Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
File:                     kC4Bh228XGk7_mL7v2fubbanGDE.mft (raw, json)
Hash identifier:          f2P0xhIo/NmFhcMAE9b9XRo91aiIHmiPMYMwLSxsjOs=
Subject key identifier:   F1:6A:33:BB:33:BF:D4:60:91:8E:A8:6B:7E:9F:DB:4E:94:89:22:AF
Authority key identifier: 90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
Certificate issuer:       /CN=F3680E82AF/serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
Certificate serial:       0464
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
Manifest number:          0462
Signing time:             Tue 07 May 2024 01:26:17 +0000
Manifest this update:     Tue 07 May 2024 01:26:17 +0000
Manifest next update:     Thu 09 May 2024 01:26:17 +0000
Files and hashes:         1: kC4Bh228XGk7_mL7v2fubbanGDE.crl (hash: W5k64qRbRKkpMzWtQb3tGSm1gpzt6Z1+KRzTmXpo+4k=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 09 May 2024 00:04:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124 (0x464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680E82AF/serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
        Validity
            Not Before: May  7 01:26:17 2024 GMT
            Not After : May  9 01:26:17 2024 GMT
        Subject: CN=66398339-2271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:40:e8:b2:47:73:12:8b:df:da:43:10:84:ad:
                    08:0b:55:81:64:ec:c9:07:d4:6c:57:5a:b5:df:e0:
                    e7:56:78:d4:09:d3:5a:98:21:91:a9:57:43:2f:97:
                    4a:cb:25:af:ae:11:11:13:e0:8b:d3:f1:89:a5:e1:
                    4e:bb:06:a0:f7:50:b1:8b:49:c7:2a:79:7a:f9:d2:
                    f8:18:21:62:94:ec:6e:eb:4a:a8:b9:3c:a3:4c:35:
                    a9:bd:e5:9f:08:4b:b9:bf:ea:c8:63:05:15:a9:30:
                    f3:c1:d1:be:9a:a1:02:a8:7b:ec:8b:06:40:d0:91:
                    33:cc:98:a7:41:93:6b:c8:c6:a6:1f:c3:1e:e4:1f:
                    ac:3e:b8:b3:c9:fa:b6:ec:6d:f2:50:4c:55:de:6e:
                    8b:6b:b4:1b:51:cb:f8:cc:af:4f:66:c2:39:1c:fa:
                    84:f5:cb:50:d8:d1:15:1b:45:99:88:7d:2a:53:a8:
                    e8:e6:5a:0b:50:72:8e:6c:8e:a8:f7:6d:5a:fc:ef:
                    f8:94:fd:26:52:03:1e:67:95:b7:23:34:75:13:c0:
                    03:d3:3c:15:59:64:85:c1:d7:33:ff:af:d9:33:c4:
                    51:62:9a:66:4d:b9:2d:07:ca:db:cf:6d:14:10:5b:
                    68:b2:8d:6f:a1:df:94:f8:f8:b3:ee:49:e8:d4:b7:
                    58:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:6A:33:BB:33:BF:D4:60:91:8E:A8:6B:7E:9F:DB:4E:94:89:22:AF
            X509v3 Authority Key Identifier:
                keyid:90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:2e:b6:9d:7b:5f:04:2e:76:b6:25:b4:27:0c:ee:33:e8:1e:
         45:8c:77:e8:07:f1:ec:4f:3a:85:61:56:9d:a1:06:57:ad:c2:
         09:ef:6e:b8:9e:a1:51:14:13:f6:09:bc:cb:82:68:24:f2:91:
         cb:fd:0b:64:36:7f:8b:2f:f1:4b:ca:ea:67:0d:52:9c:53:9b:
         d8:23:f6:29:9d:ab:6f:d0:94:b7:32:7b:e2:92:b9:3a:94:bf:
         fe:25:c3:ef:d2:52:e6:62:bf:ff:da:c1:5b:d0:df:90:cf:9f:
         5b:1c:98:d5:60:0c:50:8d:8b:74:99:f2:dd:f8:36:21:69:a4:
         b8:da:a5:70:4e:bf:3c:00:a5:22:a1:bb:33:dc:eb:f4:c3:63:
         a4:26:a3:c8:bd:7c:ef:42:79:06:d5:c2:05:f2:a5:c9:e0:09:
         d1:37:62:e6:b8:3c:28:7c:46:69:c5:00:15:34:fc:d8:8b:8e:
         e6:fb:70:87:c8:f5:2c:69:63:9b:90:8a:c2:03:16:d6:f8:0f:
         fb:06:20:38:39:d8:c6:81:14:95:6d:55:f9:2f:6b:40:25:fa:
         49:35:c2:aa:e7:25:c0:a8:30:11:3c:53:52:a2:a1:a6:4e:5c:
         60:0d:69:d7:b8:6b:59:aa:21:3e:86:2b:68:c4:f5:82:12:96:
         a8:ef:a7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 03:09:40 2024 by rpki-client on console-ams.rpki-client.org