Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
File:                     G0qwtyDYObeamJIyOw-r7ZZwWqI.mft (raw, json)
Hash identifier:          GvLxD9AgurgQ8e481uLFnVPrBqrF5NR6tU0L+BuykVE=
Subject key identifier:   54:99:42:0E:C9:08:7E:97:92:99:44:04:39:BB:62:28:09:F0:53:82
Authority key identifier: 1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2
Certificate issuer:       /CN=F367426AAF/serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
Certificate serial:       035A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
Manifest number:          0354
Signing time:             Thu 21 Nov 2024 01:57:46 +0000
Manifest this update:     Thu 21 Nov 2024 01:57:45 +0000
Manifest next update:     Sat 23 Nov 2024 01:57:45 +0000
Files and hashes:         1: G0qwtyDYObeamJIyOw-r7ZZwWqI.crl (hash: XOrpbrjWPlY4KipBYOvRAl6p+n931bvNjjwqBInNV9Y=)
                          2: D9ED8CAC6EB311EF96086184762E951A.roa (hash: 6w3a+eg92q7dxLHTR3vq9vXUwlds4W9m99UG/J3eEsM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 858 (0x35a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367426AAF/serialNumber=1B4AB0B720D839B79A9892323B0FABED96705AA2
        Validity
            Not Before: Nov 21 01:57:45 2024 GMT
            Not After : Nov 23 01:57:45 2024 GMT
        Subject: CN=673e9399-7eae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7f:74:74:d5:f4:ad:88:64:2e:45:ab:1c:c1:
                    b3:bc:f1:22:34:08:94:61:a7:c0:ad:5b:22:2b:2f:
                    41:45:ff:76:b3:50:23:01:b8:cf:f2:17:1f:d4:8f:
                    e6:b4:2c:68:55:0d:ff:6e:40:c1:dd:2e:47:32:78:
                    b8:0f:30:88:f7:6e:23:01:84:6b:13:d3:a8:ea:1f:
                    11:89:44:22:13:b6:a0:14:93:4a:93:30:62:01:1f:
                    b6:44:4a:92:1b:a5:17:88:ef:63:24:cb:9a:67:4a:
                    ea:b1:4f:85:8e:c5:13:9b:b1:22:af:e0:d6:3c:5f:
                    0c:c2:31:e8:b5:b7:7b:eb:71:0d:41:7a:63:a1:68:
                    47:af:dd:3c:6a:1b:29:ea:98:3b:5b:28:28:dd:d6:
                    73:c8:75:3e:80:39:be:fb:13:26:3b:31:74:db:03:
                    97:d7:2b:ee:8f:10:87:a1:ab:bb:3c:7d:e9:a2:87:
                    da:84:6c:4d:97:17:14:c0:88:63:6c:76:f5:ee:32:
                    11:af:33:3a:a2:9f:fc:10:e7:7e:67:c9:84:f3:7c:
                    c1:ea:cb:51:de:57:bb:04:5e:c8:d2:99:6d:9a:b0:
                    87:0f:b8:76:08:1e:52:36:63:4d:e5:9e:4a:eb:fb:
                    48:8b:01:f7:90:80:9f:d0:3e:26:4b:dd:95:37:b8:
                    a0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:99:42:0E:C9:08:7E:97:92:99:44:04:39:BB:62:28:09:F0:53:82
            X509v3 Authority Key Identifier:
                keyid:1B:4A:B0:B7:20:D8:39:B7:9A:98:92:32:3B:0F:AB:ED:96:70:5A:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/G0qwtyDYObeamJIyOw-r7ZZwWqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367426A/71A5B18428DC11ED99FF3D8FF1222468/G0qwtyDYObeamJIyOw-r7ZZwWqI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:c7:49:64:ee:68:c1:f2:d5:02:65:f0:05:e0:c9:35:c8:fa:
         c4:bf:b3:52:84:10:0b:d2:4b:3d:31:42:13:40:e0:80:53:a2:
         b0:bf:9e:b6:99:7d:9e:2a:b4:f6:70:19:de:5c:06:f5:07:48:
         4c:fb:b6:21:67:98:40:16:b9:2b:88:79:07:97:ef:24:a1:4b:
         08:1a:37:55:6b:3c:28:86:60:80:f2:53:f7:ea:56:a2:e5:c0:
         06:1b:48:f3:e3:7c:82:b5:d6:8f:e9:4c:ef:2a:9c:b0:7a:ac:
         cc:5d:ad:46:86:18:43:74:20:5d:27:1c:e7:22:3e:64:86:4a:
         ce:23:be:23:53:37:4f:93:5e:4b:3d:f9:d0:93:80:63:4b:c2:
         4c:ac:e4:d0:f1:73:8d:67:7c:34:bb:cc:02:8b:1c:c7:14:20:
         ae:bd:31:40:4c:8b:fe:19:9b:e6:41:4c:ac:e5:3c:e7:41:98:
         50:3e:dc:97:45:89:34:05:c7:16:d4:8d:b1:72:18:0f:d7:d1:
         fb:60:43:86:e9:6d:9b:a3:8c:76:9c:16:c1:21:ca:bb:9a:81:
         5b:f6:e9:6d:27:62:6f:7a:35:0a:91:9d:f8:00:44:22:b8:1c:
         b6:35:ed:52:28:65:b0:d7:ca:eb:0e:86:93:81:12:d5:37:a5:
         73:35:79:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:19:42 2024 by rpki-client on console-ams.rpki-client.org