Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.mft
File:                     z29NYNDVwubTeacR0bavARMMKmw.mft (raw, json)
Hash identifier:          hwgZb87ab53RDT0oLNv6Klzg9mZltoaV4Xl6+h8IGbE=
Subject key identifier:   36:D5:81:F0:0E:3B:FA:99:A1:5D:2A:94:1D:65:BC:06:8E:67:7B:AE
Authority key identifier: CF:6F:4D:60:D0:D5:C2:E6:D3:79:A7:11:D1:B6:AF:01:13:0C:2A:6C
Certificate issuer:       /CN=F367C385AF/serialNumber=CF6F4D60D0D5C2E6D379A711D1B6AF01130C2A6C
Certificate serial:       059E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/z29NYNDVwubTeacR0bavARMMKmw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.mft
Manifest number:          059A
Signing time:             Tue 07 May 2024 01:15:36 +0000
Manifest this update:     Tue 07 May 2024 01:15:36 +0000
Manifest next update:     Thu 09 May 2024 01:15:36 +0000
Files and hashes:         1: z29NYNDVwubTeacR0bavARMMKmw.crl (hash: Kz7VfNE8VgHfR+HyU8dBnAIS5/G5z7UuxLpC9tRsjQg=)
                          2: 7B87C448C60111EA86B4873EF8AEA228.roa (hash: 8s32B8dMmFio0RMWbrESmIIs0504hiJMh4Fs90vcTTY=)
                          3: AE4BC78AC60111EA82B1BE3EF8AEA228.roa (hash: pyY/EVidRCr9GBFzwtVx7kYqYWYP30k2C6JFA5pk9G4=)
                          4: 3EAACEF8C60111EAA251483EF8AEA228.roa (hash: Nv6f6c3Twv+vS/nsoIGBs8lzaY3R98pljU3B+YdTgI4=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/z29NYNDVwubTeacR0bavARMMKmw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1438 (0x59e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367C385AF/serialNumber=CF6F4D60D0D5C2E6D379A711D1B6AF01130C2A6C
        Validity
            Not Before: May  7 01:15:36 2024 GMT
            Not After : May  9 01:15:36 2024 GMT
        Subject: CN=663980b8-e9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:70:e1:4a:f6:bf:eb:52:63:48:51:78:33:
                    06:be:3f:4d:12:44:73:4c:e2:f4:c3:32:ac:95:88:
                    8e:e1:e8:b5:13:7f:60:91:85:93:f0:1c:2a:36:c6:
                    2c:00:f0:2b:b9:95:21:cb:6e:26:bd:1b:f6:93:95:
                    a5:2a:a8:7d:b6:0e:54:af:af:7c:b7:6f:ee:94:0c:
                    37:d6:3e:d6:91:48:8d:fd:ce:37:d0:02:84:49:79:
                    eb:1b:50:37:2e:77:3f:e0:50:61:1e:b6:10:cf:2f:
                    10:49:ff:6e:3c:3f:9c:27:3b:1a:b5:4b:b7:f0:65:
                    7f:7c:70:40:bc:58:0e:4f:bd:00:e4:e8:9b:27:1f:
                    9f:0c:0a:cc:37:df:8e:14:c0:46:69:e6:70:57:ea:
                    66:96:b4:8a:2e:a7:64:ce:23:19:c0:40:b2:f3:19:
                    34:3d:68:bf:34:63:d0:e1:2e:4f:65:00:ee:fd:16:
                    94:5e:0f:68:b3:a4:99:7d:d2:8e:4b:04:af:05:1a:
                    51:93:28:16:8d:77:87:f0:6a:e1:a6:79:52:52:e4:
                    c5:7d:ba:e4:a5:b1:ae:7c:aa:f8:a4:a2:50:cb:fa:
                    2f:ac:da:5c:4f:65:b5:1e:bc:7c:dd:20:f6:79:2b:
                    c7:2c:63:3b:81:58:0b:32:6b:5a:52:31:09:f1:87:
                    9c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D5:81:F0:0E:3B:FA:99:A1:5D:2A:94:1D:65:BC:06:8E:67:7B:AE
            X509v3 Authority Key Identifier:
                keyid:CF:6F:4D:60:D0:D5:C2:E6:D3:79:A7:11:D1:B6:AF:01:13:0C:2A:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/z29NYNDVwubTeacR0bavARMMKmw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367C385/A3D2CE00C5E511EAAB62B122F8AEA228/z29NYNDVwubTeacR0bavARMMKmw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:41:6f:14:3b:02:b5:88:a3:10:5a:b1:9d:62:bb:ae:ac:1f:
         94:d1:8f:b9:a9:67:41:5c:d6:da:bf:18:0f:83:fd:5b:55:4d:
         ba:87:97:c8:ae:aa:60:2b:20:71:35:07:8b:00:46:60:e8:6d:
         dc:49:cd:2d:8f:3c:c5:c1:9b:67:bb:58:c6:bd:96:1b:67:75:
         cd:07:a5:9a:14:86:b0:87:fa:24:ea:4b:29:55:3d:8f:6b:0c:
         cf:83:27:cd:f6:ae:67:ca:25:4f:f9:34:d8:76:d3:20:ad:fd:
         06:61:c1:6e:0d:98:fd:31:f8:a7:f3:e0:b4:0c:c9:48:88:0b:
         9a:a0:84:11:07:7e:b9:41:a8:13:e2:b4:3d:5c:32:5a:61:48:
         99:a3:c2:69:69:71:ff:3c:3a:a1:a0:be:31:c7:65:69:69:d3:
         1d:34:ef:10:76:7e:e4:81:c4:77:56:a9:d3:a6:0c:2a:a0:29:
         9b:19:52:f9:fc:0d:14:14:e8:a8:48:d2:a8:a7:27:d5:60:61:
         d9:62:90:14:4f:93:2c:57:4b:90:12:5a:db:22:bc:0a:ed:47:
         82:65:66:8c:e9:52:75:6a:16:01:1c:f9:3c:e9:b9:d5:13:bf:
         70:01:5d:84:e3:92:6e:cb:10:c7:5a:90:2f:13:f8:ff:95:a1:
         1d:88:ca:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:57:31 2024 by rpki-client on console-fra.rpki-client.org