Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
File:                     FU_bBWSxN90ijzXfSvbkB4DvENY.mft (raw, json)
Hash identifier:          iHDlV7bqzsBy1yhxOBDEddIU9cjuclTjdxeLA7cl8eA=
Subject key identifier:   BC:BF:46:91:DE:E5:0A:50:F8:AE:1E:E2:D6:EE:37:F1:E0:60:36:14
Authority key identifier: 15:4F:DB:05:64:B1:37:DD:22:8F:35:DF:4A:F6:E4:07:80:EF:10:D6
Certificate issuer:       /CN=F3683ABDAF/serialNumber=154FDB0564B137DD228F35DF4AF6E40780EF10D6
Certificate serial:       0622
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
Manifest number:          0620
Signing time:             Mon 17 Jun 2024 01:10:40 +0000
Manifest this update:     Mon 17 Jun 2024 01:10:40 +0000
Manifest next update:     Wed 19 Jun 2024 01:10:40 +0000
Files and hashes:         1: FU_bBWSxN90ijzXfSvbkB4DvENY.crl (hash: cZgdLVUFRE9UFQkogTQqvdNGQz/11rBclyVH8GJfpUE=)
                          2: A988581CAC4611EC954977D35A40D577.roa (hash: ypZ7dVzTwfIkgRkJOad3H/1qI5xUdLeF6E7RUSNDcCE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 19 Jun 2024 00:05:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1570 (0x622)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683ABDAF/serialNumber=154FDB0564B137DD228F35DF4AF6E40780EF10D6
        Validity
            Not Before: Jun 17 01:10:40 2024 GMT
            Not After : Jun 19 01:10:40 2024 GMT
        Subject: CN=666f8d10-9517
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7b:54:9b:0e:de:62:92:41:fb:b5:87:57:83:
                    39:95:ad:55:b8:d2:e1:b2:4f:73:b4:cf:68:6f:32:
                    78:73:e5:f8:7f:8a:49:f5:fd:2f:6b:08:66:7a:62:
                    95:1c:1c:b3:91:30:fc:7a:8a:d9:d3:ba:1e:4a:5f:
                    83:e0:36:55:39:b7:3f:ca:c4:17:de:05:14:c1:f8:
                    dd:e4:6b:b6:d0:e5:c5:be:81:28:da:08:34:71:25:
                    20:86:79:49:33:c5:0c:a9:b5:28:78:27:98:3f:a3:
                    6f:5b:7b:50:78:31:33:7f:19:a8:bd:27:f7:9a:63:
                    4b:21:da:7b:4f:cd:e4:24:7c:bf:b4:5a:ae:b5:5d:
                    07:d5:d6:d9:b8:5a:30:53:d6:a7:36:58:16:7f:41:
                    43:04:79:3c:26:9d:e3:0b:fb:49:f6:e0:4e:fe:a2:
                    51:9b:d7:54:be:64:08:ef:f4:93:ea:de:38:66:70:
                    59:44:4f:a2:2f:4f:ac:43:17:52:ce:1c:27:21:e2:
                    e4:49:b6:38:cf:d1:82:7d:d7:7f:6c:92:d3:65:a2:
                    bf:94:8f:d7:33:df:fa:ee:77:e2:fa:39:b7:61:fe:
                    6d:80:89:26:0f:59:91:ce:e2:fc:e1:52:b9:d3:65:
                    be:9c:12:09:b1:ed:3c:9d:a6:12:96:02:99:ff:5b:
                    40:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BF:46:91:DE:E5:0A:50:F8:AE:1E:E2:D6:EE:37:F1:E0:60:36:14
            X509v3 Authority Key Identifier:
                keyid:15:4F:DB:05:64:B1:37:DD:22:8F:35:DF:4A:F6:E4:07:80:EF:10:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FU_bBWSxN90ijzXfSvbkB4DvENY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683ABD/4EE8C7467D4C11EABB20164CF8AEA228/FU_bBWSxN90ijzXfSvbkB4DvENY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:80:fa:72:36:ba:e2:1a:ef:d6:ed:17:d6:a9:5e:5b:58:73:
         d2:d5:b4:38:d1:29:80:7a:57:ba:a3:10:b1:3a:2d:8f:db:b9:
         1c:bb:36:35:2f:56:0f:36:c0:fe:a2:c7:0e:49:42:34:b6:9b:
         9f:43:0c:ad:ab:e0:d3:53:22:69:45:56:52:14:36:a0:61:4e:
         22:a3:a6:42:6c:a3:57:19:e9:1d:ac:b3:da:02:e6:a8:42:f1:
         8c:d9:44:3b:a3:cc:60:0a:62:69:a7:a9:09:0b:a1:03:a0:b0:
         0e:3a:4d:44:cf:d2:2a:5a:02:4e:7b:c0:16:63:a8:3f:ba:26:
         c1:58:c8:86:d8:48:2e:66:25:a7:49:48:7d:12:9d:7f:ca:8f:
         39:83:ca:8d:d3:3f:54:c7:c0:60:9e:26:12:ea:13:69:98:78:
         07:6e:28:1b:30:c2:8c:34:94:2c:bc:df:44:ef:bf:cd:ea:8d:
         d6:d5:a9:b0:56:7f:08:b0:d6:30:89:a5:87:f8:e6:5d:34:6a:
         ce:c4:42:1d:5c:fd:4e:ea:08:95:49:cd:67:cc:5b:24:a8:0e:
         87:74:a7:57:9d:40:c4:57:2d:e0:14:a5:38:ee:f3:a1:22:04:
         36:7f:8b:b8:0b:f7:41:66:93:06:da:12:a0:05:56:3c:3b:f1:
         d4:e3:02:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 02:11:30 2024 by rpki-client on console-ams.rpki-client.org