Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
File:                     KxftsiWoqa1OodSC-tfzt4JwvaQ.mft (raw, json)
Hash identifier:          jzId9onAqSGDCPSS3wMkrkZ+LhJFzU4B4mWVBRFx7Ic=
Subject key identifier:   54:13:73:F6:7B:BC:4B:0F:8A:B3:2F:99:E5:BE:4E:1E:76:E2:2B:31
Authority key identifier: 2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4
Certificate issuer:       /CN=F36746EBAF/serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
Certificate serial:       0451
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
Manifest number:          0450
Signing time:             Fri 22 Nov 2024 01:43:42 +0000
Manifest this update:     Fri 22 Nov 2024 01:43:42 +0000
Manifest next update:     Sun 24 Nov 2024 01:43:42 +0000
Files and hashes:         1: KxftsiWoqa1OodSC-tfzt4JwvaQ.crl (hash: fOJ1XoW72u8NgrrZ7+/L5I23grkfyfM0BrgiP4sH7eA=)
                          2: 0755AE8C5E4911EC910446DF5A40D577.roa (hash: AItjzWPSlit+SXvmdCFmobWIhqJxwMx7F/NvBd+HRhQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1105 (0x451)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36746EBAF/serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
        Validity
            Not Before: Nov 22 01:43:42 2024 GMT
            Not After : Nov 24 01:43:42 2024 GMT
        Subject: CN=673fe1ce-05c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1c:bc:37:7b:60:ca:3a:9d:3e:be:91:4d:2b:
                    26:68:14:3a:86:fb:00:12:07:7e:ad:cb:6f:3a:60:
                    8b:95:fa:0a:fe:52:af:06:20:96:f1:f9:22:40:74:
                    13:35:3a:e9:58:ef:ad:40:30:3b:02:36:ef:b6:8d:
                    fa:17:85:5e:9f:50:f0:7c:b2:b8:8d:bb:8e:bb:84:
                    17:0a:99:ca:bd:5a:c1:f8:4a:71:a5:5c:ba:40:69:
                    9f:28:92:60:93:a9:18:7e:c7:04:ed:b6:a8:ef:dd:
                    82:54:46:64:94:9e:79:ee:be:1d:79:1f:23:49:6c:
                    da:82:56:ad:cf:ff:39:47:c7:57:62:02:73:0d:c2:
                    65:62:ac:e1:06:64:b4:a0:aa:00:24:e8:e7:cc:0a:
                    72:42:af:cc:24:0b:f7:0e:c2:84:c0:c4:52:f5:42:
                    f0:3a:46:f1:8b:33:9c:c3:d0:13:12:70:f3:a7:0f:
                    3a:c8:c7:2f:2b:a3:4f:3f:22:82:8a:66:c8:4b:12:
                    d2:7a:40:99:08:6c:95:22:ee:c6:b3:35:48:24:fc:
                    59:a0:f5:84:a8:2c:27:fd:13:f1:7e:60:31:73:64:
                    52:4b:d4:44:79:c8:52:40:33:52:7d:9c:51:aa:5d:
                    1e:11:d3:70:bf:a0:20:f6:fc:56:ab:8c:c0:e7:b0:
                    3e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:13:73:F6:7B:BC:4B:0F:8A:B3:2F:99:E5:BE:4E:1E:76:E2:2B:31
            X509v3 Authority Key Identifier:
                keyid:2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:42:b0:84:81:aa:14:03:99:18:97:e8:37:8b:93:12:d7:7b:
         6c:a3:52:1c:f6:ab:aa:04:8a:fc:0f:7f:d0:73:e6:2a:f1:7a:
         aa:5c:82:5f:49:54:48:39:b7:25:6c:8f:1f:2d:82:13:7b:32:
         94:3b:c2:2b:22:de:eb:8b:25:a9:39:c3:76:df:44:92:06:79:
         45:c6:20:f1:53:bf:33:1f:12:65:6c:f8:b6:d3:b6:21:b6:9a:
         25:d2:26:02:34:f6:ed:c0:e2:20:44:28:c3:3a:b2:b9:a3:8d:
         6a:1d:e8:cc:3e:29:c5:47:a5:1e:2a:2d:a3:21:97:d2:1b:b1:
         04:cb:09:e4:8c:95:45:27:e7:88:fc:05:69:1a:2f:f1:e6:d8:
         44:bb:32:2e:8a:04:98:5d:e1:cf:33:03:a2:8c:f1:b3:d0:31:
         70:04:0e:03:63:87:5d:37:36:44:63:78:d3:bd:e8:0a:f7:f2:
         87:be:38:9b:2a:0d:82:73:0f:e6:7b:d1:07:c0:6c:f9:0b:96:
         3c:5c:d6:bc:0f:67:a0:bd:b1:e8:6d:b2:8c:af:23:74:25:ec:
         f9:83:9d:c5:c1:52:50:92:ff:ce:45:36:58:c7:75:ed:81:50:
         68:7e:59:f0:5f:80:c6:90:e3:78:a2:5b:14:93:2a:74:4b:67:
         a7:a0:11:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org