Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
File:                     FrjfWzvnTBrmjjHBcBFapze9XnA.mft (raw, json)
Hash identifier:          M53PR9JqcVTclJo+COfG7lLiGonMv2bLWVxTufYGln8=
Subject key identifier:   48:F4:58:B4:FE:71:41:12:E2:03:EF:55:DE:F5:E7:9E:32:AD:68:B3
Authority key identifier: 16:B8:DF:5B:3B:E7:4C:1A:E6:8E:31:C1:70:11:5A:A7:37:BD:5E:70
Certificate issuer:       /CN=F3668A5FAF/serialNumber=16B8DF5B3BE74C1AE68E31C170115AA737BD5E70
Certificate serial:       04A7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FrjfWzvnTBrmjjHBcBFapze9XnA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
Manifest number:          04A6
Signing time:             Sun 24 Nov 2024 01:37:52 +0000
Manifest this update:     Sun 24 Nov 2024 01:37:52 +0000
Manifest next update:     Tue 26 Nov 2024 01:37:52 +0000
Files and hashes:         1: FrjfWzvnTBrmjjHBcBFapze9XnA.crl (hash: i5IEfqbvxKpd+a05QFtw0W61TeaGDolmlAXIjPfhckg=)
                          2: DF0B42061D3011ECBD63FB02D8A014CE.roa (hash: /YQXCdcgCrNhLL360EhRhY7BDY5J8NgmUeOOyfGlQ8Y=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FrjfWzvnTBrmjjHBcBFapze9XnA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1191 (0x4a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668A5FAF/serialNumber=16B8DF5B3BE74C1AE68E31C170115AA737BD5E70
        Validity
            Not Before: Nov 24 01:37:52 2024 GMT
            Not After : Nov 26 01:37:52 2024 GMT
        Subject: CN=67428370-645f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:82:a0:8f:53:bd:1e:7c:84:60:f4:89:6c:3b:
                    7b:62:93:d6:7f:77:77:7e:a8:02:b2:86:dd:b3:d9:
                    3c:6e:65:59:1e:54:01:86:67:eb:57:89:93:d1:db:
                    67:ff:76:b1:a5:ae:0b:9a:d8:7b:5b:a2:77:bb:19:
                    b0:06:d3:f2:84:f2:02:7d:64:85:64:52:3f:92:bd:
                    10:e0:b5:40:89:5b:45:9e:da:0e:6c:b0:09:1d:11:
                    ce:46:74:8b:46:07:c7:cc:d6:89:9a:0c:3c:c9:9a:
                    99:26:0b:26:8a:d6:bd:cd:3f:ed:c0:06:54:30:3c:
                    9d:44:ce:4e:b5:95:e6:4d:13:b8:63:30:21:a5:c0:
                    4a:d0:99:08:9d:d5:29:5d:22:1d:98:44:c4:41:69:
                    d6:a7:19:93:c6:c2:d6:5c:88:0c:51:29:24:e8:aa:
                    54:fd:20:73:7b:bb:63:30:e3:12:33:a4:a3:8f:bd:
                    ba:06:3f:fa:63:5c:25:bf:72:69:f6:81:1c:66:1c:
                    1b:de:8b:32:ac:7f:50:79:92:c5:d5:8d:3e:03:0d:
                    48:34:1a:de:62:53:4f:f2:bf:22:8c:83:e9:2c:be:
                    49:b0:37:e8:89:72:23:1f:fb:54:cb:91:48:11:f0:
                    15:74:87:c8:27:63:1f:11:a8:0b:24:16:cc:a0:10:
                    49:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F4:58:B4:FE:71:41:12:E2:03:EF:55:DE:F5:E7:9E:32:AD:68:B3
            X509v3 Authority Key Identifier:
                keyid:16:B8:DF:5B:3B:E7:4C:1A:E6:8E:31:C1:70:11:5A:A7:37:BD:5E:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FrjfWzvnTBrmjjHBcBFapze9XnA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668A5F/B89B73A41D2E11ECB9DF207ED8A014CE/FrjfWzvnTBrmjjHBcBFapze9XnA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b3:36:ca:5b:92:d1:8e:b2:e3:db:1e:c1:38:af:08:4b:35:
         cb:e8:d0:c0:2c:1d:28:8f:0b:a7:71:f0:d2:f5:c9:a2:cc:3f:
         ec:1a:67:3b:50:f6:98:40:5d:2a:ed:5a:ee:92:4f:80:4b:df:
         43:a4:c2:92:fe:11:8d:9e:8c:0e:d3:2f:53:7d:76:69:87:43:
         b2:37:a0:ec:b9:ef:2d:7c:5c:c2:41:78:91:dc:a7:2e:f6:e6:
         0e:f0:be:04:63:f1:0e:4c:54:b1:82:c1:96:00:3b:6e:e6:cc:
         d5:02:70:46:3b:90:dc:da:34:a3:7e:1b:15:2e:96:a8:80:81:
         29:fa:b8:43:f9:3a:e5:f5:a4:be:17:28:03:af:e7:bd:68:3f:
         4a:c0:e5:11:b3:c0:37:7e:92:11:bc:cd:a7:f6:8e:01:d7:ed:
         ce:51:a4:19:49:95:c5:96:7f:45:26:d7:f7:b5:95:19:1c:8a:
         7e:36:cc:cc:d2:43:4f:85:74:9f:b2:03:67:47:a8:38:d6:6f:
         1b:63:e7:8d:a0:20:19:04:c6:52:05:05:f2:7c:0c:4d:96:4c:
         ca:6b:0a:53:ff:28:d5:06:96:df:20:2a:d6:fd:d5:ee:0f:78:
         ac:97:d3:fb:51:4d:4a:f3:77:b7:c9:eb:91:b4:d5:00:24:00:
         b1:7c:f2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 02:36:14 2024 by rpki-client on console-fra.rpki-client.org