Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
File:                     OwiJEFfOiidoEQQFlcyqxAjfUaY.mft (raw, json)
Hash identifier:          y5/+LGjSGN0GiGd/pBszvpCIoXdVQ7Nq3MKPlnqnLM4=
Subject key identifier:   90:D9:08:3A:CB:70:82:FB:D1:4F:59:24:77:A1:8E:D2:38:4E:F2:EF
Authority key identifier: 3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6
Certificate issuer:       /CN=F3679CB8AF/serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
Certificate serial:       03A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
Manifest number:          03A2
Signing time:             Tue 07 May 2024 01:39:45 +0000
Manifest this update:     Tue 07 May 2024 01:39:44 +0000
Manifest next update:     Thu 09 May 2024 01:39:44 +0000
Files and hashes:         1: OwiJEFfOiidoEQQFlcyqxAjfUaY.crl (hash: N85yjJaXWXl9pcW49+BXCnofmN40zIwDQOoffWXuVGk=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 931 (0x3a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679CB8AF/serialNumber=3B08891057CE8A276811040595CCAAC408DF51A6
        Validity
            Not Before: May  7 01:39:44 2024 GMT
            Not After : May  9 01:39:44 2024 GMT
        Subject: CN=66398660-8c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9c:97:d3:7a:d9:21:77:3d:20:41:3b:c2:e9:
                    3a:22:3a:12:e9:cd:da:10:da:88:f9:ca:b5:09:95:
                    5d:aa:1c:7f:1c:9c:a5:59:04:ff:7f:81:43:e6:e2:
                    fe:6f:ac:d7:d7:01:f9:11:11:50:18:22:bf:fc:4e:
                    35:46:f4:fe:95:6f:3d:52:8d:7e:f2:5c:a0:4f:2b:
                    82:fb:26:25:93:be:4d:3a:7f:5f:57:2a:3b:c9:d7:
                    60:74:e0:7d:30:51:eb:87:cf:34:40:4f:5c:73:13:
                    c0:7e:7c:21:c9:10:05:c0:fc:38:c5:07:c4:56:d7:
                    c9:23:c8:90:1e:f8:41:5d:fe:25:87:c8:b1:74:7e:
                    e0:2c:57:d5:ca:af:52:8f:f1:c8:da:07:54:95:40:
                    1f:b3:57:e2:7a:48:2b:8a:52:f6:43:a4:aa:9d:04:
                    a8:6c:c7:f9:95:10:78:5c:38:d6:3c:fe:49:c6:76:
                    6b:e1:1b:32:b9:00:01:1b:27:a4:2c:ef:34:aa:39:
                    ce:21:1b:6e:c0:49:51:2e:87:fe:41:fb:c1:fe:3d:
                    ac:8c:37:c3:3b:fd:93:c3:83:57:d3:68:63:4d:ad:
                    97:d6:1d:82:e4:ba:1d:33:1b:6b:21:1e:9c:30:59:
                    c3:44:e2:6f:e5:a0:5b:df:77:50:71:7e:07:17:3e:
                    64:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D9:08:3A:CB:70:82:FB:D1:4F:59:24:77:A1:8E:D2:38:4E:F2:EF
            X509v3 Authority Key Identifier:
                keyid:3B:08:89:10:57:CE:8A:27:68:11:04:05:95:CC:AA:C4:08:DF:51:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OwiJEFfOiidoEQQFlcyqxAjfUaY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679CB8/BE22C8C645E811ECBE967719D8A014CE/OwiJEFfOiidoEQQFlcyqxAjfUaY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c3:ee:9e:05:58:8e:ec:c4:ca:b2:5a:46:da:42:ec:c5:63:3a:
         74:62:fc:77:0a:0a:c4:f8:e4:15:65:10:ca:71:c9:75:6b:a6:
         04:d0:17:30:4a:69:31:2d:60:de:19:18:59:1a:25:c6:63:9e:
         38:84:2a:dc:1b:ab:44:0f:a1:cc:c7:26:57:d7:0e:79:26:21:
         38:c6:8d:6b:ff:d0:61:7e:66:1a:f9:99:80:d4:cc:b8:b3:4a:
         25:d8:57:22:3f:2d:35:0e:3e:3e:b6:fd:dc:58:54:aa:2d:77:
         6c:af:75:3e:d7:2c:8a:d3:cf:1f:c2:15:2b:8c:8d:40:33:a9:
         0d:eb:38:d6:66:75:10:9f:46:25:26:53:1d:d9:52:4e:ff:69:
         62:ff:3b:7f:db:10:3a:35:39:e0:7c:23:ce:b5:91:4e:2f:5d:
         4f:84:65:c7:43:bf:c3:fc:6d:78:96:f5:4f:a1:ce:6c:78:42:
         ea:2e:10:05:2a:c5:e8:30:4d:32:52:ba:11:d5:47:fb:2c:41:
         69:4c:2f:a6:17:77:52:42:20:c8:ce:42:6f:53:3e:f2:76:0a:
         f1:61:11:74:89:93:f4:36:b7:95:ee:4f:4e:7a:4b:65:09:79:
         9c:3f:7c:88:64:c8:6e:67:67:08:7f:1a:96:3e:5e:5d:ba:97:
         1e:03:98:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:09:39 2024 by rpki-client on console-ams.rpki-client.org