Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
File:                     XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft (raw, json)
Hash identifier:          Kw0rq+YqkVzND4KHUOvRmg/JcOPrqCLpLMAGsMmnl40=
Subject key identifier:   C4:A4:8A:41:FB:D4:6D:D1:C8:68:2B:C9:FB:AC:E4:74:B4:21:0C:5F
Authority key identifier: 5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
Certificate issuer:       /CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Certificate serial:       05FF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
Manifest number:          05FB
Signing time:             Fri 03 May 2024 01:09:40 +0000
Manifest this update:     Fri 03 May 2024 01:09:40 +0000
Manifest next update:     Sun 05 May 2024 01:09:40 +0000
Files and hashes:         1: XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl (hash: kCGWLzRGU14vP4JE7nj4mgP7YZZ9cxqkoS0jvZ4kDoY=)
                          2: C7468CE2E77811EEA1A05FC9775412E6.roa (hash: /c7WzEE1XWOd4nr8e22x2r+tmERk1nvGspmezFZ5FXU=)
                          3: 323F5EAC7AEF11EABF68BC13F8AEA228.roa (hash: cAtHhpCyL7sXJPk4hLfJU0qk1+tqkF5Y8qrGns8hrrg=)
                          4: 94A8D362E77811EE9100CFC8775412E6.roa (hash: PQ9VdjuHSh6kOFkT99/RDdKUFZgKf41yYceEmNn3R/s=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1535 (0x5ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
        Validity
            Not Before: May  3 01:09:40 2024 GMT
            Not After : May  5 01:09:40 2024 GMT
        Subject: CN=66343954-fe11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:f6:2d:96:70:dc:ea:4d:51:d9:68:f3:ed:bd:
                    0b:41:fb:c2:38:34:33:30:15:b5:e1:72:51:53:87:
                    99:fe:59:02:88:79:f3:80:ce:be:49:11:0f:1e:ee:
                    3f:29:12:5a:df:40:98:ba:c0:9e:02:f4:32:64:6c:
                    42:94:c6:71:0a:55:95:50:19:70:03:03:6d:80:c2:
                    4c:c1:cb:0a:17:91:aa:33:9e:ad:8d:83:96:0d:16:
                    94:bf:cc:22:5b:de:fa:48:cf:38:1e:08:3c:2e:61:
                    8e:a7:b5:d5:e8:e3:23:a6:f4:b5:7d:70:58:f4:ea:
                    6e:bb:3e:34:96:4d:21:f5:e1:79:86:42:29:10:90:
                    72:36:7f:9e:bc:5a:50:85:dd:fa:da:b4:e0:e9:44:
                    df:ca:5c:1e:11:cb:d0:e4:fe:fe:b8:5f:35:c2:9e:
                    99:4e:e7:fe:f9:44:fa:b4:2f:0c:c6:c6:6a:3e:40:
                    21:aa:fe:8d:3b:75:4d:1c:b4:cb:37:38:87:cc:04:
                    a8:c9:bd:55:f6:0c:86:23:f6:54:91:56:6d:28:49:
                    d8:f6:20:87:0e:a1:23:7f:f7:1f:8f:8f:14:b1:f5:
                    3a:ef:3e:29:6e:7a:d2:b5:a9:bb:ec:ea:a3:c5:4c:
                    7b:47:e3:57:6a:1f:47:5c:aa:65:9d:53:3b:bc:5b:
                    f6:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:A4:8A:41:FB:D4:6D:D1:C8:68:2B:C9:FB:AC:E4:74:B4:21:0C:5F
            X509v3 Authority Key Identifier:
                keyid:5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:37:42:5e:19:67:75:7a:e0:ff:a7:78:11:ea:6e:6e:0d:d8:
         5a:15:07:07:fd:68:42:24:31:b1:80:93:78:ea:d8:e0:d8:dd:
         16:cb:9c:e0:57:20:07:c0:b8:aa:96:12:ec:c4:6b:9d:51:55:
         8f:0b:5c:dd:2b:59:b2:7e:b5:01:50:42:fc:74:55:e9:f1:b0:
         9d:3e:29:6a:e9:93:c9:37:3d:98:33:98:89:93:de:e7:76:e9:
         f1:e7:96:ed:25:ee:03:68:32:6f:b0:e4:fe:7f:43:66:49:05:
         9a:33:90:30:90:cc:d7:80:32:04:ef:0c:70:1d:82:0e:a0:7f:
         a1:85:ef:f3:91:1b:5f:8f:35:39:de:af:f1:11:b6:9a:9f:f9:
         b6:20:2e:61:7b:09:bd:da:8b:e5:e7:c4:8e:2c:c3:24:6b:dc:
         44:85:cb:f1:97:77:8c:eb:94:cf:24:37:78:73:a0:8d:48:9b:
         dd:7a:68:ff:8f:9f:ab:53:35:04:0a:2a:bd:33:db:cc:5a:66:
         67:26:6b:26:57:17:eb:20:11:a5:37:eb:5d:4b:04:19:6d:17:
         d4:fb:cc:46:da:d2:9c:c9:64:11:bd:5d:a1:a4:c3:54:e6:f0:
         2f:c7:28:50:c3:23:30:64:2e:49:de:45:53:65:69:dd:64:08:
         7f:af:96:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:44:11 2024 by rpki-client on console-fra.rpki-client.org