Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
File:                     04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft (raw, json)
Hash identifier:          XBJkqq5eXJc4dJJYYUjKFGL+uxu80Ar9GXjxTKfnlPI=
Subject key identifier:   DA:39:FC:6E:25:3D:E0:CD:13:32:65:B1:66:04:1D:7D:28:E1:98:6B
Authority key identifier: D3:8A:85:71:0F:EF:E6:FA:6B:B5:AC:22:08:02:A8:E4:9A:AC:6B:E4
Certificate issuer:       /CN=F3669277AF/serialNumber=D38A85710FEFE6FA6BB5AC220802A8E49AAC6BE4
Certificate serial:       04A1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
Manifest number:          04A0
Signing time:             Sun 24 Nov 2024 01:39:05 +0000
Manifest this update:     Sun 24 Nov 2024 01:39:04 +0000
Manifest next update:     Tue 26 Nov 2024 01:39:04 +0000
Files and hashes:         1: 04qFcQ_v5vprtawiCAKo5Jqsa-Q.crl (hash: mKG3N32McGnwRqfmeYY/K3b2H7HyuowAg1X0/4UwnMk=)
                          2: F801051021E111ECA44DE462D8A014CE.roa (hash: nTH9YXhLp/XAxSwNODnbgqpCA63kmWCLMXXncguLAuk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:05:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1185 (0x4a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3669277AF/serialNumber=D38A85710FEFE6FA6BB5AC220802A8E49AAC6BE4
        Validity
            Not Before: Nov 24 01:39:04 2024 GMT
            Not After : Nov 26 01:39:04 2024 GMT
        Subject: CN=674283b9-952c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a7:89:92:3f:e8:d0:4e:61:6f:0b:1f:7b:f6:
                    f7:43:ce:09:f5:07:e5:21:29:7b:52:1d:65:0b:55:
                    85:77:db:29:12:d9:64:6f:fc:05:25:f9:2e:91:89:
                    31:99:8e:65:d9:79:d4:b7:3f:7d:21:2f:e7:18:c0:
                    2c:f3:a2:2f:b0:7e:be:83:02:fc:95:06:ed:2b:27:
                    ff:33:c4:0a:11:eb:4d:49:a7:7b:be:cf:3e:18:fd:
                    f0:54:95:62:12:f2:f4:d7:36:b9:55:5d:14:78:a9:
                    05:37:5a:03:11:fe:67:39:7a:6c:21:e5:f7:3e:48:
                    12:45:3e:4e:bf:fb:ea:50:98:a7:e6:e6:e9:e9:12:
                    fc:8a:c7:34:01:d7:f7:7d:f7:33:e8:9d:25:df:ab:
                    ae:09:c8:3c:78:ee:88:56:c4:50:36:2a:12:e4:68:
                    79:b7:f9:ec:5e:5a:b0:f8:62:b5:b6:ed:de:1b:b0:
                    6f:b5:22:fc:b0:cb:80:1d:13:ba:c6:9a:76:80:58:
                    27:ef:7a:d8:00:04:41:fb:dd:6e:cd:e7:ba:14:5e:
                    eb:95:b1:14:a8:d1:56:94:6d:1e:bf:9b:6d:22:27:
                    8c:c6:0f:57:df:14:11:f1:5c:1d:93:93:a2:ea:f5:
                    cd:d0:ed:d2:1a:de:17:65:55:d5:f6:7f:25:13:2e:
                    aa:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:39:FC:6E:25:3D:E0:CD:13:32:65:B1:66:04:1D:7D:28:E1:98:6B
            X509v3 Authority Key Identifier:
                keyid:D3:8A:85:71:0F:EF:E6:FA:6B:B5:AC:22:08:02:A8:E4:9A:AC:6B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/04qFcQ_v5vprtawiCAKo5Jqsa-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3669277/5E24508221E111ECBFD10A62D8A014CE/04qFcQ_v5vprtawiCAKo5Jqsa-Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5d:da:98:53:bc:08:da:62:3e:d8:78:32:33:9e:11:03:00:
         d2:f9:21:ab:96:bd:a5:2d:0b:d3:62:78:01:80:c5:c7:b7:62:
         74:fe:40:43:9a:c3:45:e1:23:0b:37:92:15:b3:7a:67:00:e0:
         74:4b:8b:74:f0:9c:88:2a:50:e4:5a:10:73:2c:e8:32:44:98:
         4c:d5:58:4f:01:9b:08:9e:90:82:e1:c3:5d:4c:fc:28:4c:c3:
         cc:f0:35:97:7d:81:c3:ce:b0:f1:b8:1d:c7:0e:92:18:2a:80:
         29:97:9f:30:c2:9f:e0:9f:b2:3e:02:7d:98:31:6c:b2:d3:78:
         97:96:ef:52:f7:8e:43:31:49:57:7c:a7:71:8b:7f:84:a9:5d:
         05:3c:f4:ec:e8:5b:22:23:d9:a3:c4:e3:47:ee:9c:3f:d8:e2:
         6c:9e:6a:82:ed:83:b1:34:0b:11:e5:54:dc:6c:01:91:a8:ae:
         34:4f:84:b9:72:33:03:6c:5f:dd:10:e5:b9:73:28:8f:d3:33:
         8c:ea:ad:95:8f:6b:72:aa:59:07:92:30:3d:92:30:b2:97:8e:
         d4:4f:81:56:73:20:a7:fe:62:6a:6c:d2:a3:f4:b5:e4:b1:cd:
         48:d6:3a:54:cb:37:ba:a8:d6:c3:80:4c:d5:eb:19:1a:4e:2e:
         75:c9:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:17:56 2024 by rpki-client on console-ams.rpki-client.org