Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
File:                     GB73GjT5LPYtzRHXkAfFhUg5was.mft (raw, json)
Hash identifier:          EbmqrP+StcaSDrToT87lfSrpkCD28b7p1juxWaB5bHY=
Subject key identifier:   C3:22:7F:3A:98:14:49:D6:DB:28:7F:A8:BC:C1:D4:53:BD:A9:F0:A6
Authority key identifier: 18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB
Certificate issuer:       /CN=F3668231AF/serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
Certificate serial:       0ABC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
Manifest number:          0ABA
Signing time:             Sun 24 Nov 2024 00:51:23 +0000
Manifest this update:     Sun 24 Nov 2024 00:51:23 +0000
Manifest next update:     Tue 26 Nov 2024 00:51:23 +0000
Files and hashes:         1: GB73GjT5LPYtzRHXkAfFhUg5was.crl (hash: lirge12nNdtdsNP/g6yHfgwF2KsfyYZApYfZU8d2YVA=)
                          2: 99C2D1746B9011E7A18C6069F8AEA228.roa (hash: xVFvLTZ6B74UBRcRd1aRKe2f4QIjw1iEzmityoLx5VY=)
                          3: 355AD4A683AE11E98A55D62AF8AEA228.roa (hash: yQuqYo4PP7qzl5R5FLB1AGc649ab7ChkeEyvocc2AL0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2748 (0xabc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668231AF/serialNumber=181EF71A34F92CF62DCD11D79007C5854839C1AB
        Validity
            Not Before: Nov 24 00:51:23 2024 GMT
            Not After : Nov 26 00:51:23 2024 GMT
        Subject: CN=6742788b-d23b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f3:1e:47:1c:8c:40:ee:e4:21:ba:57:a6:d7:
                    1c:af:d7:6a:f7:52:fa:4a:28:52:4e:d6:7b:ac:ee:
                    b1:f5:8e:f3:2d:54:35:00:e1:17:6a:d9:78:51:80:
                    40:45:de:94:d1:47:5c:4e:de:38:d1:51:a3:30:0e:
                    84:08:1b:d8:5a:7f:fc:58:af:13:f4:1c:a4:b3:cc:
                    96:48:91:f3:22:9a:f3:62:6a:3b:db:d9:d8:c7:95:
                    bd:b2:78:1e:73:1f:de:1b:7d:3f:d8:48:d3:a9:65:
                    cc:2c:d7:13:e5:2a:22:01:2b:7a:31:4b:ef:93:80:
                    6c:f0:92:7f:29:4f:67:3b:d1:bd:14:68:38:c0:e3:
                    88:d0:20:08:ac:1f:71:4f:b0:9c:99:e7:31:65:99:
                    7e:3b:c0:4d:cc:96:08:f9:8f:72:b2:8a:30:69:ca:
                    d3:09:9a:f6:98:33:c0:8b:cc:03:56:16:f6:c0:00:
                    6a:b2:4e:24:6b:16:40:47:d7:d4:4a:2c:8f:2c:83:
                    e6:c0:88:ca:02:fe:1d:36:33:43:f3:ef:f3:f7:df:
                    e1:9c:b7:a6:6d:9d:8f:0e:b9:a1:5d:79:55:ad:a1:
                    97:43:3b:a7:ee:c9:d5:c5:64:d6:25:fe:7f:3d:48:
                    08:6e:9c:e6:cd:2c:e7:de:e8:ee:44:82:e9:1e:77:
                    29:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:22:7F:3A:98:14:49:D6:DB:28:7F:A8:BC:C1:D4:53:BD:A9:F0:A6
            X509v3 Authority Key Identifier:
                keyid:18:1E:F7:1A:34:F9:2C:F6:2D:CD:11:D7:90:07:C5:85:48:39:C1:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GB73GjT5LPYtzRHXkAfFhUg5was.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/3AA8BA206B8E11E793C1C565F8AEA228/GB73GjT5LPYtzRHXkAfFhUg5was.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:fc:de:d0:fb:ab:8e:d7:bc:94:91:ab:21:7a:a4:f0:f1:08:
         57:be:53:59:ec:72:3b:69:cf:d7:8e:b7:e9:08:fe:dc:c1:4e:
         1e:96:43:ce:ca:f9:3f:fc:bb:4b:d4:57:7f:97:fd:80:dd:61:
         f0:4d:2b:ca:97:fb:0e:aa:c8:27:54:63:73:c2:89:61:8d:87:
         2f:44:29:ed:f0:5c:0a:13:5a:08:fa:e7:6a:d0:16:af:6f:2d:
         f8:92:7d:39:59:8b:81:03:51:f3:22:66:53:da:37:8f:5e:d9:
         1b:cb:62:b3:be:f2:79:ac:85:0c:6b:14:f7:51:8a:83:ac:2a:
         3c:cb:51:c6:03:ad:d8:6a:66:c1:62:a8:0c:a8:c5:ec:8f:b6:
         0b:d6:47:a8:e0:41:4e:1d:de:3b:cb:58:51:9b:19:79:3e:4a:
         3a:72:44:81:95:b7:79:aa:16:b9:9b:11:47:87:43:40:d5:e2:
         88:4d:64:1b:f6:8b:00:fd:24:b3:f6:61:7a:f2:91:6b:83:f4:
         ed:58:e2:69:f4:67:25:3e:12:13:c9:50:92:26:ad:3e:db:de:
         1d:4b:99:4f:90:6e:65:49:18:e2:2d:77:17:19:73:05:2d:25:
         18:9f:ff:bf:2e:22:e3:5c:c2:c4:92:e5:b2:d3:c7:db:40:51:
         0f:ba:08:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:14 2024 by rpki-client on console-fra.rpki-client.org