Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
File:                     AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft (raw, json)
Hash identifier:          CYyt453nUa6jkQKGzlTj8gAC5wuKqL2FEwGqG5yHqfo=
Subject key identifier:   4C:7C:42:13:25:88:C0:6F:68:FA:D8:5E:19:C1:3A:8E:8C:CE:CB:A3
Authority key identifier: 01:9C:57:AF:35:3A:A8:DD:D6:AE:5D:19:B5:51:EE:04:5E:F0:E4:69
Certificate issuer:       /CN=F367278DAF/serialNumber=019C57AF353AA8DDD6AE5D19B551EE045EF0E469
Certificate serial:       C2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
Manifest number:          C1
Signing time:             Sun 19 May 2024 02:25:50 +0000
Manifest this update:     Sun 19 May 2024 02:25:50 +0000
Manifest next update:     Tue 21 May 2024 02:25:50 +0000
Files and hashes:         1: AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.crl (hash: XisKH6+bOo1ljLrjAA6yygFE8uTApkdukeKf5kMY4e8=)
                          2: C450DAB0852B11EEA03755784AD9E6FC.roa (hash: +41zmHN4DGC6b99Vfy5ZDUkMkjOSaYpSIq26rSH1w4E=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 May 2024 00:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367278DAF/serialNumber=019C57AF353AA8DDD6AE5D19B551EE045EF0E469
        Validity
            Not Before: May 19 02:25:50 2024 GMT
            Not After : May 21 02:25:50 2024 GMT
        Subject: CN=6649632e-8165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f1:40:25:09:75:5a:a0:6a:8d:da:a2:5c:1d:
                    fe:39:32:b7:7f:0d:d5:3c:64:47:7e:93:61:89:4c:
                    c8:bd:17:4a:8a:e4:e6:5d:e8:35:76:5c:7b:9e:c0:
                    e5:eb:07:dc:97:1d:35:ea:93:a1:98:81:d0:b9:a3:
                    9c:d1:8a:cd:7f:be:7e:f5:73:08:bc:1e:e1:10:76:
                    5f:2a:b7:ec:e8:02:55:1d:2d:84:17:9f:dd:c0:76:
                    73:7f:92:93:e9:b8:13:9f:99:72:41:34:47:d7:59:
                    9f:3e:e4:7b:8f:49:e7:43:87:06:5f:82:5c:fc:1e:
                    8f:de:e8:d2:96:b1:09:d9:60:65:5e:35:ac:50:da:
                    8f:d4:84:2f:64:f3:cf:6f:92:8b:af:f6:92:76:a3:
                    f1:13:e4:c7:a8:0a:27:61:17:ec:4b:1f:e2:98:f3:
                    99:5c:13:fe:3c:22:fd:9e:86:d7:70:7c:a5:63:24:
                    e6:e5:e9:6b:9e:c1:c9:b0:ad:25:fe:fc:dd:ac:f8:
                    81:b2:5a:fa:5e:9d:52:25:7a:29:24:aa:7c:f7:a4:
                    c5:b0:ea:74:b5:01:54:ef:c9:23:d1:de:ee:22:ec:
                    ba:33:e4:9d:4a:8c:bd:2c:67:d0:b5:3b:0c:67:11:
                    39:58:08:98:67:64:f3:e1:05:65:9d:89:28:0f:e3:
                    9d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7C:42:13:25:88:C0:6F:68:FA:D8:5E:19:C1:3A:8E:8C:CE:CB:A3
            X509v3 Authority Key Identifier:
                keyid:01:9C:57:AF:35:3A:A8:DD:D6:AE:5D:19:B5:51:EE:04:5E:F0:E4:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367278D/1D3860A0852A11EE9DCD1B734AD9E6FC/AZxXrzU6qN3Wrl0ZtVHuBF7w5Gk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:00:6d:bd:ca:4d:46:23:00:42:9a:8a:27:0f:03:20:44:ac:
         3c:dc:ac:52:8e:49:b1:2c:58:17:f0:11:b1:43:0c:25:1d:46:
         bc:f9:02:f0:13:70:71:80:5a:3d:5c:1d:ad:e9:e5:26:d3:15:
         5b:02:58:65:41:66:eb:61:2c:fc:24:4c:30:d8:fd:f6:e5:49:
         7d:89:74:39:98:a7:c7:b6:48:8a:8a:05:cd:92:2c:db:ca:f6:
         e7:0e:3e:e8:aa:71:37:c2:8d:53:c0:4e:37:9f:6a:4a:c7:0d:
         9d:6c:78:72:f6:54:23:29:01:e6:cd:7f:01:91:fa:24:a6:f6:
         5b:0c:88:29:ed:f2:42:48:f3:01:64:9a:a7:1b:6d:87:2e:94:
         e1:8a:c9:4a:04:28:45:3f:89:1e:ca:10:e1:76:cd:41:a3:89:
         f0:e8:5a:c8:a5:51:72:e0:d4:90:3f:f3:92:3d:f9:a3:9f:1c:
         be:0d:00:83:da:d8:7b:3f:20:e1:3d:29:88:3d:1f:3d:ff:dc:
         a2:48:8d:d9:1c:df:2c:97:db:0d:dc:13:a5:62:f2:c6:49:fb:
         22:a7:8c:67:b1:ce:d5:a9:75:10:51:7f:34:9f:b4:82:45:c7:
         37:0a:61:c2:ea:be:58:2b:27:2d:27:92:92:bb:e3:54:6c:90:
         95:7e:ec:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 03:14:47 2024 by rpki-client on console-fra.rpki-client.org