Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
File:                     kXMyk_xjUK7funWpFv_0G1Fez0w.mft (raw, json)
Hash identifier:          I3LWJC5lAMObWbnCYlN9LFTKcEO9i5lCpgIm7t8nq7U=
Subject key identifier:   15:8C:F8:B9:A6:72:50:1E:03:DB:F7:8F:DE:62:39:4A:5A:AC:AA:9E
Authority key identifier: 91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C
Certificate issuer:       /CN=F3683A54AF/serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
Certificate serial:       04A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
Manifest number:          04A1
Signing time:             Thu 21 Nov 2024 01:39:27 +0000
Manifest this update:     Thu 21 Nov 2024 01:39:27 +0000
Manifest next update:     Sat 23 Nov 2024 01:39:27 +0000
Files and hashes:         1: kXMyk_xjUK7funWpFv_0G1Fez0w.crl (hash: e4U45r9S6nEm8+qvFLkS66jZ2SyYz96YiQ6aNLInOZ8=)
                          2: 951EA1701F7811ECB1D1961AD8A014CE.roa (hash: 1vZMKT9K0+T6pwn8OE0g59G7GIGSdRRo7NEdcXkRfVc=)
                          3: E739D1BE1F7811ECBE14071BD8A014CE.roa (hash: XvzpJAf5CAfqUsf2t3F2RGOpHSqxkl68xqf6tTZaymg=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 23 Nov 2024 00:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1187 (0x4a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683A54AF/serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
        Validity
            Not Before: Nov 21 01:39:27 2024 GMT
            Not After : Nov 23 01:39:27 2024 GMT
        Subject: CN=673e8f4f-3cb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:70:0e:bf:65:31:28:ed:af:34:ab:09:9a:2a:
                    af:ea:f0:11:f8:e8:eb:29:4d:45:b9:65:8d:18:60:
                    2b:fe:68:50:1d:a4:7b:54:11:e4:1c:84:a4:02:1d:
                    d9:9c:eb:1d:6f:0d:32:8d:bd:cb:5e:98:bd:c7:ec:
                    f2:5a:0f:3b:c0:a0:b1:bc:04:fb:45:c9:50:de:12:
                    87:e1:7f:f3:bf:02:38:10:a5:b1:8f:18:cd:53:e0:
                    d6:e1:03:1b:ca:30:8c:be:ef:ec:b4:b8:3b:38:bf:
                    0c:9e:3d:be:aa:25:a1:eb:4c:d5:37:d9:c4:dc:73:
                    48:52:09:d8:ba:e4:77:82:c6:ec:ee:14:af:84:f3:
                    f3:f1:63:d1:30:03:db:0d:d7:40:0a:14:b9:f1:72:
                    06:e5:b3:eb:05:97:6f:94:3f:81:d5:1d:b7:7d:7a:
                    1b:1f:4f:ef:d8:6a:1e:a5:4c:be:af:2d:6e:e1:64:
                    a2:0b:c8:eb:1f:3a:b5:77:ca:db:0d:e4:47:c3:99:
                    26:7d:2a:95:75:e6:69:25:df:32:ce:29:bd:da:92:
                    d3:ce:71:55:67:57:28:d7:37:f6:fd:f1:e8:6f:dd:
                    65:0c:22:96:77:00:d3:c9:ae:53:96:5d:1b:aa:70:
                    70:16:f5:2f:55:62:e7:26:74:c2:d3:d0:13:8e:1f:
                    46:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8C:F8:B9:A6:72:50:1E:03:DB:F7:8F:DE:62:39:4A:5A:AC:AA:9E
            X509v3 Authority Key Identifier:
                keyid:91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:cb:5d:8e:b2:a3:79:01:01:14:60:a9:28:c5:69:6d:6a:fa:
         76:0d:df:95:a3:2f:70:16:68:f4:5c:9c:5c:1c:3a:78:74:19:
         03:cd:ea:d8:88:6e:07:6d:79:82:ed:0f:1b:b7:12:d1:b7:bf:
         04:90:b0:ac:fd:62:8b:b9:31:72:28:77:37:40:59:a0:89:23:
         f6:1c:e0:55:c6:18:fb:4f:26:ac:2f:79:f7:52:68:25:7c:1d:
         32:3a:9a:e9:2f:58:51:d3:62:46:84:b3:91:b2:7c:43:93:e1:
         99:8d:da:ba:b0:f6:0a:29:30:64:3d:9a:73:bf:c7:92:01:e2:
         31:81:68:de:1a:4e:00:50:45:ef:43:6a:c7:8e:6c:be:6b:c5:
         41:87:c3:fc:73:41:9a:bf:c8:31:c9:d6:52:0a:d7:2b:f9:95:
         93:86:c6:a9:84:43:e6:11:25:7f:89:80:74:1d:6a:a4:b6:d1:
         6f:2d:39:26:ab:d4:19:a0:71:a6:2d:72:4d:13:30:1f:99:6e:
         41:9b:63:d8:37:32:ad:72:61:c8:b2:96:ba:2d:32:62:5a:c9:
         f0:55:26:3b:5f:fc:fc:22:a7:11:20:bb:7f:b2:12:cb:da:b9:
         b6:38:6c:7a:4a:1d:b2:d9:35:f1:88:2a:ef:2a:3a:89:31:d1:
         71:37:87:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:19:48 2024 by rpki-client on console-ams.rpki-client.org