Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
File:                     TFQzRWcaPQxAiChKkfx3-2zGsGg.mft (raw, json)
Hash identifier:          7KXSiY9AW1+ANWxUhgtgywK1YHXttr6o56Eq/nw2K4w=
Subject key identifier:   1A:EC:D2:65:BC:8D:CE:56:7A:42:E4:52:02:58:1D:DD:89:87:2F:BC
Authority key identifier: 4C:54:33:45:67:1A:3D:0C:40:88:28:4A:91:FC:77:FB:6C:C6:B0:68
Certificate issuer:       /CN=F3668231AR/serialNumber=4C543345671A3D0C4088284A91FC77FB6CC6B068
Certificate serial:       09EA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
Manifest number:          09E9
Signing time:             Sun 05 May 2024 00:46:59 +0000
Manifest this update:     Sun 05 May 2024 00:46:58 +0000
Manifest next update:     Tue 07 May 2024 00:46:58 +0000
Files and hashes:         1: TFQzRWcaPQxAiChKkfx3-2zGsGg.crl (hash: G0LuVN9Iv6xU3KqoaOxvgrjiRscs/6gDUHV3f2zASy0=)
                          2: DA08B89A6B8E11E7952D2166F8AEA228.roa (hash: rve7QOec9FqmRJKLI6WNqhqnq4CSIGF+XgPlE64aa9A=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
                          rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2538 (0x9ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668231AR/serialNumber=4C543345671A3D0C4088284A91FC77FB6CC6B068
        Validity
            Not Before: May  5 00:46:58 2024 GMT
            Not After : May  7 00:46:58 2024 GMT
        Subject: CN=6636d703-2461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b1:68:40:a5:e0:f2:0b:34:21:97:5a:78:2b:
                    4f:98:04:3d:06:59:af:b4:11:13:95:4d:39:61:17:
                    e4:4e:48:50:f3:f6:a6:d7:fc:94:e5:68:eb:dd:d9:
                    cd:32:46:0c:67:71:9e:8a:90:dd:13:fd:32:d4:6e:
                    b5:95:81:d2:79:30:36:c7:1d:6e:9c:2d:b4:20:ba:
                    2d:a5:eb:39:b3:56:ff:e7:1a:36:0c:d3:ce:5b:f4:
                    56:79:b1:6a:6e:ed:63:2d:79:b0:52:af:c4:2b:2c:
                    5f:00:12:ff:c5:e6:72:3c:3c:6d:5f:29:2f:5b:1e:
                    3c:6d:88:29:4b:24:93:83:39:b0:e0:54:6e:7a:df:
                    05:ce:4e:bd:86:29:e8:86:94:fe:cb:bb:81:7b:37:
                    fc:cc:8a:93:b7:b6:f4:02:94:3b:c7:04:93:15:50:
                    a9:c9:ad:3d:9c:64:b3:b9:ad:c5:40:c4:42:87:55:
                    99:a7:f6:41:20:e2:cc:e4:ab:86:cc:7e:56:90:77:
                    fb:4a:87:b7:0b:7a:0f:41:13:34:ec:d8:39:cb:0b:
                    b2:ea:ed:02:0c:0c:5d:da:d4:95:4e:29:0a:97:36:
                    fd:6d:ad:29:87:ea:08:d3:ad:b6:77:f0:0d:bb:60:
                    a2:3c:29:7d:f2:63:02:07:81:6b:ed:22:3a:2e:1a:
                    9e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EC:D2:65:BC:8D:CE:56:7A:42:E4:52:02:58:1D:DD:89:87:2F:BC
            X509v3 Authority Key Identifier:
                keyid:4C:54:33:45:67:1A:3D:0C:40:88:28:4A:91:FC:77:FB:6C:C6:B0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TFQzRWcaPQxAiChKkfx3-2zGsGg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668231/7002A3AC6B8E11E79C20EC65F8AEA228/TFQzRWcaPQxAiChKkfx3-2zGsGg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:09:fe:55:0f:7a:c2:43:30:bb:e4:9e:d0:66:05:32:96:da:
         72:52:47:c3:0b:d6:58:c6:23:92:34:dc:2c:03:29:73:c8:6e:
         1a:78:e8:e3:51:8f:ff:29:d9:6e:85:fc:48:f9:10:6f:bc:a9:
         fb:43:4f:65:35:a3:1d:19:6e:7c:a2:3c:e5:7b:ca:f0:32:ea:
         ae:67:12:0d:2a:fb:5d:f1:53:dd:76:e8:92:79:c6:37:04:67:
         43:c9:4d:62:de:e6:9d:1a:59:07:7e:86:2b:3b:6b:f4:57:1a:
         08:b9:ca:ce:ff:d8:23:b6:ff:bb:4b:31:7f:b3:c2:86:13:fb:
         7a:1f:11:b0:8f:53:09:84:48:f8:dc:bb:94:77:45:a1:0e:ed:
         4d:4b:b5:a5:53:d5:23:6a:e7:5b:a1:79:b0:60:b3:bd:8f:ff:
         9f:85:78:c4:5f:6e:c7:3f:ef:f0:34:7f:e0:c6:a9:57:40:90:
         3e:11:3d:54:fc:6d:34:3c:4f:02:c4:a9:2f:fa:90:15:da:53:
         d2:06:47:0d:b1:13:b3:57:0d:79:77:12:74:8e:94:3d:60:e7:
         f6:8d:4d:db:c2:27:6a:ae:76:e0:d2:25:a0:a4:ee:7c:96:a6:
         ac:dd:85:10:da:69:14:a6:2d:9e:66:98:7e:4f:26:ec:99:ba:
         f3:0a:83:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:12:19 2024 by rpki-client on console-ams.rpki-client.org