Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
File:                     Abb7gSoUrvQLoDsWWv79W3SkZpY.mft (raw, json)
Hash identifier:          dIea55IFb9VibWSONzo2Kk3rlcanGv7FWk8bTUxiQ/4=
Subject key identifier:   A0:05:96:3F:0A:11:AB:A0:DE:B7:87:14:5E:6D:5E:48:45:CD:95:41
Authority key identifier: 01:B6:FB:81:2A:14:AE:F4:0B:A0:3B:16:5A:FE:FD:5B:74:A4:66:96
Certificate issuer:       /CN=F3674008AR/serialNumber=01B6FB812A14AEF40BA03B165AFEFD5B74A46696
Certificate serial:       01D3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Abb7gSoUrvQLoDsWWv79W3SkZpY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
Manifest number:          01D2
Signing time:             Thu 21 Nov 2024 02:24:57 +0000
Manifest this update:     Thu 21 Nov 2024 02:24:57 +0000
Manifest next update:     Sat 23 Nov 2024 02:24:57 +0000
Files and hashes:         1: Abb7gSoUrvQLoDsWWv79W3SkZpY.crl (hash: PWB0vvffBufNHabc39DqMCM1viIMtIFAGCnzjSGZy40=)
                          2: 61E8A95475A111EFAC7BA279762E951A.roa (hash: iAiWDX2k6dKqGfuzfdFuo/QfCsfKMTY5hEty8a1QfDk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
                          rsync://rpki.afrinic.net/repository/arin/Abb7gSoUrvQLoDsWWv79W3SkZpY.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:21:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 467 (0x1d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674008AR/serialNumber=01B6FB812A14AEF40BA03B165AFEFD5B74A46696
        Validity
            Not Before: Nov 21 02:24:57 2024 GMT
            Not After : Nov 23 02:24:57 2024 GMT
        Subject: CN=673e99f9-9de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:96:16:d6:9d:7e:2b:80:77:63:af:9f:94:01:
                    8a:42:05:5f:48:ee:4c:13:e0:8c:0e:2a:2d:ab:27:
                    97:82:5d:d9:c5:54:60:96:b8:c4:b7:36:cf:d1:f8:
                    ec:22:1b:82:97:71:af:fe:43:2f:6b:de:c2:70:c8:
                    de:13:da:20:fa:0b:b7:24:88:c3:6c:96:9f:6d:86:
                    de:f0:b6:61:e5:89:66:cc:db:8b:80:ff:bf:a2:2d:
                    5f:a4:d4:85:e1:b6:b0:2e:b5:58:ac:3e:9d:26:6f:
                    1a:eb:6d:53:95:b8:5f:1b:82:50:fd:ea:7c:7f:ec:
                    3d:1d:d5:49:71:45:6d:36:9d:ec:63:b2:88:04:81:
                    da:b6:7c:41:32:a6:b3:82:e3:cd:8e:10:61:6d:6b:
                    aa:64:8f:67:54:da:2d:f8:59:50:77:d0:5a:03:a7:
                    66:29:1b:52:f0:a4:9a:e9:fe:a3:ac:11:50:d7:d8:
                    37:ed:6a:35:a3:7d:96:2c:58:96:eb:2d:26:4f:fb:
                    c4:36:68:ab:38:33:39:46:93:de:71:3a:72:f9:66:
                    ad:fd:f0:29:fb:2f:ec:ee:0b:8f:fb:ea:62:6e:42:
                    87:62:b1:82:87:d4:7f:3e:f6:d3:7d:b8:38:b3:2b:
                    1e:21:6b:2b:1e:b4:f5:03:56:35:38:7c:af:77:f6:
                    58:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:05:96:3F:0A:11:AB:A0:DE:B7:87:14:5E:6D:5E:48:45:CD:95:41
            X509v3 Authority Key Identifier:
                keyid:01:B6:FB:81:2A:14:AE:F4:0B:A0:3B:16:5A:FE:FD:5B:74:A4:66:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Abb7gSoUrvQLoDsWWv79W3SkZpY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674008/5AB769C4473D11EE98B378664AD9E6FC/Abb7gSoUrvQLoDsWWv79W3SkZpY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f4:d0:d7:a4:77:67:39:13:40:e3:c8:9b:13:eb:9a:23:07:
         b5:24:89:d8:59:74:8a:8f:3c:1f:28:30:06:00:2b:fe:c8:99:
         82:64:1d:19:98:12:c8:7a:f3:70:d7:90:ad:e8:dd:9a:3d:30:
         be:c3:66:ad:0e:15:d5:ba:16:9f:cc:b6:ea:10:ec:c2:d6:67:
         13:63:51:e6:4c:85:47:67:12:15:3f:b7:5c:eb:d6:81:c3:56:
         c2:be:fc:de:9f:23:47:55:2b:80:14:e1:26:4f:4c:29:24:84:
         8f:62:3f:71:9d:4b:30:e7:84:cd:8d:25:1b:4a:ef:96:d0:2c:
         e8:72:73:62:02:43:aa:9f:7e:74:ba:21:32:99:80:f3:0a:99:
         bd:f2:f6:27:9c:6e:e9:84:b5:57:13:de:44:c7:4c:7f:7d:91:
         89:2d:44:36:12:b6:3a:02:1b:8b:0c:52:97:09:7b:74:7c:c2:
         9d:ac:11:63:f1:4d:34:f4:05:7f:a5:ff:aa:22:78:6c:af:a8:
         e9:39:0b:5a:02:51:cc:6a:15:b7:ba:ce:2d:58:8f:ec:ea:15:
         c2:29:1c:81:f7:b7:52:b0:a8:3f:72:3a:0b:eb:a6:e5:ec:1a:
         61:4f:fb:ab:90:81:75:27:ff:6f:7b:25:20:b2:8f:1c:24:17:
         cf:3d:5c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:19:41 2024 by rpki-client on console-ams.rpki-client.org