Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
File:                     GB73GjT5LPYtzRHXkAfFhUg5was.mft (raw, json)
Hash identifier:          LgyTPeHfrCv0CE415OkjrSqdQF1297/+qWgox9oQ0SA=
Subject key identifier:   F6:8C:E1:89:8A:CF:96:A2:74:D2:08:21:90:39:6F:42:15:79:4D:31
Authority key identifier: 18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB
Certificate issuer:       /CN=F3668231AF/serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
Certificate serial:       09EB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
Manifest number:          09E9
Signing time:             Fri 03 May 2024 00:47:00 +0000
Manifest this update:     Fri 03 May 2024 00:47:00 +0000
Manifest next update:     Sun 05 May 2024 00:47:00 +0000
Files and hashes:         1: GB73GjT5LPYtzRHXkAfFhUg5was.crl (hash: 28EaflJ2rCh1G1vw444qwMXPAA1N/RsZLqRmUJSdaGE=)
                          2: 99C2D1746B9011E7A18C6069F8AEA228.roa (hash: xVFvLTZ6B74UBRcRd1aRKe2f4QIjw1iEzmityoLx5VY=)
                          3: 355AD4A683AE11E98A55D62AF8AEA228.roa (hash: yQuqYo4PP7qzl5R5FLB1AGc649ab7ChkeEyvocc2AL0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2539 (0x9eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668231AF/serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
        Validity
            Not Before: May  3 00:47:00 2024 GMT
            Not After : May  5 00:47:00 2024 GMT
        Subject: CN=66343404-349b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:46:2f:c6:20:4b:26:54:df:6d:c6:0f:66:
                    8f:4a:9f:f0:ce:0c:f9:27:e9:a3:12:c5:1a:df:4a:
                    e1:b3:82:58:d6:35:a9:cf:55:6e:95:98:52:48:3f:
                    c9:4c:5a:ac:91:f2:88:00:da:4d:35:e1:74:a8:20:
                    12:d1:65:81:80:9d:12:e4:c4:80:d4:cc:78:57:b3:
                    7c:d6:34:c5:37:92:99:93:3c:90:ce:28:b1:4a:73:
                    57:a8:23:3a:c0:0a:3f:1d:40:5f:45:5e:b5:c9:b7:
                    b5:b6:e3:35:de:9a:e8:47:5c:c4:3d:52:15:c3:92:
                    a0:c2:9c:f5:2c:f6:a9:24:34:95:63:57:63:73:05:
                    55:d3:cf:41:d5:83:22:35:3b:c5:c7:9d:9f:49:18:
                    5d:86:a0:49:47:54:b8:c9:0c:68:1f:a5:8d:af:88:
                    21:bd:64:ef:28:9d:af:57:98:b7:29:68:cf:ea:10:
                    5b:4e:8f:62:c4:43:21:c1:c5:da:a7:71:a8:eb:4d:
                    46:d4:52:38:30:48:84:53:9f:4f:f5:0c:9f:2c:7f:
                    86:46:93:e4:f8:2e:1f:d8:24:35:9a:2c:c3:49:1d:
                    43:35:bc:e3:cd:7f:93:88:70:c8:ae:5e:94:99:9c:
                    cc:08:81:62:d2:ff:a0:59:c5:66:9a:ac:d5:1d:e7:
                    61:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:8C:E1:89:8A:CF:96:A2:74:D2:08:21:90:39:6F:42:15:79:4D:31
            X509v3 Authority Key Identifier:
                keyid:18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:38:eb:1d:4f:66:4d:07:0d:78:db:b7:a3:24:fc:f3:a4:c4:
         e4:d0:90:38:5b:fc:92:cb:2b:59:cb:ba:d4:17:f3:43:68:f0:
         30:3b:09:d8:7a:f1:c2:83:39:df:6d:83:10:42:ed:66:83:cf:
         8a:30:44:23:ff:a0:98:ef:ae:e7:53:b2:e4:1b:55:f0:42:b9:
         a4:a3:e8:7d:27:39:1f:9c:04:2a:5a:fc:9e:5e:9c:56:fb:5e:
         ea:6b:4d:f7:a6:01:41:9a:90:e7:da:4b:50:10:cc:b6:d9:83:
         65:cc:c5:d4:ad:4a:38:74:66:e9:da:70:73:19:dc:57:98:16:
         bf:ae:66:88:4d:71:06:8f:47:3f:de:4f:9a:6d:48:7a:d5:7c:
         1b:bd:93:e4:8c:6d:a5:3e:c8:72:61:21:12:66:e9:16:24:00:
         46:45:47:4f:1a:9a:ce:e6:a1:62:ed:c7:d4:93:55:ea:79:8a:
         40:2b:6d:b8:ab:3d:c4:91:4b:f2:8d:8c:37:40:17:35:de:7e:
         30:a7:21:22:aa:a0:ed:6d:54:85:2b:c6:1d:6f:c9:e1:a5:17:
         cb:20:8e:84:e5:24:9c:9a:7f:12:ea:c9:6e:43:d5:3b:69:a2:
         58:76:96:1e:97:23:bf:31:80:bc:7e:b8:f0:94:de:3c:7b:08:
         b8:62:89:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 01:29:40 2024 by rpki-client on console-fra.rpki-client.org