Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
File:                     0RDaMi-Zhc--woypzoUgREhmujc.mft (raw, json)
Hash identifier:          mv10xTrXZORudmXsb0boxSYFngA1kX9+Wh0/cXVkyrE=
Subject key identifier:   0D:1B:0B:BE:62:1C:66:77:08:6E:ED:77:3E:E0:59:1E:7B:91:E6:47
Authority key identifier: D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
Certificate issuer:       /CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Certificate serial:       0190
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
Manifest number:          0188
Signing time:             Mon 27 May 2024 02:11:10 +0000
Manifest this update:     Mon 27 May 2024 02:11:10 +0000
Manifest next update:     Wed 29 May 2024 02:11:10 +0000
Files and hashes:         1: 0RDaMi-Zhc--woypzoUgREhmujc.crl (hash: fkRX8WsVE03KNox/Ah1uLWxmJbfTKprv13KwqNTuZ+I=)
                          2: BFFF93DCB91C11EEADB54E9A775412E6.roa (hash: sdzYfCyDwg/PUEGK3tXmINjr+Wb452fyHwxFLwrRQCs=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 May 2024 00:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
        Validity
            Not Before: May 27 02:11:10 2024 GMT
            Not After : May 29 02:11:10 2024 GMT
        Subject: CN=6653ebbe-efd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2c:ef:cb:de:a8:d1:9e:bb:94:bd:d0:61:1e:
                    88:9f:cc:44:e7:bb:1a:46:ba:82:6d:66:fb:fc:c8:
                    5c:e3:49:8e:8b:fb:f4:00:73:38:47:5e:50:c2:9d:
                    f7:ff:7d:ef:df:ab:52:a9:7e:70:ef:d3:53:9c:71:
                    b8:14:0c:6b:fb:30:7b:e8:88:39:e1:c6:2c:8d:a3:
                    31:cd:66:0e:19:74:2b:df:dc:41:63:e7:10:ad:e2:
                    a6:0c:db:17:df:0d:ef:c9:47:6e:26:59:47:b8:4a:
                    f8:2d:84:34:f4:09:23:cc:f7:59:5c:49:4d:e7:5c:
                    68:0e:16:be:52:d2:da:6d:59:d5:b4:f1:ec:e2:7f:
                    98:e3:a3:dd:19:e8:13:12:bb:27:a0:56:70:56:c0:
                    48:8a:7a:7e:d1:b9:8c:4a:23:c8:d3:7f:77:bc:6a:
                    2e:78:ab:91:90:dc:96:85:1e:8f:3f:b6:a9:18:95:
                    f8:41:a1:7d:92:47:1e:f3:78:13:ef:58:22:3f:4d:
                    a7:93:6c:fe:c7:a8:10:2d:30:a1:68:88:8a:df:1f:
                    f6:0d:b3:6b:fe:2a:22:80:7f:90:45:df:50:76:16:
                    1d:34:37:f2:ee:a8:f6:ed:2f:20:cc:ee:86:ad:b2:
                    26:e0:51:92:68:e7:ab:1e:4e:3b:95:d6:bf:05:9b:
                    92:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:1B:0B:BE:62:1C:66:77:08:6E:ED:77:3E:E0:59:1E:7B:91:E6:47
            X509v3 Authority Key Identifier:
                keyid:D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d5:06:f2:da:1f:0a:91:12:a7:06:a3:f3:13:95:fd:0f:36:
         f1:17:23:36:1a:71:24:df:23:d5:7f:57:5d:ac:57:c7:78:17:
         e5:97:a3:02:66:17:6e:5f:e2:b5:7e:74:a8:a6:d7:22:b9:48:
         12:f8:46:a1:3a:47:e0:95:dc:b1:c5:84:b8:7c:c2:1b:55:6e:
         68:e6:05:33:55:82:7f:18:c7:7d:1f:bf:b7:44:14:be:1b:34:
         26:48:f4:0f:ad:6c:f1:e4:d3:7b:c8:b0:eb:b9:0f:fb:b0:7e:
         56:7e:76:09:ce:3e:12:44:c2:97:43:0d:c7:d9:f2:66:12:65:
         c9:5d:cd:fb:78:9b:52:7f:b7:f0:ae:48:54:e1:2b:0b:2e:57:
         f5:53:ad:00:e7:23:f1:ae:f7:fa:32:26:18:4f:26:58:6a:40:
         98:fc:fb:8c:de:9a:4f:f1:d6:75:a5:68:f2:57:dd:11:22:00:
         54:de:a1:65:39:60:5d:e8:a8:10:3d:b4:6e:ab:73:6e:8e:c3:
         0d:a5:17:99:47:5c:bb:df:26:f9:13:ee:0c:ab:d8:85:b8:d4:
         de:7b:cc:17:0b:fb:47:68:b7:89:15:c8:ad:91:ce:53:00:db:
         4c:ab:07:24:4b:00:89:6d:36:8e:ed:fb:69:43:13:e4:91:92:
         0d:82:7e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----