Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B915/F5E67D585EFC11EBACFB2081F8AEA228/lxWomCIk5V6mKKnmhSkjWEy0wSs.mft
File:                     lxWomCIk5V6mKKnmhSkjWEy0wSs.mft (raw, json)
Hash identifier:          zon1PiMnF0xWar3epTqzg2T4W7VoGgbk5DGDI1D4YuI=
Subject key identifier:   3C:1F:0B:07:C2:CE:B9:39:06:90:66:8B:15:D5:C5:F0:B0:2A:93:03
Authority key identifier: 97:15:A8:98:22:24:E5:5E:A6:28:A9:E6:85:29:23:58:4C:B4:C1:2B
Certificate issuer:       /CN=F367B915AF/serialNumber=9715A8982224E55EA628A9E6852923584CB4C12B
Certificate serial:       0598
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lxWomCIk5V6mKKnmhSkjWEy0wSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B915/F5E67D585EFC11EBACFB2081F8AEA228/lxWomCIk5V6mKKnmhSkjWEy0wSs.mft
Manifest number:          0598
Signing time:             Thu 21 Nov 2024 01:20:00 +0000
Manifest this update:     Thu 21 Nov 2024 01:20:00 +0000
Manifest next update:     Sat 23 Nov 2024 01:20:00 +0000
Files and hashes:         1: lxWomCIk5V6mKKnmhSkjWEy0wSs.crl (hash: j6nCQ9dwX31R0+JT/jVErMl6AxCFaLJnyNxQVAFIs+4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B915/F5E67D585EFC11EBACFB2081F8AEA228/lxWomCIk5V6mKKnmhSkjWEy0wSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B915/F5E67D585EFC11EBACFB2081F8AEA228/lxWomCIk5V6mKKnmhSkjWEy0wSs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lxWomCIk5V6mKKnmhSkjWEy0wSs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1432 (0x598)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B915AF/serialNumber=9715A8982224E55EA628A9E6852923584CB4C12B
        Validity
            Not Before: Nov 21 01:20:00 2024 GMT
            Not After : Nov 23 01:20:00 2024 GMT
        Subject: CN=673e8ac0-a8d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:57:bc:0d:89:52:1a:36:1c:32:14:88:57:ee:
                    cb:87:22:bc:57:2a:c8:c9:50:9b:e6:2a:91:0e:0a:
                    cd:86:b0:9a:bc:37:35:d0:3a:f6:fb:34:f8:66:88:
                    3d:41:f4:0e:4d:72:07:ac:4f:92:76:18:41:b4:6c:
                    14:67:cf:7d:cd:9d:f5:b6:60:68:78:8d:b3:4e:51:
                    aa:3e:08:f4:8d:46:08:42:d6:8b:57:5c:ee:91:f0:
                    09:e9:2c:77:49:ca:1a:28:e9:f1:77:31:fc:ac:08:
                    4b:90:3c:6e:69:c7:31:ba:c6:d9:b2:9d:16:20:ed:
                    61:4f:93:6d:1b:72:0d:03:8c:e1:b0:d4:f8:d9:6b:
                    2a:68:e4:6a:5a:e5:35:da:5f:21:9b:b1:ce:43:81:
                    cf:af:32:24:07:f9:a2:3c:09:94:cd:f5:61:6c:d3:
                    fa:2e:80:d2:06:65:eb:3f:9f:ff:96:08:49:f0:37:
                    74:52:97:40:97:92:91:55:5a:a8:20:90:19:e1:dd:
                    aa:7b:97:ac:f1:23:ab:b7:6c:37:cf:73:e0:56:6b:
                    0d:c7:bd:4a:a6:e9:27:db:aa:09:67:d2:9d:8b:e8:
                    10:e9:17:e3:f2:56:2c:87:3e:f7:9b:c0:e1:c2:b9:
                    6b:8d:c1:ec:db:58:7e:fe:43:ed:9f:79:04:b6:80:
                    5d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:1F:0B:07:C2:CE:B9:39:06:90:66:8B:15:D5:C5:F0:B0:2A:93:03
            X509v3 Authority Key Identifier:
                keyid:97:15:A8:98:22:24:E5:5E:A6:28:A9:E6:85:29:23:58:4C:B4:C1:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B915/F5E67D585EFC11EBACFB2081F8AEA228/lxWomCIk5V6mKKnmhSkjWEy0wSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lxWomCIk5V6mKKnmhSkjWEy0wSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B915/F5E67D585EFC11EBACFB2081F8AEA228/lxWomCIk5V6mKKnmhSkjWEy0wSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:00:93:11:b3:1f:65:05:9c:28:ff:21:e2:d6:ff:d3:e0:c3:
         36:d4:04:ac:d3:64:45:5f:3d:64:d9:84:c3:d5:c2:95:6e:aa:
         5a:21:bf:a9:1c:33:11:9c:1b:c0:c3:95:f0:cb:d7:76:e3:80:
         f3:96:ee:a1:e4:12:b8:c9:df:14:8c:fd:58:d8:ea:4a:28:37:
         29:6c:dd:05:37:37:9f:5c:2c:e0:c9:c0:03:d7:17:13:63:1a:
         7b:88:85:c9:c9:cb:21:42:9a:90:a2:1b:6a:9f:49:c7:6f:ae:
         3d:5a:53:0f:04:86:c7:82:82:dc:bd:61:64:d9:b6:aa:f9:18:
         70:64:1f:62:ec:2d:b6:df:1c:39:07:58:70:ca:12:35:bc:83:
         06:72:68:12:ff:74:26:f1:1b:e6:ef:2c:ca:ca:d3:bf:7d:85:
         20:7b:47:9a:41:fd:f7:67:67:68:02:c1:25:e7:18:42:85:f0:
         58:17:ef:03:1e:6d:5d:af:ee:9a:a8:e5:11:5a:fb:02:3e:c0:
         19:fd:2d:55:df:37:16:14:1a:6f:32:5f:a8:58:c0:16:20:09:
         fb:b2:3f:c6:90:9f:39:56:ee:6c:8f:dc:d3:55:0b:60:69:db:
         0c:f7:34:ae:1f:f1:5e:31:8e:4a:48:29:90:d4:fa:90:41:79:
         58:e2:99:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:10:19 2024 by rpki-client on console-fra.rpki-client.org