Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
File:                     KnzueRgruFkbsTXdv7vulMHfQIc.mft (raw, json)
Hash identifier:          S3zgvFi9OA5ec0tQvwb/rLPtIWeBmKZjB0+9bTZwhhs=
Subject key identifier:   B2:AA:47:FB:33:32:2B:13:73:B8:41:E2:3E:6A:20:62:6E:A8:59:09
Authority key identifier: 2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87
Certificate issuer:       /CN=F366CE6FAF/serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
Certificate serial:       01B9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
Manifest number:          01B0
Signing time:             Fri 22 Nov 2024 02:28:08 +0000
Manifest this update:     Fri 22 Nov 2024 02:28:08 +0000
Manifest next update:     Sun 24 Nov 2024 02:28:08 +0000
Files and hashes:         1: KnzueRgruFkbsTXdv7vulMHfQIc.crl (hash: 2WjrML0Ix//UFaU4YISuRf5deK+KcC4uNuAiGJDYiyo=)
                          2: 1A85425E69BB11EEBF5E904C4AD9E6FC.roa (hash: Kx/Y8dEbUYeqoToY5LpNSdsXIlBKib23+2DqdNa43/Y=)
                          3: FD189F0E69BA11EEBE81314C4AD9E6FC.roa (hash: UK6i2dFbIWYL9h4T/dpZ4yF8qA519gysmxncwqhjDNc=)
                          4: E44337C869BA11EE88CB094C4AD9E6FC.roa (hash: 1d8FtYAZsHDPTXDngJ49htpRva8POmc7nirQyWgiDXo=)
                          5: 3BB28D0269BA11EEABA4ED494AD9E6FC.roa (hash: Q1XgZ9ZmDeVtE4gxia+GOYWXfxLUPO9DALH0Nrtl+eg=)
                          6: B8B5DACA69BA11EEBD303C4B4AD9E6FC.roa (hash: uoqftiTs2TQ3rEVnLUYDWPuBL54Tw5Qh6vFz0fe7JV4=)
                          7: 98FDCD4669BA11EE95130C4B4AD9E6FC.roa (hash: V8tXop4xNSLK7NTMuObTNFw9mcHKdpwbwIJqeSi9teo=)
                          8: 6399788A69BA11EE9D71534A4AD9E6FC.roa (hash: kaAHuzndBPzeMjc2nNN3ZcTB7Ew41AHipGqkh1wKLvg=)
                          9: C7D92E1869B911EE953F70484AD9E6FC.roa (hash: SdAbuipwR7EHxw/Hbwbw2PDVH2wv4MuQ83A/IxBI9GQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366CE6FAF/serialNumber=2A7CEE79182BB8591BB135DDBFBBEE94C1DF4087
        Validity
            Not Before: Nov 22 02:28:08 2024 GMT
            Not After : Nov 24 02:28:08 2024 GMT
        Subject: CN=673fec38-79cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:62:c7:1b:25:6c:76:1d:e6:76:9e:7e:10:5d:
                    a8:40:77:36:bf:86:5c:da:96:86:fe:b6:18:9a:f2:
                    19:ef:57:48:cb:eb:2b:7a:00:eb:14:74:fa:e8:77:
                    0f:c0:04:65:0d:08:3f:91:0f:db:e9:dc:74:64:cc:
                    a0:d6:61:0e:22:6f:4b:30:88:11:66:bf:e2:20:d3:
                    fa:e5:f2:59:57:99:38:29:d0:3f:6e:7a:4a:6d:42:
                    05:e3:61:28:ec:33:a9:30:09:b9:34:48:7e:e9:4b:
                    88:9d:3c:35:e4:15:12:ce:80:06:62:c8:f2:7d:d1:
                    2a:0e:9b:a0:6f:a7:3f:35:0d:01:d3:56:cb:30:0c:
                    e1:57:1b:c4:67:10:0f:54:b4:68:0b:0b:8d:f4:bc:
                    1b:2c:1e:f1:ce:a4:9d:69:7f:d4:43:a7:47:69:31:
                    8a:44:19:58:7c:31:4a:68:b6:9b:23:09:2d:a9:e9:
                    91:7f:a2:91:b9:31:9a:6e:28:9f:3c:d6:7c:3d:25:
                    79:f0:52:01:da:a7:41:75:6b:4d:f7:3f:b4:0f:8d:
                    a5:9e:42:9d:39:bd:84:1b:77:dd:ac:b4:bf:c9:d4:
                    63:bb:1d:2a:e9:52:79:f6:07:5e:28:f7:6f:5c:91:
                    13:72:f4:bd:e8:1c:8c:71:12:45:39:75:f6:ad:81:
                    0e:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:AA:47:FB:33:32:2B:13:73:B8:41:E2:3E:6A:20:62:6E:A8:59:09
            X509v3 Authority Key Identifier:
                keyid:2A:7C:EE:79:18:2B:B8:59:1B:B1:35:DD:BF:BB:EE:94:C1:DF:40:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KnzueRgruFkbsTXdv7vulMHfQIc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366CE6F/D9A4676C699A11EEBCC5FB674AD9E6FC/KnzueRgruFkbsTXdv7vulMHfQIc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:b0:bc:c9:f8:8e:1a:25:db:59:03:18:9f:6c:96:50:a1:35:
         b5:d6:31:a0:bd:22:c0:fe:b0:01:d5:e4:9d:3b:00:25:cf:27:
         9a:24:db:09:cb:82:41:84:06:d6:c7:df:69:2e:a2:c8:d8:96:
         0a:55:55:73:24:04:38:99:75:a6:b7:fa:77:14:fe:05:5a:59:
         10:eb:a5:92:70:15:80:46:f6:1b:9d:b3:dd:f7:54:58:98:f6:
         54:88:7c:f6:34:6b:83:db:8c:09:be:ea:56:35:7d:85:66:c1:
         5b:ba:48:73:c1:f1:6e:fd:a9:fa:3b:de:43:fd:e4:c8:6e:4a:
         cf:a1:bb:d8:af:00:9e:cd:d1:f8:46:e4:79:44:31:77:e7:74:
         77:c2:a0:1b:c2:a8:a6:6e:cd:fe:aa:fc:e8:6a:51:a4:67:36:
         74:4b:c2:34:94:5a:78:40:65:0e:20:69:e0:f5:7a:6e:1f:89:
         3a:19:3d:ae:2c:0f:50:43:88:e9:fa:51:05:a2:bc:80:66:7a:
         b7:7d:64:8e:31:c0:00:3f:07:61:11:13:ca:8c:e6:5a:98:0c:
         8f:41:39:ec:02:40:cd:03:3f:fd:18:86:e5:84:5e:83:c9:07:
         2d:39:16:d3:9e:46:53:de:a6:13:55:7d:41:ff:25:57:c4:a7:
         d4:c5:b2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:03:42 2024 by rpki-client on console-ams.rpki-client.org