Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
File:                     3ctMnFuiLYifJQktxc7JJbqEO3g.mft (raw, json)
Hash identifier:          obBPqXJr0vf363Kwjxa+CEAVjq3uU4CSy7tkwu8rWHs=
Subject key identifier:   B5:3D:E3:17:26:13:23:00:C9:58:D2:49:F5:B9:72:64:79:DD:E1:47
Authority key identifier: DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78
Certificate issuer:       /CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
Certificate serial:       01E4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
Manifest number:          01E3
Signing time:             Thu 21 Nov 2024 02:22:43 +0000
Manifest this update:     Thu 21 Nov 2024 02:22:42 +0000
Manifest next update:     Sat 23 Nov 2024 02:22:42 +0000
Files and hashes:         1: 3ctMnFuiLYifJQktxc7JJbqEO3g.crl (hash: 9hrZ9U+LTw4rlxQSsubX6QlHN7ychBaQWlcpPuX/FZM=)
                          2: 271BDC865B7D11EEA292A6744AD9E6FC.roa (hash: AqQFl42y4KiidXEIHNkOHS5rhMlmNLvCnwgSSzLowX0=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                          rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668CFEAR/serialNumber=DDCB4C9C5BA22D889F25092DC5CEC925BA843B78
        Validity
            Not Before: Nov 21 02:22:42 2024 GMT
            Not After : Nov 23 02:22:42 2024 GMT
        Subject: CN=673e9973-ee2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:05:12:ae:dd:35:14:95:b8:b5:21:d8:f2:9d:
                    d1:98:20:6f:91:3e:d9:39:2f:a5:48:47:53:16:ae:
                    38:af:b9:d9:92:e5:8b:6c:47:e4:62:32:30:1b:15:
                    a7:ab:d0:65:3c:0b:22:4d:cb:d4:13:24:4b:72:f7:
                    0e:b0:f8:e7:1b:c0:c4:7a:b3:c4:4f:02:47:5d:ad:
                    f4:b0:a8:4b:15:d9:92:23:3d:3a:36:82:d9:c9:c1:
                    93:bd:5d:6b:9e:d4:fc:72:cf:c6:68:2b:de:be:1f:
                    40:2e:2d:14:14:40:84:c6:ce:c5:96:e6:0d:e5:72:
                    10:2a:98:0d:6d:07:ef:6f:14:bd:5b:3e:ff:00:10:
                    6c:08:a2:6e:9d:01:b0:58:5b:1b:a0:79:da:41:d4:
                    ae:da:d2:4d:2d:cc:aa:74:55:e7:f4:4e:62:98:a4:
                    e2:d5:e2:4b:5b:11:8d:42:63:be:26:2a:68:37:e2:
                    ac:82:20:d6:2d:a4:4f:77:71:78:1e:25:51:74:46:
                    20:f6:c9:a5:d5:83:57:d7:b8:2c:89:0e:10:20:98:
                    dc:b6:83:ca:18:e4:c7:83:4c:9e:b7:6e:54:43:99:
                    d0:14:af:c0:99:f3:32:37:ef:1b:8f:ba:fd:e6:9f:
                    27:83:1c:d1:cf:53:f1:7c:54:e2:7a:67:65:cc:cc:
                    e5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:3D:E3:17:26:13:23:00:C9:58:D2:49:F5:B9:72:64:79:DD:E1:47
            X509v3 Authority Key Identifier:
                keyid:DD:CB:4C:9C:5B:A2:2D:88:9F:25:09:2D:C5:CE:C9:25:BA:84:3B:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/3ctMnFuiLYifJQktxc7JJbqEO3g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/A5F271EA375711EEAAAA53184AD9E6FC/3ctMnFuiLYifJQktxc7JJbqEO3g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:46:7b:7a:97:44:12:c5:7a:0d:80:03:43:2a:5a:c3:d2:1e:
         2c:4f:f8:e7:62:84:63:2d:ee:0c:08:de:f9:42:f3:f4:68:2b:
         ce:bb:29:9a:fb:e2:d1:3b:83:58:0a:6a:d8:d8:62:a4:71:95:
         0d:60:bf:3b:a5:5b:94:aa:d7:72:2b:63:5b:6d:c5:3b:11:65:
         ed:71:1e:19:a3:24:57:72:e4:43:a8:6f:a9:ce:de:1c:80:00:
         ed:d2:75:36:4a:c5:eb:13:94:3c:62:6c:7e:02:82:7c:7d:e5:
         ec:a3:e8:7a:32:27:81:a7:7a:c0:63:94:7b:10:f3:69:b0:28:
         a9:78:a3:80:50:e5:31:ae:24:84:0f:ca:40:8b:7a:b3:93:ca:
         04:87:cc:c4:f4:bb:a2:18:99:23:29:b5:ef:eb:c7:23:73:79:
         cd:b2:3e:1e:19:3d:b5:df:1a:9b:39:2b:8b:8a:ba:b1:f0:e7:
         db:fc:d8:4c:56:f4:a0:49:37:b7:6d:a9:0b:15:25:bd:73:1b:
         29:9b:80:33:fe:73:42:78:b6:10:6b:23:65:92:bc:dc:e7:4f:
         e1:42:08:af:12:43:b4:b5:75:0e:38:04:38:bb:a3:d4:c3:b8:
         f0:84:af:7d:fe:34:9a:32:2a:d3:c7:64:82:b9:d4:2f:7c:f5:
         83:26:bc:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:10:18 2024 by rpki-client on console-fra.rpki-client.org