Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
File:                     xlOxWlDuQwH_JY2KKnwYY4PFDro.mft (raw, json)
Hash identifier:          QhncyV7ocdJ4bkB85p9vvHWjPqtmTeXDeerX64wOA2k=
Subject key identifier:   BA:63:9D:F0:35:7E:ED:C2:A5:E1:0D:AD:BF:E1:51:80:3E:87:51:82
Authority key identifier: C6:53:B1:5A:50:EE:43:01:FF:25:8D:8A:2A:7C:18:63:83:C5:0E:BA
Certificate issuer:       /CN=F367D68CAF/serialNumber=C653B15A50EE4301FF258D8A2A7C186383C50EBA
Certificate serial:       0487
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
Manifest number:          0486
Signing time:             Sun 28 Apr 2024 01:23:08 +0000
Manifest this update:     Sun 28 Apr 2024 01:23:07 +0000
Manifest next update:     Tue 30 Apr 2024 01:23:07 +0000
Files and hashes:         1: xlOxWlDuQwH_JY2KKnwYY4PFDro.crl (hash: X05WBI5iHGUJuIuFyjdCSxBppfzDxW8RcwiU+dpd5+k=)
                          2: 69EE67B4920711EBA4D68A7DF8AEA228.roa (hash: PWOhXQJ0fibjAAccGAeAnloClqV+BwPlt2KmVpD849M=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 30 Apr 2024 00:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1159 (0x487)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367D68CAF/serialNumber=C653B15A50EE4301FF258D8A2A7C186383C50EBA
        Validity
            Not Before: Apr 28 01:23:07 2024 GMT
            Not After : Apr 30 01:23:07 2024 GMT
        Subject: CN=662da4fc-a8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:29:bd:bc:61:36:65:ee:a4:64:6f:c7:fb:
                    84:cd:ce:f8:55:1b:90:a3:1a:08:20:8d:30:42:3f:
                    34:19:5c:a0:f4:da:1b:d3:48:60:64:50:0f:30:5c:
                    92:bd:61:44:8f:a0:78:0c:20:ce:39:bf:a7:e1:cd:
                    b3:40:5a:c0:12:59:c7:a4:0b:39:b4:38:36:74:1b:
                    2f:ad:50:cd:00:e7:f7:08:07:f0:9d:8c:6b:92:2a:
                    e4:e4:b1:95:1f:05:20:92:28:db:1f:b4:03:a7:0d:
                    3a:bc:57:91:80:12:f0:5f:a4:26:cf:df:8d:83:de:
                    83:86:02:54:b7:a6:61:34:30:03:9b:1d:58:87:f9:
                    06:56:b2:2b:f7:46:b8:cb:9a:c2:78:91:d2:60:08:
                    11:d1:b9:c9:9b:88:36:c8:ec:d4:d9:fd:7b:f8:44:
                    50:25:d8:d1:8a:52:13:e6:2f:62:fb:d8:0d:01:89:
                    85:db:d2:d6:ac:89:ad:ff:78:67:d4:db:1f:a6:57:
                    80:20:bd:ed:6d:9d:71:50:f4:a9:76:be:33:dc:bb:
                    df:91:c9:42:c9:30:76:9b:10:34:3f:0d:92:9a:cc:
                    27:f9:e9:a3:ec:45:ee:e5:47:fb:69:48:ee:30:6c:
                    d2:46:0e:12:a7:4f:f6:b3:3e:89:83:dd:f9:59:44:
                    df:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:63:9D:F0:35:7E:ED:C2:A5:E1:0D:AD:BF:E1:51:80:3E:87:51:82
            X509v3 Authority Key Identifier:
                keyid:C6:53:B1:5A:50:EE:43:01:FF:25:8D:8A:2A:7C:18:63:83:C5:0E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:9c:5b:64:ca:9e:dd:e8:77:2b:51:44:04:dc:71:bc:1d:51:
         5b:de:8b:79:b8:7a:13:32:51:4b:d2:58:80:52:a3:7e:a8:30:
         61:a5:a2:b6:d0:37:3f:3d:59:b6:e2:10:99:e0:32:3d:88:d3:
         7a:f6:64:c6:f7:13:de:34:9a:71:ca:c9:8c:59:ee:99:59:3a:
         f2:85:1a:52:5d:2e:23:b3:61:d9:1b:5e:92:35:d5:93:b6:79:
         5a:c1:02:55:c6:63:e9:6c:5c:51:b9:9e:f0:08:ca:13:75:93:
         d3:0a:e4:8a:b4:83:58:62:e6:5e:20:9f:cf:94:c8:b0:ec:ea:
         b7:75:48:25:78:81:84:d5:0c:90:d1:df:8a:e8:f7:24:5d:3d:
         61:8e:39:4b:ff:87:2a:c5:97:f7:17:61:2a:de:94:fd:81:fe:
         db:be:80:64:87:ba:d9:4d:76:05:e1:a8:6f:ef:9d:40:9a:ea:
         20:3f:a3:41:6f:e4:1f:68:0e:ac:5c:e3:9a:bd:14:ea:d9:7f:
         e2:83:bb:5b:7b:f0:54:ee:59:b0:8e:37:2d:4d:7b:a2:f4:79:
         c6:7e:7d:d3:2c:ea:a5:b4:83:3a:93:6e:f8:ba:19:5c:80:f0:
         40:da:3d:be:99:f3:4c:c5:2c:ae:9d:bc:b0:dd:4c:c0:4e:41:
         68:6a:9b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 03:10:33 2024 by rpki-client on console-ams.rpki-client.org