Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
File:                     JLXuZ0cVou7uiGTqX17kcyPPdmw.mft (raw, json)
Hash identifier:          qoK0v94SR6+hAtNveZs9AW/njJnVM3vKz2Ci77WnT6I=
Subject key identifier:   4F:4C:60:13:AF:57:64:D1:8B:8D:87:94:06:F4:36:97:95:49:AB:44
Authority key identifier: 24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C
Certificate issuer:       /CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
Certificate serial:       60
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
Manifest number:          5C
Signing time:             Thu 21 Nov 2024 02:51:02 +0000
Manifest this update:     Thu 21 Nov 2024 02:51:01 +0000
Manifest next update:     Sat 23 Nov 2024 02:51:01 +0000
Files and hashes:         1: JLXuZ0cVou7uiGTqX17kcyPPdmw.crl (hash: UVJp+m674RAvsKwDOTqUXpU6DwRWGoPyccgy5/r/4Zc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367678FAF/serialNumber=24B5EE674715A2EEEE8864EA5F5EE47323CF766C
        Validity
            Not Before: Nov 21 02:51:01 2024 GMT
            Not After : Nov 23 02:51:01 2024 GMT
        Subject: CN=673ea016-e8a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:32:bf:79:03:19:ab:51:19:3d:4c:52:2b:7d:
                    0b:e8:c6:9e:43:15:77:c5:76:b3:21:ce:ba:f3:13:
                    16:0c:ec:40:15:e6:d9:ea:c8:c0:c9:a5:cd:78:74:
                    f5:d0:27:e9:36:51:fa:56:d7:bc:5d:2d:ee:ca:70:
                    25:a9:1a:e3:0a:53:ea:cc:4c:6f:4e:67:4d:66:ef:
                    d2:65:a9:a1:e6:71:bc:73:f0:a3:c9:a2:89:c1:23:
                    24:45:61:f8:49:58:6b:2a:0b:bb:2b:1e:2d:cb:7b:
                    99:d1:f7:24:0f:a6:d7:6d:f4:1a:ad:38:a1:ed:bf:
                    e7:6a:be:c2:1e:77:01:13:d9:38:52:7b:58:98:18:
                    b4:1e:6f:bf:df:61:c8:cb:a4:a2:3c:50:4a:d5:68:
                    fa:6a:1b:0f:aa:f2:ce:89:4a:55:f1:ef:4a:92:de:
                    e0:f9:45:82:cd:c5:8a:2a:2c:2a:b7:38:c1:c2:11:
                    6a:d0:5d:34:02:96:17:96:44:a1:51:ae:e2:9c:5c:
                    cf:48:a8:b1:72:24:81:02:f5:0b:86:38:b7:14:d0:
                    8d:f3:67:80:49:83:3c:63:b0:cb:44:02:1d:31:1a:
                    1b:b5:77:3e:4a:94:47:8d:5f:f1:4b:30:3b:88:69:
                    67:95:6c:bd:20:f1:72:82:1a:6d:9d:09:cf:6f:b7:
                    77:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4C:60:13:AF:57:64:D1:8B:8D:87:94:06:F4:36:97:95:49:AB:44
            X509v3 Authority Key Identifier:
                keyid:24:B5:EE:67:47:15:A2:EE:EE:88:64:EA:5F:5E:E4:73:23:CF:76:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JLXuZ0cVou7uiGTqX17kcyPPdmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367678F/925C80FC650B11EFBE290256762E951A/JLXuZ0cVou7uiGTqX17kcyPPdmw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:78:f4:ed:cb:77:a0:07:74:b8:99:c3:e6:ef:90:28:6d:7e:
         a4:1c:b8:c5:53:56:45:1d:12:78:31:cd:c2:37:5e:9e:87:59:
         7a:d3:c8:a7:c8:5d:e9:54:d0:ba:9d:3a:a6:a2:05:6b:90:18:
         a2:c1:d5:69:92:83:9c:2f:28:a9:15:46:a3:23:92:9e:07:76:
         ee:c6:90:8c:a5:b8:7b:66:5d:c5:85:5d:03:47:44:2c:1b:67:
         26:2d:8c:ac:88:19:36:f4:95:0e:f7:84:e5:5f:e2:c4:e5:27:
         f6:01:37:09:c9:e3:25:60:40:f4:c2:b9:7a:cd:d9:06:75:bd:
         95:a6:92:c8:8d:ca:aa:2f:fa:9d:39:14:25:7f:dc:06:b5:c7:
         5c:a2:23:9b:50:5d:28:df:f1:03:cb:b2:52:85:53:d7:c8:97:
         b7:9a:b3:75:b3:38:53:a2:73:e6:e2:96:05:42:57:7d:fc:15:
         e0:12:cb:a1:8e:f8:ba:2f:2c:d7:79:50:de:4c:67:77:22:e3:
         84:f7:4e:2b:83:76:b4:45:77:c1:c2:1c:30:ff:15:d7:13:a9:
         bf:d0:c4:5a:3e:aa:59:af:23:1b:9e:b6:20:c0:37:1b:e8:aa:
         36:9f:2b:49:5e:c9:78:c0:5e:24:87:04:1a:bf:68:ba:dc:65:
         39:b5:1d:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:05:51 2024 by rpki-client on console-fra.rpki-client.org