Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
File:                     lya7b0ngx_FVN-L2-fJmCV1OpJE.mft (raw, json)
Hash identifier:          VwVkOVei2OonRUbKQyate+cGLRo+J9odMmD2E7oGZPs=
Subject key identifier:   A1:CD:48:A3:70:4B:99:9B:06:1F:25:C6:78:99:0B:A8:81:78:D0:11
Authority key identifier: 97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91
Certificate issuer:       /CN=F3666CFFAR/serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
Certificate serial:       0221
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
Manifest number:          0221
Signing time:             Sun 24 Nov 2024 02:17:05 +0000
Manifest this update:     Sun 24 Nov 2024 02:17:05 +0000
Manifest next update:     Tue 26 Nov 2024 02:17:05 +0000
Files and hashes:         1: lya7b0ngx_FVN-L2-fJmCV1OpJE.crl (hash: VvoCTBGJjhCbn41/WQtZI4V8I7nV8OhT361xxK0Snxs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                          rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 545 (0x221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666CFFAR/serialNumber=9726BB6F49E0C7F15537E2F6F9F266095D4EA491
        Validity
            Not Before: Nov 24 02:17:05 2024 GMT
            Not After : Nov 26 02:17:05 2024 GMT
        Subject: CN=67428ca1-b3cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8d:63:b5:ad:07:a7:87:ff:e9:ea:6e:f8:c1:
                    42:32:ca:03:15:92:17:f5:a3:33:95:45:09:42:19:
                    93:6e:ce:f2:9a:b8:19:0e:dd:3d:8a:bf:b5:e0:b9:
                    7e:f7:89:f0:37:36:7f:d5:b4:dd:bb:87:a6:bd:68:
                    f5:68:b5:7c:72:f9:7e:a3:e6:bf:c2:0b:e0:e1:b1:
                    b5:f0:fe:37:25:84:46:c8:2c:c9:0e:6f:96:dd:3e:
                    7c:d4:ba:a6:ed:6e:96:88:d4:89:1a:21:ee:68:cd:
                    89:34:16:33:dc:5d:93:66:da:ba:cf:e0:c7:ea:9c:
                    3d:ae:5a:1b:61:7f:e8:c0:f0:a1:1f:c0:a8:07:7e:
                    ee:7b:30:ce:a2:b7:ec:f3:5a:1c:ea:d0:9d:98:4b:
                    0d:81:e7:af:e8:72:34:bf:98:f2:16:77:4c:c5:d9:
                    81:be:fb:22:be:44:03:6f:9f:70:f2:e2:07:6d:c4:
                    e8:23:96:ba:e4:a7:25:db:0a:45:c8:85:e5:d9:5a:
                    0d:5d:4d:9b:73:80:b3:e4:74:67:51:dd:12:ff:68:
                    95:4f:52:ad:e2:0e:27:61:bc:43:cb:62:5a:08:a0:
                    ae:3a:d3:dd:93:39:22:db:3b:08:da:b1:e9:a4:e3:
                    1d:78:76:ed:6c:33:e6:a5:16:8f:0d:24:f2:18:29:
                    83:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CD:48:A3:70:4B:99:9B:06:1F:25:C6:78:99:0B:A8:81:78:D0:11
            X509v3 Authority Key Identifier:
                keyid:97:26:BB:6F:49:E0:C7:F1:55:37:E2:F6:F9:F2:66:09:5D:4E:A4:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lya7b0ngx_FVN-L2-fJmCV1OpJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666CFF/1EEE24660AA011EEBF2AF13A4AD9E6FC/lya7b0ngx_FVN-L2-fJmCV1OpJE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:76:58:fe:ef:a0:24:90:5f:9c:01:f1:62:2f:06:a3:84:d3:
         75:f8:bb:2c:7e:72:f6:ad:c0:ea:64:42:ea:d4:ee:1c:0b:46:
         84:1f:d5:4b:38:70:a4:7e:59:2e:2d:c6:ee:ad:b2:d6:97:0d:
         4e:21:7c:3f:bc:8a:8b:cf:d0:bf:7a:61:10:59:01:d4:66:8c:
         60:6c:dd:9e:0d:21:ed:1b:da:9e:ef:58:15:3c:e8:3f:d2:4a:
         8e:66:e5:57:b6:3d:2d:0e:ec:53:09:45:4f:27:88:7f:d3:00:
         65:72:24:8b:56:33:9a:25:07:df:2f:a9:5b:d8:09:5f:f5:7c:
         8a:c2:2a:05:cd:9e:45:6f:e3:38:71:2a:2a:6e:56:da:b9:85:
         29:2f:f6:a7:d5:3b:9a:87:ef:0a:5c:50:be:48:90:7a:75:be:
         35:73:78:0a:d3:40:e2:15:da:e9:cd:d6:80:6f:24:bc:1a:f7:
         42:05:46:8c:fb:1a:88:82:20:ca:03:bb:21:22:4d:e9:69:a8:
         be:c8:24:f7:6a:53:ed:ce:f8:64:2e:5a:77:4e:a0:a1:52:84:
         06:e0:2e:08:36:35:48:5a:cd:14:9c:92:da:08:b0:f6:1a:7c:
         f0:66:c7:63:49:b8:fc:56:57:18:f6:8f:88:5c:0f:63:0b:ec:
         6a:3c:20:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:29:36 2024 by rpki-client on console-fra.rpki-client.org