Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
File:                     PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft (raw, json)
Hash identifier:          y+UPWRtfz0yNBpQdF2y/oL49t7788V2BW4m1QRNKlh8=
Subject key identifier:   0D:B7:48:F8:01:D6:13:EB:94:C5:7E:59:10:1F:5F:E1:73:DC:7D:57
Authority key identifier: 3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B
Certificate issuer:       /CN=F3666CFFAF/serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
Certificate serial:       021E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
Manifest number:          021E
Signing time:             Fri 22 Nov 2024 02:18:35 +0000
Manifest this update:     Fri 22 Nov 2024 02:18:35 +0000
Manifest next update:     Sun 24 Nov 2024 02:18:35 +0000
Files and hashes:         1: PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl (hash: Dl2kDymIrOnhcYc/RT+HVMRo/ax8IGFZPruwugP3c6s=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAF/serialNumber=3E09D5C3AC27BFF95D8CE5AF00411A017680654B
        Validity
            Not Before: Nov 22 02:18:35 2024 GMT
            Not After : Nov 24 02:18:35 2024 GMT
        Subject: CN=673fe9fb-91a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:65:60:27:20:2b:3a:36:1f:5e:d4:0f:d1:
                    16:ee:2f:e4:0e:46:bc:0c:8b:e1:8c:b2:a0:f6:1b:
                    d6:68:da:5e:64:69:4c:e2:55:b2:d0:81:6d:46:a2:
                    28:30:d8:ba:27:78:bd:d6:ae:cd:95:fb:3a:e4:a8:
                    88:7f:12:9e:05:98:18:c8:9d:a5:97:11:de:07:38:
                    f9:3f:c5:c7:6e:46:d1:88:c9:79:99:af:5e:a1:8b:
                    7e:6c:a8:4d:4a:10:e1:7c:61:b7:57:fe:77:29:05:
                    29:9f:1b:15:71:d4:58:8a:6d:d6:c1:c0:89:fa:87:
                    2f:ff:c8:ca:c7:9f:d2:3c:b6:52:ed:6a:09:98:50:
                    a6:70:31:4e:9e:9f:fa:ce:3a:8b:75:d6:7d:ee:31:
                    5a:ce:40:59:84:fc:61:76:07:80:bc:e1:f8:64:34:
                    a6:a7:23:f3:71:49:9a:ed:99:c1:98:47:66:5c:e4:
                    b2:e6:8d:25:cd:0e:9c:55:47:43:c0:d4:68:17:bf:
                    03:35:e8:5e:af:f0:da:a5:a0:3c:4b:85:80:a7:1e:
                    1b:b1:10:45:84:c3:34:3e:27:2d:81:4f:18:57:b9:
                    c5:56:42:0c:85:c1:cc:9d:13:18:ae:e1:f5:b9:fb:
                    db:f2:1f:b8:84:72:53:8a:7e:46:18:d0:7c:1c:ae:
                    cc:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B7:48:F8:01:D6:13:EB:94:C5:7E:59:10:1F:5F:E1:73:DC:7D:57
            X509v3 Authority Key Identifier:
                keyid:3E:09:D5:C3:AC:27:BF:F9:5D:8C:E5:AF:00:41:1A:01:76:80:65:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PgnVw6wnv_ldjOWvAEEaAXaAZUs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/0176B1000AA011EE910F9E3A4AD9E6FC/PgnVw6wnv_ldjOWvAEEaAXaAZUs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:4d:fb:8a:6c:8c:5d:b1:c7:d9:f5:8a:6c:af:82:be:0d:ec:
         8d:4c:bd:b3:9a:a6:79:54:98:08:31:da:24:82:6c:a3:5b:c6:
         66:9b:5b:d7:ea:a0:84:ae:5d:36:b3:43:62:bf:3e:95:83:1e:
         f8:39:70:9f:6b:7c:c4:d6:04:67:91:83:90:13:62:06:76:92:
         1c:71:bf:5a:25:62:dc:24:22:60:33:a5:d6:de:32:70:a1:3d:
         e3:29:34:7b:5d:c2:c3:82:c1:ad:33:c2:6e:89:86:bf:f8:7a:
         b8:b3:4f:ed:15:05:4c:d8:32:4b:6f:36:e3:2e:32:14:ae:ab:
         64:47:77:77:71:67:93:fa:c0:36:d5:8d:fd:dd:f8:3e:79:80:
         3a:61:c0:af:31:2f:96:3e:69:99:14:55:6a:1e:17:d2:d2:e5:
         fa:5b:8f:b0:50:96:23:ee:65:b7:f1:1d:30:38:f3:7e:7e:46:
         bd:de:35:0f:d3:e8:ea:ea:3d:bb:ca:ee:69:d1:f8:58:17:24:
         e1:ac:d1:b1:3e:7e:57:19:75:cd:d5:38:41:ef:02:35:68:4f:
         9b:8a:6e:76:c0:f6:b6:8d:6c:cc:ba:f3:8f:2e:e7:ef:26:43:
         e5:73:19:44:e5:b8:25:e1:72:3c:94:eb:1b:5d:8c:05:30:99:
         17:e8:2c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:41 2024 by rpki-client on console-ams.rpki-client.org