Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
File:                     tHFvO8e9HbRHzHMP7nortjKrGQM.mft (raw, json)
Hash identifier:          XnggdGozU0HeSjYZDFE4BEM/sL6Hzbc2fufE5OOtdlU=
Subject key identifier:   C9:54:05:2B:CB:FE:A6:4E:0C:B1:28:EE:C5:F7:56:88:4D:FD:36:2D
Authority key identifier: B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03
Certificate issuer:       /CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
Certificate serial:       0730
Authority info access:    rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
Manifest number:          072F
Signing time:             Sun 28 Apr 2024 00:58:00 +0000
Manifest this update:     Sun 28 Apr 2024 00:57:59 +0000
Manifest next update:     Tue 30 Apr 2024 00:57:59 +0000
Files and hashes:         1: tHFvO8e9HbRHzHMP7nortjKrGQM.crl (hash: /JhL1aWeAZfUm++rryEWKK5c+0gOqREhfeRvWBTHpwA=)
                          2: A57BAB36864511E9B11DB357F8AEA228.roa (hash: UZHeW38R1/Nd92sqBo1918z/ZA9yifdIrMDF+uNRLVM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                          rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Apr 2024 00:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1840 (0x730)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3670C40AR/serialNumber=B4716F3BC7BD1DB447CC730FEE7A2BB632AB1903
        Validity
            Not Before: Apr 28 00:57:59 2024 GMT
            Not After : Apr 30 00:57:59 2024 GMT
        Subject: CN=662d9f18-386f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f7:e0:b9:2b:8b:10:3a:d1:a3:a8:28:c1:27:
                    d2:35:1a:3b:2e:46:e9:9d:cc:52:00:99:80:bd:dc:
                    e8:2d:05:47:6b:8a:f3:e5:91:4c:5d:98:20:61:f4:
                    9f:d9:c1:f7:d8:f7:58:2c:b0:15:da:0e:4e:c8:cc:
                    ac:19:09:e4:a0:54:b8:f6:d7:9d:d7:d5:b9:ef:df:
                    f2:3d:b8:9c:b4:57:05:b5:7e:e0:58:79:43:02:0f:
                    c2:67:41:68:b3:10:5f:a2:20:96:5d:84:00:9e:98:
                    0d:e9:82:0e:55:a4:21:5d:29:4d:f5:bd:2c:12:82:
                    6e:cf:be:bc:2f:b9:f0:f0:df:a1:f6:5e:45:b0:dc:
                    ea:d0:a3:57:86:e0:23:0a:83:70:36:5b:9a:d4:f2:
                    00:89:7b:cc:d3:fa:73:33:07:6e:52:9d:a0:7e:18:
                    37:fb:f3:5f:cf:6c:00:84:8d:94:0d:d2:08:df:46:
                    b3:ea:93:30:57:1d:cc:9b:3c:b3:ee:36:6d:a0:d8:
                    4d:bf:a9:c7:d8:ef:e6:aa:6b:4e:b5:82:82:ed:d4:
                    fd:95:8a:a4:3c:b7:89:16:8d:54:2b:e0:fa:07:3b:
                    27:34:e6:b6:5e:e9:66:51:01:61:51:92:c9:e3:be:
                    b3:41:49:f2:15:c8:d4:16:dc:33:9d:ac:2c:2b:27:
                    62:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:54:05:2B:CB:FE:A6:4E:0C:B1:28:EE:C5:F7:56:88:4D:FD:36:2D
            X509v3 Authority Key Identifier:
                keyid:B4:71:6F:3B:C7:BD:1D:B4:47:CC:73:0F:EE:7A:2B:B6:32:AB:19:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/tHFvO8e9HbRHzHMP7nortjKrGQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3670C40/E07F1110864411E989CEFB56F8AEA228/tHFvO8e9HbRHzHMP7nortjKrGQM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a3:66:3d:af:ef:c0:a7:25:17:73:51:90:ec:32:3e:6e:ed:
         10:21:bd:44:fa:ea:58:a5:62:56:45:70:5d:00:45:04:a8:43:
         96:fa:ee:08:58:33:e6:b4:e4:23:ff:fa:d1:51:dc:fa:fd:65:
         fa:f9:40:79:b0:0a:32:3b:bf:c1:01:d9:b0:d0:64:12:b0:41:
         61:1a:43:7a:b4:f0:12:81:fb:31:47:16:cc:4e:1c:77:49:c3:
         0b:9d:19:05:93:fc:57:56:1f:3a:1a:4d:e9:82:bc:c7:a7:f2:
         7f:d3:df:5b:2b:ca:ba:57:13:3b:c6:1d:de:8b:54:e4:a4:59:
         37:b2:b2:63:b1:bb:ab:ee:08:c4:e6:cd:18:e0:93:f6:63:f5:
         6e:52:39:c0:48:14:df:7e:2e:ac:3a:82:a9:65:3b:f4:c7:d6:
         77:85:43:83:77:2f:0a:5d:be:98:14:af:32:c7:70:b7:03:01:
         8f:75:f6:1e:f2:ce:d9:9e:39:7d:f2:93:59:35:49:e0:0d:02:
         e4:cf:a7:c1:3c:04:de:6d:33:bd:c2:70:41:12:82:48:34:ac:
         83:27:35:86:51:0e:2a:07:25:92:12:bc:d2:bd:8e:b2:5b:ce:
         ac:bc:41:11:3a:37:b5:4c:cf:44:aa:6a:72:b8:1c:23:eb:43:
         6a:4b:c1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:10:32 2024 by rpki-client on console-ams.rpki-client.org