Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
File:                     PTg51e4dl7STFVYoMdygQJMxSB8.mft (raw, json)
Hash identifier:          p589lV7yYYsGny8h3GIaV8LM9YynnCGELpMc1oIh2t0=
Subject key identifier:   E2:03:BA:9A:33:89:CB:20:AB:D3:DE:F9:99:A0:65:A7:69:D5:F5:B6
Authority key identifier: 3D:38:39:D5:EE:1D:97:B4:93:15:56:28:31:DC:A0:40:93:31:48:1F
Certificate issuer:       /CN=F36763E5AF/serialNumber=3D3839D5EE1D97B49315562831DCA0409331481F
Certificate serial:       0791
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
Manifest number:          0783
Signing time:             Fri 22 Nov 2024 01:08:49 +0000
Manifest this update:     Fri 22 Nov 2024 01:08:48 +0000
Manifest next update:     Sun 24 Nov 2024 01:08:48 +0000
Files and hashes:         1: PTg51e4dl7STFVYoMdygQJMxSB8.crl (hash: zJ6l2Xc26nOAiJwhva88QhPJqX/xl3d0tJn2rFAXfVM=)
                          2: 3D3ABB10C5AC11EE9A333C4E775412E6.roa (hash: mUep2+T9jy1s0v0ts+UWRulp3HOtXmgFIkGCm3gwL/Y=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1937 (0x791)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36763E5AF/serialNumber=3D3839D5EE1D97B49315562831DCA0409331481F
        Validity
            Not Before: Nov 22 01:08:48 2024 GMT
            Not After : Nov 24 01:08:48 2024 GMT
        Subject: CN=673fd9a1-d8fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:00:03:65:b1:12:99:78:65:c4:40:0b:83:
                    e5:3e:11:73:79:dd:86:d1:6a:16:f3:2a:f6:55:b0:
                    1e:fd:6b:62:80:c9:6d:53:40:6d:19:e4:e5:28:f6:
                    a6:34:dc:7a:d9:1c:55:ff:92:b3:8e:06:79:2b:46:
                    f3:45:6c:60:81:94:54:c8:12:35:d7:62:9e:ef:08:
                    bf:a5:9b:31:8e:7d:4f:63:1e:53:38:2b:fa:e2:db:
                    9b:18:10:ee:ff:c6:f2:bb:c3:89:2e:88:0f:95:84:
                    1c:dd:40:aa:8d:02:fa:31:d0:b7:8e:33:02:66:b8:
                    54:53:d8:ca:1b:47:47:f1:7f:89:1c:be:be:c1:e4:
                    03:d4:a6:ed:5f:2e:e1:c3:f3:1e:de:cb:b5:a6:7a:
                    51:9a:9b:3c:70:22:6c:ad:4e:22:2b:59:cf:54:65:
                    2e:1d:aa:39:92:3d:17:59:10:a9:fc:d3:ce:8d:de:
                    5d:02:5a:a1:26:1e:6c:ae:86:ad:fc:72:ad:6c:b1:
                    b5:02:9e:50:e2:20:4c:74:9d:48:37:47:0f:36:2e:
                    e1:9c:31:49:ae:f1:b6:bd:d4:d6:85:0e:cb:d9:b5:
                    90:dd:18:c4:4f:93:76:1c:42:fb:41:85:38:38:e2:
                    59:b1:13:4c:f8:1b:4d:9d:9e:53:28:f3:43:27:d9:
                    36:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:03:BA:9A:33:89:CB:20:AB:D3:DE:F9:99:A0:65:A7:69:D5:F5:B6
            X509v3 Authority Key Identifier:
                keyid:3D:38:39:D5:EE:1D:97:B4:93:15:56:28:31:DC:A0:40:93:31:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:bc:2f:b9:05:ab:30:2a:92:bc:28:89:f6:2a:56:15:97:c0:
         ed:9a:75:ad:9e:f4:c7:a2:28:62:67:83:89:08:65:58:d9:34:
         03:fe:f5:3e:a3:5f:de:a4:0a:cc:26:85:35:cc:f4:f8:2d:08:
         04:ce:3f:d0:18:87:cc:c7:c1:50:9d:ec:0a:5f:66:6d:e3:ef:
         17:19:0c:0f:34:07:08:dd:8d:20:76:d0:3c:15:83:8a:02:a3:
         0f:12:37:ca:ca:fd:2b:fe:90:ad:88:98:66:29:7f:7a:5d:5b:
         3f:a6:62:1a:78:52:bf:ac:ad:ad:f6:73:3e:c0:40:54:42:3b:
         89:69:5d:b4:61:f2:c4:ab:81:65:96:b9:94:0f:a7:e6:ca:44:
         74:43:33:c2:03:30:3e:cd:50:f0:1f:cf:20:a8:28:75:c8:39:
         77:f2:ab:fb:ed:9a:97:3a:6f:3e:54:72:04:d4:1b:60:3b:7e:
         56:a2:6b:6f:40:96:96:c9:95:1b:9a:2c:b5:a6:49:8e:00:fc:
         2a:a5:0b:81:01:ab:3d:34:8d:99:81:2a:be:c2:f7:c7:59:cb:
         3c:b1:22:05:42:60:42:63:b4:bd:5d:7a:2b:a8:a1:95:8a:82:
         00:ae:eb:1b:59:0c:c0:35:58:82:d6:99:09:5b:c9:2f:e0:cc:
         3a:e7:5e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:54 2024 by rpki-client on console-fra.rpki-client.org