Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
File:                     BgFTVgEyf0M_jYQnIExQlCCErVY.mft (raw, json)
Hash identifier:          NvXVAFVGcochVd014YGhybQWIR06gTTH8V9APeG5u4U=
Subject key identifier:   42:F9:BC:6D:D2:77:3D:C7:E2:E9:C2:30:18:F9:1C:67:76:D5:6A:71
Authority key identifier: 06:01:53:56:01:32:7F:43:3F:8D:84:27:20:4C:50:94:20:84:AD:56
Certificate issuer:       /CN=F367676CAF/serialNumber=0601535601327F433F8D8427204C50942084AD56
Certificate serial:       0218
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
Manifest number:          0213
Signing time:             Fri 22 Nov 2024 02:21:13 +0000
Manifest this update:     Fri 22 Nov 2024 02:21:13 +0000
Manifest next update:     Sun 24 Nov 2024 02:21:13 +0000
Files and hashes:         1: BgFTVgEyf0M_jYQnIExQlCCErVY.crl (hash: A/tImVMCm2NuNQpXQAzbFfzoVkF3BbTnQdQWDSkXPUg=)
                          2: B4157BCEC51811EEA71E2955775412E6.roa (hash: +8B3PetXXdBYl4xVysjBuEdmB8tCvNT4URtK1ryNHXo=)
                          3: 9B15553CC51711EE865F7453775412E6.roa (hash: B4szk6C0WLymXGOq975zsN9fUPmrwwcdkQwfSngmA8Q=)
                          4: D7ED7CFCC51511EE85F58D50775412E6.roa (hash: QAA9COkPZwe9PTmNfwL5wojLGp+HtJSiqKQk5ypGdaw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 536 (0x218)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367676CAF/serialNumber=0601535601327F433F8D8427204C50942084AD56
        Validity
            Not Before: Nov 22 02:21:13 2024 GMT
            Not After : Nov 24 02:21:13 2024 GMT
        Subject: CN=673fea99-938b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8c:fd:c7:39:04:a9:41:33:b0:d8:fd:5f:a6:
                    8f:ff:45:74:1d:02:0f:31:20:1d:7f:0a:28:01:09:
                    fe:c7:aa:08:e1:cc:e5:f3:c5:32:3b:66:5a:3d:39:
                    99:2d:7e:59:f7:d6:04:02:a8:ec:f9:2d:9a:4d:9c:
                    51:c5:a4:94:ed:af:53:a1:03:bc:49:2f:cd:c3:6c:
                    6a:e9:ce:11:5d:a6:df:97:07:43:76:f1:e9:1d:ed:
                    8f:51:ef:bb:8f:fb:a8:b9:55:d2:34:30:f2:90:68:
                    11:ca:26:8d:5e:44:48:c3:da:af:df:d2:55:67:91:
                    9a:24:67:ba:80:20:2f:4a:ab:31:29:40:cb:a3:ba:
                    5b:e6:36:7e:c8:62:da:b3:3a:ec:cc:52:67:e9:0d:
                    05:12:1e:94:d7:84:46:bd:b1:40:1b:ce:ae:68:f4:
                    ca:3e:81:35:95:5a:7a:3f:7b:bc:88:cb:a2:ee:cc:
                    7b:47:19:10:2e:d8:aa:4a:e1:2c:dc:46:0b:87:47:
                    38:3e:5c:d9:f1:bf:22:8d:08:5b:36:23:dd:cd:4b:
                    cc:12:5f:4b:fd:7e:64:18:d7:0f:ec:ca:8e:8b:3a:
                    9d:d9:91:51:58:18:a4:76:68:39:8c:e7:bd:6b:74:
                    83:4e:53:56:89:ff:2f:14:b4:e9:3d:d1:40:ba:24:
                    24:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:F9:BC:6D:D2:77:3D:C7:E2:E9:C2:30:18:F9:1C:67:76:D5:6A:71
            X509v3 Authority Key Identifier:
                keyid:06:01:53:56:01:32:7F:43:3F:8D:84:27:20:4C:50:94:20:84:AD:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BgFTVgEyf0M_jYQnIExQlCCErVY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367676C/318C1E901A6111EE83E1D3814AD9E6FC/BgFTVgEyf0M_jYQnIExQlCCErVY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:ee:4f:f9:68:1c:9b:c7:f7:2d:fa:7a:95:4a:c5:5e:d0:04:
         25:3b:b0:72:5b:27:a2:1b:b7:45:fb:c5:81:68:34:5e:43:99:
         df:72:f3:e9:d6:54:4c:7b:ec:d7:a4:34:b8:b3:88:cd:1a:fd:
         07:db:85:92:3b:27:ef:a3:00:43:8d:19:9d:ec:e7:b1:d1:53:
         67:91:61:1f:f9:25:77:d8:4f:3e:e5:6b:b1:e3:f0:6e:b6:1c:
         e7:9f:e1:c3:ce:4a:27:78:09:ab:91:05:b0:0b:31:d2:32:43:
         e8:8d:c4:c4:bf:b6:18:bc:9e:22:81:10:84:ef:57:77:bd:a8:
         a7:f1:03:de:1f:2c:36:6c:fa:b6:b2:73:cc:92:8c:cd:9c:48:
         50:18:ed:69:3c:44:be:8a:50:2e:49:60:b9:77:d2:5f:18:cb:
         2d:66:2b:e1:de:f4:0b:99:94:71:63:3d:b6:e5:f5:f2:d7:20:
         77:a5:65:50:de:35:1e:71:e6:10:2a:53:2f:af:c4:2d:99:cd:
         d1:18:17:d6:26:9d:07:8e:9e:9e:39:66:ce:a2:30:bc:b2:25:
         d0:e4:e9:ce:66:b7:c2:3f:53:b0:4e:32:12:f7:e4:1b:40:bd:
         7d:16:d4:c3:41:f2:d9:4b:96:58:05:b1:03:d2:4f:e2:91:3f:
         0e:f0:c6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org