Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
File:                     IhRVkFuxmsTjjt3avWyqg1KbNE8.mft (raw, json)
Hash identifier:          r4ltnp/M5KrcKKlm3kzjZku0Pfugo+I0oZj0i9g3Rcw=
Subject key identifier:   33:12:07:BD:CA:49:98:C2:25:F7:CD:DF:36:EE:BE:CA:81:58:E4:F3
Authority key identifier: 22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F
Certificate issuer:       /CN=F36825D0AF/serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
Certificate serial:       0303
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
Manifest number:          0301
Signing time:             Mon 06 May 2024 01:46:06 +0000
Manifest this update:     Mon 06 May 2024 01:46:06 +0000
Manifest next update:     Wed 08 May 2024 01:46:06 +0000
Files and hashes:         1: IhRVkFuxmsTjjt3avWyqg1KbNE8.crl (hash: VTnhPM46q0KSiqCK0vp0oc/QEB9zLVN9kcNA7RSbLZw=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 08 May 2024 00:04:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 771 (0x303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36825D0AF/serialNumber=221455905BB19AC4E38EDDDABD6CAA83529B344F
        Validity
            Not Before: May  6 01:46:06 2024 GMT
            Not After : May  8 01:46:06 2024 GMT
        Subject: CN=6638365e-03b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:a0:76:f6:e3:09:42:ad:99:77:9a:86:50:b1:
                    e0:65:a8:3b:ab:59:e3:d5:5e:43:1c:f1:4d:69:83:
                    d0:04:e7:e4:a9:05:3f:b9:56:34:4a:4f:51:ff:20:
                    13:cc:5d:3f:cd:e1:8a:21:41:ab:88:32:5e:45:de:
                    55:1c:29:05:b2:b5:a9:28:d2:18:18:a0:c5:16:79:
                    91:56:b0:37:f9:0a:3c:e2:86:58:cd:a0:77:32:5a:
                    3e:dc:c8:c0:71:38:a6:73:24:21:98:9e:17:6d:51:
                    24:72:8e:68:1e:2e:29:3c:0c:6d:e1:b1:f6:31:e2:
                    f5:9c:43:9c:20:d2:83:95:d4:d1:d1:f1:1c:e2:02:
                    45:30:c2:7e:09:61:9e:e5:46:b9:db:58:e8:21:20:
                    f7:01:03:28:2e:4e:47:57:e8:b1:a5:ad:b4:74:7f:
                    8e:eb:42:4a:8c:32:05:84:e8:f2:46:0f:4c:a1:90:
                    47:86:57:41:d9:fb:ff:29:7a:1d:fc:5a:f5:e3:53:
                    a5:29:bc:10:55:a7:68:e5:37:ca:8c:32:d4:77:e8:
                    40:bb:78:ff:46:8d:b9:3a:f4:cc:02:23:fa:b1:67:
                    a3:0e:29:79:07:4c:99:85:e7:3a:aa:a3:7e:8b:14:
                    fb:e0:85:c8:5a:1c:4c:64:26:54:29:80:e1:40:fb:
                    09:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:12:07:BD:CA:49:98:C2:25:F7:CD:DF:36:EE:BE:CA:81:58:E4:F3
            X509v3 Authority Key Identifier:
                keyid:22:14:55:90:5B:B1:9A:C4:E3:8E:DD:DA:BD:6C:AA:83:52:9B:34:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IhRVkFuxmsTjjt3avWyqg1KbNE8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36825D0/E93D27AAC7C411EC906F94DBF1222468/IhRVkFuxmsTjjt3avWyqg1KbNE8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:80:b4:97:57:05:0f:81:81:30:c5:c4:ca:75:9b:37:e3:1d:
         7c:cf:4e:fa:d9:4c:a6:de:1a:8a:44:fa:0f:ba:30:d8:19:49:
         80:ca:8b:dd:39:da:25:fe:26:15:81:9d:5e:b6:19:d3:ad:a6:
         c3:24:67:f8:a5:0e:3a:78:ed:a0:0c:3e:9d:c6:30:1c:90:d6:
         a8:0f:e7:1c:68:56:87:f6:b2:76:bd:38:d5:5b:c3:c5:e0:42:
         11:f2:25:4a:a4:28:e8:33:e2:2f:20:d7:73:fb:04:4c:44:39:
         db:fd:91:79:9d:77:35:3c:de:07:1f:bf:26:88:9e:f6:53:4a:
         99:c6:8f:41:d2:4d:02:72:6f:92:71:b5:ff:b3:23:0d:02:a3:
         0d:a4:1b:3e:18:61:3f:83:4c:dc:eb:39:2e:35:40:53:9d:70:
         b5:b7:32:28:93:bc:49:5d:44:c1:33:74:5f:41:d6:2a:0a:af:
         48:80:33:42:1c:50:4c:35:94:68:cf:cc:73:8f:67:21:93:b8:
         7a:7f:ce:db:5c:15:28:3a:bf:5f:2e:5f:9b:05:d4:25:55:ac:
         22:39:68:5c:7b:01:6f:c7:cd:70:31:20:59:7e:a2:0b:a4:f1:
         d0:00:37:82:73:82:f8:d1:aa:bb:cf:6e:fb:8c:e6:1b:52:f7:
         bb:bd:b7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 03:08:09 2024 by rpki-client on console-fra.rpki-client.org