Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
File:                     xNAUrWh1DnXpEEzqXCmztxlY_do.mft (raw, json)
Hash identifier:          ak3PYey+NBBns7JmG/VFw/jZbuY+JjV6i/I6Z7Js/9k=
Subject key identifier:   12:86:9F:74:45:49:0F:00:2F:0D:82:6C:2E:B1:5E:9D:22:FC:19:10
Authority key identifier: C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA
Certificate issuer:       /CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
Certificate serial:       0140
Authority info access:    rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
Manifest number:          0140
Signing time:             Sat 18 May 2024 02:17:27 +0000
Manifest this update:     Sat 18 May 2024 02:17:26 +0000
Manifest next update:     Mon 20 May 2024 02:17:26 +0000
Files and hashes:         1: xNAUrWh1DnXpEEzqXCmztxlY_do.crl (hash: W7+VXkxZtCiBaJB657RvuflRbUoJWqrQ45LYsvVhqCM=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
                          rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 20 May 2024 00:16:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1AR/serialNumber=C4D014AD68750E75E9104CEA5C29B3B71958FDDA
        Validity
            Not Before: May 18 02:17:26 2024 GMT
            Not After : May 20 02:17:26 2024 GMT
        Subject: CN=66480fb7-3e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:f2:e1:a6:fb:11:de:33:7c:31:3d:77:15:
                    2d:81:0f:e1:2c:0f:e9:c0:ef:c1:e7:8e:0f:ba:47:
                    91:f5:a0:59:ba:93:d7:f7:3f:94:15:e1:ca:f0:01:
                    bd:f6:68:9a:84:87:fc:50:f2:74:f2:27:35:01:8b:
                    a5:db:fd:25:44:46:89:57:8c:9b:e1:f5:cc:8d:c0:
                    e0:32:ce:ec:6d:18:af:ee:93:51:10:de:27:da:f9:
                    7e:83:d0:bc:65:7f:ae:94:5f:71:85:9c:03:f2:85:
                    95:8d:30:5c:29:a7:4b:d7:d2:04:a0:1a:6c:d4:eb:
                    a2:54:90:22:e6:9a:5c:b3:85:bb:1d:ac:43:ab:64:
                    28:6b:bc:a9:41:55:bd:74:70:07:e5:fb:6b:2b:06:
                    5d:e5:14:e2:f4:31:84:92:9c:d0:f6:1c:66:9e:4b:
                    f1:79:13:fc:ef:a6:2b:d5:a8:dd:4e:9a:eb:33:2b:
                    f2:b3:a2:12:7c:07:7f:43:ef:61:95:16:b2:2e:ca:
                    ee:ed:bb:c7:a9:6c:23:41:5c:02:10:20:90:8c:2e:
                    97:60:e6:7c:23:11:00:09:76:be:a4:d0:0a:73:88:
                    47:fe:1e:b7:0b:9d:26:e1:3e:cd:12:1c:82:3d:97:
                    48:88:e7:02:20:34:ca:ec:d2:f0:de:e1:7a:bf:b7:
                    54:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:86:9F:74:45:49:0F:00:2F:0D:82:6C:2E:B1:5E:9D:22:FC:19:10
            X509v3 Authority Key Identifier:
                keyid:C4:D0:14:AD:68:75:0E:75:E9:10:4C:EA:5C:29:B3:B7:19:58:FD:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/xNAUrWh1DnXpEEzqXCmztxlY_do.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/4273E04E21F011EEA3A2BC0F4AD9E6FC/xNAUrWh1DnXpEEzqXCmztxlY_do.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:38:8f:b7:41:9f:54:05:ba:52:81:a8:36:be:17:d6:22:5f:
         7e:82:81:b3:43:70:65:12:36:23:20:84:c9:c2:25:99:b8:6f:
         d9:a4:5f:36:2b:de:94:20:f6:6b:37:f9:ab:89:b2:66:9f:81:
         09:8d:f5:81:69:fd:19:6d:bc:7f:9a:23:00:c8:a8:1d:64:33:
         f3:69:aa:e6:7a:5c:34:33:72:87:a9:82:8a:4e:ac:b4:98:65:
         8c:d7:76:5b:6e:8d:46:a5:69:57:39:88:b6:0c:11:5b:52:8d:
         a7:c5:81:e7:b1:e4:a8:80:ff:6f:24:d6:aa:61:be:06:fb:f3:
         bb:2c:2d:b7:7d:02:3a:6f:ad:ea:8d:a0:20:6c:e0:97:92:ff:
         b1:7b:60:d9:97:86:4c:86:64:d9:74:3c:84:83:3c:29:e3:08:
         dc:2a:25:e5:7f:43:8a:a5:46:85:bb:17:c6:37:99:9d:b3:75:
         d3:21:03:51:cd:2e:3a:0d:a1:59:cc:9a:b9:d2:f3:ac:a5:fb:
         77:c7:3a:2f:44:14:96:c9:7d:5a:40:2e:8e:20:b0:db:40:d9:
         02:6a:89:cf:76:f2:9a:6e:98:75:b1:62:51:a3:42:03:ba:c1:
         c3:65:c8:6c:49:e6:b8:ad:e1:2f:38:23:e6:c0:51:1e:09:0f:
         c7:62:7e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 03:48:48 2024 by rpki-client on console-fra.rpki-client.org