Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
File:                     XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft (raw, json)
Hash identifier:          43XSXsswkghLxQKUQAmfPm5jgoIJ0di+YriRTDA3F3M=
Subject key identifier:   1B:16:CD:16:77:71:21:E1:A0:D8:D3:1D:27:C3:27:77:93:11:3D:33
Authority key identifier: 5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF
Certificate issuer:       /CN=F3682615AF/serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
Certificate serial:       02B6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
Manifest number:          02B4
Signing time:             Thu 20 Jun 2024 01:53:00 +0000
Manifest this update:     Thu 20 Jun 2024 01:53:00 +0000
Manifest next update:     Sat 22 Jun 2024 01:53:00 +0000
Files and hashes:         1: XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl (hash: P0wVwx6A73IWmvW/HqQzlthzKn/p6hSFaepQ8herisQ=)
                          2: C237033624A011EDACDA0690F1222468.roa (hash: D/DHDU6oMRTGaAGz0aykkPymb01YZKRl9kWAaqrzvqM=)
                          3: BBA7E63A249F11EDB007DB8BF1222468.roa (hash: td7f65Ui6mtbcQXkbOJq+SbVOjFssDdQKpwBSUscfV8=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 22 Jun 2024 00:05:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 694 (0x2b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3682615AF/serialNumber=5D0D636F51594E6367F9CAB2D1438FD3A1C5DDEF
        Validity
            Not Before: Jun 20 01:53:00 2024 GMT
            Not After : Jun 22 01:53:00 2024 GMT
        Subject: CN=66738b7c-b7cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d0:93:96:18:37:b8:bb:f4:31:f7:7c:aa:ce:
                    40:c8:11:66:76:16:f5:e0:a8:7e:63:dd:94:40:1b:
                    8d:b0:b2:e2:f9:9f:0b:10:df:bd:14:7e:fa:70:f9:
                    70:a6:33:1e:c1:96:35:5a:47:08:0c:89:93:36:50:
                    b3:49:86:16:ec:1a:1e:5d:e1:37:45:21:c8:ce:fe:
                    34:d3:23:9a:e9:c5:b9:e7:1f:31:4e:dd:a9:eb:50:
                    7b:5d:0b:0c:ec:ef:14:f3:0e:9b:0f:c4:2e:df:bc:
                    db:20:c9:cc:fc:66:8d:32:32:00:65:6a:89:b1:70:
                    5e:d6:29:e9:a1:5d:b1:f2:42:ac:99:ff:00:a3:39:
                    d9:77:86:ec:b0:51:62:fc:51:e0:d4:90:2c:30:c0:
                    4d:9e:d8:76:a3:b1:2b:3f:30:59:8c:0e:a7:f8:6e:
                    66:6e:04:f6:71:7e:fc:01:3c:19:fc:f2:46:cc:26:
                    d0:04:a5:5d:bb:ae:dc:c8:c1:58:e7:e6:d0:bf:89:
                    9c:c2:48:a1:f0:07:8f:ec:14:0e:24:0f:19:8b:71:
                    45:86:2b:e5:7c:64:b9:17:8f:0c:b9:6d:49:89:b5:
                    76:ae:1c:8c:d5:d5:f5:7a:29:d1:4a:74:35:39:d8:
                    aa:37:c6:2b:77:19:9e:43:2b:b7:73:68:59:59:49:
                    90:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:16:CD:16:77:71:21:E1:A0:D8:D3:1D:27:C3:27:77:93:11:3D:33
            X509v3 Authority Key Identifier:
                keyid:5D:0D:63:6F:51:59:4E:63:67:F9:CA:B2:D1:43:8F:D3:A1:C5:DD:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XQ1jb1FZTmNn-cqy0UOP06HF3e8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3682615/77460900249E11EDA48F0988F1222468/XQ1jb1FZTmNn-cqy0UOP06HF3e8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:ed:77:85:2c:a7:ef:63:31:96:89:3a:99:f5:9e:7f:2e:9d:
         69:85:53:e1:18:6a:a8:69:46:a1:b9:6c:ec:46:db:2f:72:81:
         ae:07:a9:48:1a:73:1c:cb:36:8a:e6:5d:83:8a:6c:fb:e5:87:
         a7:09:40:10:b7:0b:5d:d1:c7:c4:4c:5c:e3:53:1c:9c:68:91:
         2a:b0:7b:cb:00:b7:48:ad:f4:7e:af:bb:78:37:8b:50:53:c3:
         26:b3:9d:5a:7f:86:b8:56:eb:af:f8:d8:20:3b:a4:07:5e:59:
         0e:98:54:2a:ae:8b:8b:31:53:9d:d6:84:e0:a1:1c:ea:19:a9:
         b8:e8:c5:24:c5:dd:a9:d8:8f:d9:cc:ab:15:48:59:46:2e:5f:
         ea:7f:43:8c:60:02:8b:18:75:87:18:0b:8a:37:6d:a0:10:5f:
         42:e2:65:cd:8e:49:3e:d5:ba:59:bc:21:e5:04:fa:48:da:8d:
         19:6d:5b:df:08:51:79:06:07:48:bd:93:48:19:8b:21:70:7c:
         69:27:52:ea:f0:95:e1:25:cc:de:4c:0f:e2:b7:d2:ba:78:05:
         d1:b3:9f:87:a5:ce:34:5b:c2:18:d5:7e:41:f0:17:c6:5c:70:
         ab:05:5d:82:42:ee:05:15:9a:e7:4c:8f:97:5a:73:3d:e1:2a:
         1e:3f:6b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 03:05:13 2024 by rpki-client on console-ams.rpki-client.org