Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
File:                     6vTkF_QNHJDUbdlViOspDev7ius.mft (raw, json)
Hash identifier:          6uMWipgi8FSgF4WphYwoJ/fFEnewj6gdmBfulj99yNw=
Subject key identifier:   DB:77:CC:2D:C3:F9:EE:5A:BD:D8:35:4B:56:46:D7:05:38:EE:DE:FF
Authority key identifier: EA:F4:E4:17:F4:0D:1C:90:D4:6D:D9:55:88:EB:29:0D:EB:FB:8A:EB
Certificate issuer:       /CN=F367FC8BRI/serialNumber=EAF4E417F40D1C90D46DD95588EB290DEBFB8AEB
Certificate serial:       021E
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
Manifest number:          021C
Signing time:             Fri 22 Nov 2024 02:20:06 +0000
Manifest this update:     Fri 22 Nov 2024 02:20:05 +0000
Manifest next update:     Sun 24 Nov 2024 02:20:05 +0000
Files and hashes:         1: 6vTkF_QNHJDUbdlViOspDev7ius.crl (hash: YvmBRRhLdpzF3ru12US7W8hejebpnyvmoikcArn8f1k=)
                          2: D505C1903E8F11EFAE9EEE8B762E951A.roa (hash: NwidDV20CYZEDHZ6t+ZNN3IKmoqOlGtHrBQtSGaeJsg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
                          rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 24 Nov 2024 00:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FC8BRI/serialNumber=EAF4E417F40D1C90D46DD95588EB290DEBFB8AEB
        Validity
            Not Before: Nov 22 02:20:05 2024 GMT
            Not After : Nov 24 02:20:05 2024 GMT
        Subject: CN=673fea55-5b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:85:ae:db:b5:9f:32:c3:65:c5:fe:37:77:
                    07:7a:2f:65:c0:52:5f:75:6d:3b:cf:ce:12:2e:33:
                    5b:b4:9a:c1:2b:ef:89:ec:a3:3a:78:67:17:e4:10:
                    33:70:76:2a:b7:15:46:9a:8f:ae:cc:93:83:7a:7b:
                    dc:64:8e:31:6f:9d:71:04:f9:1a:84:e2:70:ac:d3:
                    03:f6:87:3a:3b:2c:bc:2e:cb:e0:fe:2e:f2:e0:0d:
                    f6:00:9e:c0:ee:1b:f3:e5:65:70:35:0a:4b:f8:84:
                    f3:7e:ac:8b:79:02:bc:51:34:18:da:96:fb:01:08:
                    8e:04:86:ab:41:75:ab:71:a3:bc:31:e3:19:40:11:
                    79:ed:0f:da:a5:d2:25:32:5d:66:fa:6b:93:10:4a:
                    8f:6b:d9:35:ba:80:cd:76:7d:fc:5d:6e:93:1c:6b:
                    40:5d:f8:23:86:e3:3c:8a:88:e9:95:38:73:0a:c2:
                    03:dc:1d:f1:02:93:19:3f:79:63:1a:82:bc:e5:4f:
                    0f:1b:d5:df:28:35:81:54:5c:ed:f9:23:02:ab:b9:
                    fc:fc:de:60:64:8b:3f:10:3d:b9:23:f4:5e:da:36:
                    87:0c:7d:72:4d:7d:ee:4d:ab:dc:c3:7c:ce:49:b9:
                    6d:c8:5e:6f:3f:ea:33:55:c5:da:4c:7d:2e:a2:59:
                    8f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:77:CC:2D:C3:F9:EE:5A:BD:D8:35:4B:56:46:D7:05:38:EE:DE:FF
            X509v3 Authority Key Identifier:
                keyid:EA:F4:E4:17:F4:0D:1C:90:D4:6D:D9:55:88:EB:29:0D:EB:FB:8A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/6vTkF_QNHJDUbdlViOspDev7ius.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FC8B/92BE2A960EA911EE818560764AD9E6FC/6vTkF_QNHJDUbdlViOspDev7ius.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:4e:7c:84:0f:bd:38:a2:d3:43:af:39:ab:11:f8:61:a5:03:
         1d:02:71:b8:2a:7d:1e:53:64:11:f6:bd:16:cf:83:9b:0d:f6:
         f3:df:50:fb:9b:89:d9:c5:fc:ef:a8:02:41:30:b2:b6:d0:c1:
         6b:50:42:f8:f8:1e:9c:9f:36:23:ba:e0:04:0e:8d:ce:c2:ee:
         60:5e:8b:16:83:60:fb:ae:14:17:92:27:27:18:09:22:e4:e6:
         b9:eb:1a:6d:83:7b:6a:81:9b:1f:a4:45:6f:58:ee:cd:2b:df:
         ca:a8:3c:19:ea:e3:58:ff:25:a2:4b:0b:93:c8:65:a0:05:67:
         96:f2:76:7a:ac:99:17:27:41:f1:1f:eb:6e:6b:22:a1:3c:f9:
         c7:6d:fb:95:28:b1:99:61:a2:c5:97:84:b5:99:c0:e6:32:5e:
         13:a4:d6:b3:6c:0c:e6:5d:cc:8a:29:88:6d:01:49:d7:27:15:
         9a:95:9b:7f:d3:01:d7:34:87:c4:05:e0:3a:ba:3c:e4:86:e2:
         c5:d3:2b:08:bd:fe:50:b1:a0:c1:3d:c3:07:32:9e:bd:f5:98:
         6e:07:bb:e9:65:1b:28:ae:75:c2:ee:93:89:45:45:c5:2d:10:
         8e:87:c5:3e:07:e3:12:80:86:5d:a3:0d:20:4e:77:75:0f:ea:
         bb:c7:5b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:52:56 2024 by rpki-client on console-fra.rpki-client.org