ee:
                    d9:f8:18:49:72:35:4e:6a:9b:43:13:88:b7:b2:39:
                    82:f7:42:77:bf:c4:68:05:94:86:1d:80:cd:39:0d:
                    0d:51:67:53:c1:7c:66:53:ca:44:b6:36:b3:bd:7a:
                    64:a2:49:2b:0a:bf:89:a7:63:a5:52:63:37:25:10:
                    21:c5:bf:25:b8:18:81:52:da:c1:54:80:15:e2:ba:
                    c8:15:37:f0:e5:ae:28:80:f4:b4:ea:af:07:e6:38:
                    69:46:90:ec:81:f9:20:0a:37:7e:91:2b:4b:fd:9b:
                    8b:20:ab:19:f4:f9:03:bd:27:63:dd:fa:56:7d:c6:
                    36:52:52:d2:cb:27:84:ba:eb:e4:53:81:1c:da:ac:
                    85:60:69:64:b7:fa:df:55:87:5c:c7:8f:1c:31:f0:
                    6c:df:b2:97:c5:4c:3e:d5:f3:34:d6:55:01:3d:67:
                    72:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6B:94:8A:9A:8D:52:88:92:29:58:B3:FF:77:36:74:44:64:94:C3
            X509v3 Authority Key Identifier:
                keyid:35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:79:01:1a:13:a2:a7:a3:9d:61:af:e0:b7:78:c2:94:18:ad:
         e2:cc:6d:7c:84:b7:cd:37:f2:07:70:60:55:3b:38:04:0f:de:
         b3:95:11:cb:e7:13:cd:1e:7b:f8:52:93:7b:d1:0a:d5:f5:27:
         aa:1f:ed:b2:3f:a4:ee:13:1f:4a:19:4e:14:40:18:85:2d:c6:
         4e:0d:59:17:31:85:0b:e9:99:c0:a5:de:8b:61:e0:7f:9b:1b:
         87:1d:9e:c6:f7:15:45:ee:fd:ca:fa:a5:68:9a:47:50:c7:35:
         d2:f1:41:4c:1b:89:75:a3:29:4b:0e:5f:04:1d:be:46:de:a5:
         75:5b:cd:a0:d0:f2:af:c8:fd:0f:c2:9b:89:7b:e4:8b:63:07:
         01:3e:d7:40:35:48:db:fb:43:79:01:74:2d:6b:5c:47:64:4d:
         fa:aa:2e:02:77:f6:bc:8f:70:01:99:a3:02:e2:92:78:93:69:
         90:5a:7a:ea:6d:5f:8e:64:76:fe:34:48:a0:0a:ef:ad:4f:1c:
         77:64:81:bf:56:d9:cb:8a:33:ee:b8:da:5e:b9:8b:b4:a0:eb:
         42:d5:9c:8a:a7:16:2c:02:02:c4:c2:89:23:b3:41:2d:4b:da:
         54:3d:fa:d7:57:f5:38:40:45:e0:2a:52:4d:c6:a6:27:be:c7:
         92:f6:90:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:06:00 2024 by rpki-client on console-ams.rpki-client.org