Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.mft
File:                     jXM8lU5mTeBH--8DjdEt57DxtNY.mft (raw, json)
Hash identifier:          Xz4D0i4VWhcmAJbBGjaetUbZ7Onm2fjnlRRDZ4NA5bM=
Subject key identifier:   A0:A7:0B:B9:BA:44:6D:9F:99:A8:80:01:8F:CE:74:C1:D1:9B:87:1E
Authority key identifier: 8D:73:3C:95:4E:66:4D:E0:47:FB:EF:03:8D:D1:2D:E7:B0:F1:B4:D6
Certificate issuer:       /CN=F366C302AR/serialNumber=8D733C954E664DE047FBEF038DD12DE7B0F1B4D6
Certificate serial:       23
Authority info access:    rsync://rpki.afrinic.net/repository/arin/jXM8lU5mTeBH--8DjdEt57DxtNY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.mft
Manifest number:          21
Signing time:             Sat 18 May 2024 02:38:30 +0000
Manifest this update:     Sat 18 May 2024 02:38:29 +0000
Manifest next update:     Mon 20 May 2024 02:38:29 +0000
Files and hashes:         1: jXM8lU5mTeBH--8DjdEt57DxtNY.crl (hash: 38RpEzXLt5ZU5FMFm4kTzO6HbT8tZ6Fy/CiihnStkqY=)
                          2: 48815194FFF611EEB7B2CF0C017001B1.roa (hash: D4ZOtAC47VS1ZnE8gxDvuNgN/naFW3V/gpkFVCsnwIA=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.mft
                          rsync://rpki.afrinic.net/repository/arin/jXM8lU5mTeBH--8DjdEt57DxtNY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C302AR/serialNumber=8D733C954E664DE047FBEF038DD12DE7B0F1B4D6
        Validity
            Not Before: May 18 02:38:29 2024 GMT
            Not After : May 20 02:38:29 2024 GMT
        Subject: CN=664814a5-1d72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:c1:0a:ba:a7:b7:73:93:81:2c:dc:cf:88:
                    11:e6:a8:4a:ca:c5:c6:81:72:b3:9f:01:db:f1:d2:
                    3d:6e:98:6c:99:e8:e0:dd:94:55:a5:c6:e6:a5:1f:
                    8f:6c:4a:05:fb:93:98:c3:46:9b:6b:37:bc:2e:4a:
                    8c:dd:1d:38:2d:f8:eb:3e:1a:a9:99:e0:50:76:21:
                    98:5f:26:d3:60:71:43:cb:43:dc:21:f3:ee:84:13:
                    b7:91:bc:28:c0:75:a9:bc:0f:04:25:65:ed:5c:01:
                    af:1e:51:f2:46:19:61:56:47:10:02:6a:13:2e:1b:
                    a0:75:04:c6:1d:f5:a3:d0:e6:88:c9:9b:e1:84:05:
                    68:11:4b:09:e4:60:30:e2:10:69:44:7d:c0:f2:a3:
                    67:4f:f4:d4:e6:a5:ac:b4:25:27:c4:10:6e:6d:56:
                    d0:f5:a0:0f:cd:8e:6e:a2:f2:f9:f4:21:f6:47:cd:
                    d3:8d:b5:e9:8b:e3:40:5d:4a:05:aa:9c:5b:6b:20:
                    c1:67:3c:30:e1:32:87:e8:b8:88:18:78:3d:cc:fb:
                    b9:99:8b:79:f1:00:1b:cc:9f:42:77:b1:b3:b3:d5:
                    74:c7:5a:2a:7f:db:b9:b1:13:14:2e:ae:c0:5a:6d:
                    01:71:a1:d4:61:6a:ef:40:ef:c2:d6:f4:92:bb:e2:
                    15:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:A7:0B:B9:BA:44:6D:9F:99:A8:80:01:8F:CE:74:C1:D1:9B:87:1E
            X509v3 Authority Key Identifier:
                keyid:8D:73:3C:95:4E:66:4D:E0:47:FB:EF:03:8D:D1:2D:E7:B0:F1:B4:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/jXM8lU5mTeBH--8DjdEt57DxtNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C302/87B94634FEE611EEBE1E336D017001B1/jXM8lU5mTeBH--8DjdEt57DxtNY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:10:62:ef:06:c0:29:18:6c:64:f5:a8:c4:d4:35:de:7d:93:
         f6:3b:46:2a:86:77:cb:0b:85:ce:54:65:09:e0:fc:9d:54:a0:
         99:64:27:aa:3e:6e:a7:47:cc:06:5e:86:07:2d:13:64:c3:68:
         95:aa:10:c5:d9:76:02:7b:df:6f:34:df:ad:0c:d5:52:84:ca:
         77:5d:63:20:18:c5:2c:85:42:e5:50:5f:39:37:6c:3b:4f:82:
         11:c3:fd:38:ac:48:1d:48:25:1f:d3:b5:2f:a9:b0:bf:90:2c:
         b2:d9:9c:c8:9a:2f:69:26:1b:45:59:d0:b9:78:6b:08:e0:b4:
         e4:fb:3f:a1:f9:58:04:f9:b9:69:0c:6b:80:9c:60:95:2d:bf:
         76:8b:24:69:14:dd:f3:6e:22:53:7f:f3:88:5c:0b:6d:77:9f:
         ea:29:52:80:d2:b9:ab:d3:1f:6f:d2:24:13:8b:74:e6:8a:4e:
         33:32:4c:a7:a6:14:7e:bf:63:46:05:c7:ee:b6:b3:cd:cd:fa:
         99:1d:aa:a8:d5:81:2c:9f:99:30:3d:68:08:5b:15:e4:92:ec:
         29:29:b4:f4:d9:68:0c:ef:bc:5f:50:56:1f:c8:3c:5e:e6:0f:
         0c:9e:71:95:b2:bf:18:11:5a:f7:d1:87:79:7e:bf:62:ac:cc:
         18:b7:6f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 04:03:38 2024 by rpki-client on console-ams.rpki-client.org