Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
File:                     yLuITQS6vBYFq333lYeWBZySwmo.mft (raw, json)
Hash identifier:          kvZUxvykOtncEIkRP1F63p6QhNCGEb0dNMRjDDGkaSQ=
Subject key identifier:   46:40:0E:A7:A1:5F:4A:C3:AE:3E:3C:21:BB:D3:CA:55:A6:04:41:36
Authority key identifier: C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A
Certificate issuer:       /CN=F3670369AF/serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
Certificate serial:       0428
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
Manifest number:          0427
Signing time:             Fri 22 Nov 2024 01:45:19 +0000
Manifest this update:     Fri 22 Nov 2024 01:45:18 +0000
Manifest next update:     Sun 24 Nov 2024 01:45:18 +0000
Files and hashes:         1: yLuITQS6vBYFq333lYeWBZySwmo.crl (hash: TH6To68iTwpzLoQyYO7UM23V7cbEhOR4DorVc4SulOk=)
                          2: DBE0F6EE7E8C11EC9A551E885A40D577.roa (hash: e+LkqN78DWuhBsqL8FFr5mWtusQpgR9pzmjfGcJQ5/w=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1064 (0x428)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670369AF/serialNumber=C8BB884D04BABC1605AB7DF7958796059C92C26A
        Validity
            Not Before: Nov 22 01:45:18 2024 GMT
            Not After : Nov 24 01:45:18 2024 GMT
        Subject: CN=673fe22f-465d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d8:0b:70:03:42:c0:82:32:0b:f1:51:2d:69:
                    ea:e6:09:05:38:06:a8:00:26:a9:16:09:fd:4e:32:
                    46:b6:e5:20:e3:2d:92:7c:c8:08:8a:ba:96:09:8c:
                    b9:1e:08:a3:ad:49:4a:2c:f7:d8:dd:2c:d6:bd:cc:
                    d0:a8:64:ab:b0:15:0d:b2:6b:d2:dc:c3:13:17:71:
                    84:0d:6d:f7:10:4b:7f:cd:e1:a0:09:33:0c:f8:b1:
                    4f:78:7a:be:94:21:b2:5e:42:be:b4:4e:37:02:0a:
                    48:24:08:da:b5:cc:53:3c:f2:05:c2:03:fb:f4:a9:
                    b0:f9:6d:ea:4a:66:0f:bb:37:bb:00:ad:2e:1d:28:
                    d1:fa:c1:4e:c6:bc:c9:a8:14:39:fa:22:58:96:82:
                    43:54:33:48:f6:78:f0:8b:cd:d0:8d:ac:61:22:12:
                    a3:ed:e0:b3:41:8a:ee:71:6e:23:06:2a:7f:68:9f:
                    5c:57:8e:e8:c0:aa:74:be:d1:87:24:ec:c3:5a:84:
                    4e:aa:0b:ed:93:b6:e3:6b:bf:98:0c:73:f7:d5:dc:
                    4d:bb:aa:de:f8:ff:a4:f4:51:a4:ce:a7:e2:91:49:
                    c1:2c:c7:c6:a1:cf:23:63:92:b7:63:97:1d:55:fc:
                    22:d5:29:76:5d:42:0a:e7:37:bc:97:b9:b3:48:21:
                    eb:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:40:0E:A7:A1:5F:4A:C3:AE:3E:3C:21:BB:D3:CA:55:A6:04:41:36
            X509v3 Authority Key Identifier:
                keyid:C8:BB:88:4D:04:BA:BC:16:05:AB:7D:F7:95:87:96:05:9C:92:C2:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yLuITQS6vBYFq333lYeWBZySwmo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670369/691565D27E7811ECB77461CB5A40D577/yLuITQS6vBYFq333lYeWBZySwmo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:2a:22:ee:80:23:fa:75:90:48:db:55:04:41:cc:df:0d:86:
         e5:9b:6f:db:a6:3d:73:dd:16:03:7c:3c:42:e5:86:ed:ca:4c:
         91:c4:20:b0:3a:dd:30:11:fc:0b:8f:bf:4f:46:08:c0:34:7a:
         55:91:5e:8e:42:24:9f:90:da:0a:d4:54:30:e6:96:cd:a8:97:
         5a:72:45:ab:6f:c5:d7:8b:4f:14:fb:40:e0:c2:6b:d4:4c:19:
         b4:5c:c0:36:d6:7d:00:71:89:a2:a2:8b:b4:16:a5:34:6c:52:
         f0:89:2f:b6:80:47:b0:a2:67:0c:45:b0:1b:7a:fa:5a:27:d6:
         b2:45:11:df:92:25:99:5b:4c:22:b3:fb:d4:e8:41:bb:71:98:
         39:4a:73:da:e0:21:b4:10:8b:73:4a:25:97:a7:99:0c:22:40:
         6e:bb:36:f5:04:f1:1a:8b:b3:aa:f8:b5:d1:fb:4c:87:f0:cd:
         03:87:01:3b:8f:b1:ca:ff:0b:80:82:c7:3c:8e:33:60:01:56:
         92:89:2c:fa:50:b0:6e:46:bf:97:da:2b:eb:f4:15:b8:a2:cf:
         2b:9e:c7:ce:d7:da:da:ea:1f:bd:b9:25:c1:07:df:f6:e8:cc:
         09:91:cc:5e:4a:21:eb:67:58:4a:fa:06:a8:15:34:ea:5d:a0:
         81:48:d5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org