Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
File:                     4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft (raw, json)
Hash identifier:          BNv7hs2gEpIohgG71nv2hOB5/Ex7Q+0S/jZMc/peblM=
Subject key identifier:   6A:9C:EB:2E:A7:72:78:C5:9D:55:27:7C:95:E1:0E:1D:94:C9:7E:3F
Authority key identifier: E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F
Certificate issuer:       /CN=F367FC4FAF/serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
Certificate serial:       0BE9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
Manifest number:          0BE8
Signing time:             Thu 21 Nov 2024 00:49:06 +0000
Manifest this update:     Thu 21 Nov 2024 00:49:05 +0000
Manifest next update:     Sat 23 Nov 2024 00:49:05 +0000
Files and hashes:         1: 4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl (hash: gxvH8KqKks5XTQ/y5g3ua4Bic8TQvykyL6y5azHOIfc=)
                          2: 0DE9F16080D011E6B7882016F8AEA228.roa (hash: lapNENqbec9IiREVadsxyCzDqZnzkWBnbMRTRH0mwYI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3049 (0xbe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC4FAF/serialNumber=E1732D97D136171362B0518F6A2144545CBF3A4F
        Validity
            Not Before: Nov 21 00:49:05 2024 GMT
            Not After : Nov 23 00:49:05 2024 GMT
        Subject: CN=673e8382-5fdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:36:c0:ea:37:9b:74:ee:11:e9:02:98:5a:05:
                    b1:1c:a5:73:fb:2d:12:1f:87:86:57:9c:0a:05:81:
                    dd:ba:77:93:54:db:5a:26:df:ef:c8:1a:c8:87:6d:
                    66:61:1a:b4:c0:07:4b:cc:c9:97:4d:d8:7d:05:03:
                    25:3d:43:16:07:62:ae:19:1c:e4:9b:36:01:f9:5d:
                    d8:3d:6c:60:48:be:22:7c:a9:fb:96:af:dc:6c:8f:
                    1d:75:02:91:84:13:80:fd:04:48:6a:e3:99:a3:87:
                    d1:d0:b6:c2:80:5b:0f:10:d1:58:83:3c:f3:f4:aa:
                    09:ba:67:9e:96:d3:67:0b:30:bb:29:21:89:a2:78:
                    33:83:11:e3:19:83:46:9b:a1:e0:8e:29:02:87:3d:
                    be:bc:94:a8:92:81:c3:c9:dd:05:76:d5:49:f7:28:
                    5b:0d:16:69:5b:1e:37:27:9b:ff:c9:16:1d:22:7a:
                    94:6e:d1:ff:85:5a:c3:b8:54:72:cf:5d:19:24:c5:
                    b1:14:f2:9a:b4:af:31:89:d9:92:dc:88:ad:57:b8:
                    ce:96:19:7a:3d:21:44:04:bf:f2:a2:34:23:00:23:
                    83:06:ba:dc:8b:36:de:bc:a2:db:58:e3:4d:cc:cf:
                    34:e8:f3:3c:a0:cc:41:5c:f6:58:96:25:27:44:9a:
                    7a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9C:EB:2E:A7:72:78:C5:9D:55:27:7C:95:E1:0E:1D:94:C9:7E:3F
            X509v3 Authority Key Identifier:
                keyid:E1:73:2D:97:D1:36:17:13:62:B0:51:8F:6A:21:44:54:5C:BF:3A:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4XMtl9E2FxNisFGPaiFEVFy_Ok8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC4F/442A9E2080BF11E6AB3BA07EF8AEA228/4XMtl9E2FxNisFGPaiFEVFy_Ok8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:e0:76:26:27:57:f0:6b:f8:aa:c1:ff:82:4f:4f:d6:2d:56:
         a2:73:cf:af:3d:8b:97:be:1b:78:0b:c6:f8:f0:3e:5f:43:04:
         b8:1b:65:42:d8:32:ef:d6:b2:99:57:95:a8:34:8e:70:8d:a5:
         b4:3e:68:24:47:13:82:6f:40:29:34:08:2f:b4:7e:35:df:1c:
         11:ab:80:58:f4:03:f0:01:60:45:ee:88:93:64:e0:49:13:4b:
         ef:f4:3f:89:ba:60:e2:90:b6:90:ec:7c:c5:ac:3c:71:4e:e9:
         4b:1f:00:97:99:da:4c:a6:79:9b:ef:3a:4d:fb:6b:75:57:12:
         fa:bf:70:66:21:cc:28:62:c6:1b:ab:a8:9d:a1:75:52:fb:df:
         b1:f7:1c:2a:da:b4:73:13:98:bf:cb:c7:9e:65:93:62:b2:c1:
         91:88:ea:47:30:1f:1e:a6:0d:b1:b5:96:4d:cb:d9:ee:e6:0f:
         67:e0:ed:8c:f1:cd:b6:63:10:b3:c2:02:12:2b:1a:b0:90:2b:
         ab:d7:13:46:b3:1d:9f:07:d1:67:c4:c3:ce:d9:8b:95:19:3d:
         eb:dd:7d:ee:94:ad:2e:a0:a6:95:cd:f6:05:4d:bc:47:ef:f7:
         49:5a:c3:1f:1f:3a:bd:a7:fa:2e:3d:83:2d:42:3f:a9:e6:e0:
         7d:b8:6d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:19:42 2024 by rpki-client on console-ams.rpki-client.org