Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
File:                     Ic9mCQ8NCPeTru46mq74zw9BMAs.mft (raw, json)
Hash identifier:          4RAu89IFSADkehv17b9RJ38scnByen5twzeDIyIE9QE=
Subject key identifier:   4A:8E:D8:39:83:80:DB:99:4A:11:B4:EE:8A:90:C5:B9:44:C6:22:10
Authority key identifier: 21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B
Certificate issuer:       /CN=F36818C8AF/serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
Certificate serial:       0406
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
Manifest number:          0404
Signing time:             Fri 03 May 2024 01:31:36 +0000
Manifest this update:     Fri 03 May 2024 01:31:36 +0000
Manifest next update:     Sun 05 May 2024 01:31:36 +0000
Files and hashes:         1: Ic9mCQ8NCPeTru46mq74zw9BMAs.crl (hash: 0v7SzIRxjrEyuNw2ReKLwWF5vAM+To8sjiuuHKk4GiQ=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 05 May 2024 00:04:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1030 (0x406)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36818C8AF/serialNumber=21CF66090F0D08F793AEEE3A9AAEF8CF0F41300B
        Validity
            Not Before: May  3 01:31:36 2024 GMT
            Not After : May  5 01:31:36 2024 GMT
        Subject: CN=66343e78-9545
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0b:f5:b3:2d:84:c0:fe:e6:d9:8e:6b:17:4b:
                    6e:c9:b3:a2:89:da:35:0a:33:79:27:5d:34:a4:f7:
                    1b:96:f1:f8:ff:ce:25:4b:b3:83:fe:68:1d:d0:59:
                    9d:a0:e3:8e:8d:97:31:c8:5c:11:57:35:a5:32:21:
                    a2:2e:9f:6d:35:b6:35:2b:cc:cf:86:98:c5:47:23:
                    62:12:ea:86:4f:61:f0:7e:7d:21:34:d7:59:5c:68:
                    6a:f3:b0:01:ea:2a:55:3b:4d:db:63:9e:25:c3:ae:
                    f3:26:f8:36:dc:8d:d8:bf:0d:2c:c0:b0:4a:a2:ba:
                    82:41:dd:e3:27:73:02:40:a1:3e:2d:da:5d:9c:53:
                    43:ea:e9:2f:60:46:a2:a6:ec:40:5d:72:bf:97:99:
                    27:3e:a3:b6:1a:21:97:86:5a:b4:4b:a7:d8:8b:39:
                    7a:4d:76:5c:34:2c:68:4a:70:ff:3f:45:84:ee:1a:
                    18:c9:0a:48:4d:f1:9c:68:9a:c1:e8:6e:f5:6e:b5:
                    1e:99:da:73:2c:93:db:1a:74:ca:17:8d:88:0c:6d:
                    ef:4c:30:77:e4:74:28:ca:23:43:01:25:8a:16:e6:
                    b2:5a:90:cb:68:9b:0a:8d:67:01:af:79:88:60:af:
                    7a:51:19:e4:21:a7:8f:43:f3:48:be:86:06:2d:d5:
                    aa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8E:D8:39:83:80:DB:99:4A:11:B4:EE:8A:90:C5:B9:44:C6:22:10
            X509v3 Authority Key Identifier:
                keyid:21:CF:66:09:0F:0D:08:F7:93:AE:EE:3A:9A:AE:F8:CF:0F:41:30:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ic9mCQ8NCPeTru46mq74zw9BMAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36818C8/E820A7FCF9F211EBAC18522DD8A014CE/Ic9mCQ8NCPeTru46mq74zw9BMAs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:61:d3:0b:e9:24:25:b5:d2:a8:e2:4a:65:7e:2b:85:3e:a8:
         f2:5b:2c:eb:f5:ee:ad:47:ee:aa:d0:20:73:f0:17:52:d4:33:
         b1:f6:fb:86:d5:e7:3a:43:4f:be:df:78:2d:81:3f:ba:d4:6c:
         51:cf:71:11:00:37:90:d3:8e:c2:66:d8:ac:9b:81:e8:73:7f:
         82:26:5f:65:b4:b8:89:fe:80:64:d6:a9:4c:75:7f:0e:9e:98:
         30:25:ba:10:33:8c:16:3e:09:e7:6c:78:ed:0a:2f:b2:54:62:
         eb:5f:b4:67:1e:52:f1:c2:ac:b8:76:b0:a4:0b:6d:0f:ef:35:
         17:08:16:75:3c:17:12:97:25:6b:13:97:ee:7e:1c:5b:21:05:
         ff:3f:6e:e7:47:74:78:74:97:fc:45:9f:21:6f:73:81:56:25:
         8a:61:48:9e:da:22:0e:77:e2:f9:a3:ee:20:79:37:a6:3a:e7:
         65:20:8b:b3:48:5d:03:1c:4e:8a:20:a2:09:f7:59:0f:22:00:
         aa:be:e1:2c:a2:03:28:53:8c:bf:d0:c6:07:17:4c:fe:e4:f8:
         a8:77:ef:8f:ef:58:e7:7a:4a:ad:c6:58:c1:06:a9:88:4d:cb:
         30:47:9f:41:8d:e8:2b:6b:0c:2b:b3:be:40:2e:30:63:74:7d:
         dd:f9:47:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:10:10 2024 by rpki-client on console-ams.rpki-client.org