Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
File:                     qPP_zPK9bxc-V43OhiXgHFOX9zU.mft (raw, json)
Hash identifier:          M4ZylHCGNo7UP3sQi/8ZKjE9GmwtXw94ZdwXmrNx/WU=
Subject key identifier:   83:62:29:07:CE:61:65:34:B3:E1:A5:AC:B4:22:C1:C7:FA:3A:FA:6D
Authority key identifier: A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35
Certificate issuer:       /CN=F3684027AF/serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
Certificate serial:       03D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
Manifest number:          03D2
Signing time:             Thu 02 May 2024 01:35:50 +0000
Manifest this update:     Thu 02 May 2024 01:35:49 +0000
Manifest next update:     Sat 04 May 2024 01:35:49 +0000
Files and hashes:         1: qPP_zPK9bxc-V43OhiXgHFOX9zU.crl (hash: FCtTqOyKEExWxwGidXr4efUw2li9USKiI6c4bnfL3PU=)
                          2: 7053DDBA207711ECA57B2A27D8A014CE.roa (hash: 8FwYiwQNn3Nk7JGlhTjNINHWw5iUKIWhAuMhk3sKQys=)
                          3: 5EE2F40CED9F11ED90CD53134AD9E6FC.roa (hash: 7NdUaz4rD9qpZUgGvl0CsoD0saUCFYGySX0YWVKqUtI=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 04 May 2024 00:58:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 980 (0x3d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3684027AF/serialNumber=A8F3FFCCF2BD6F173E578DCE8625E01C5397F735
        Validity
            Not Before: May  2 01:35:49 2024 GMT
            Not After : May  4 01:35:49 2024 GMT
        Subject: CN=6632edf6-ae3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:22:cb:7c:a9:ea:4b:83:90:d0:0a:6f:84:a6:
                    47:eb:c0:ca:ae:6b:76:a5:a0:b1:3d:fd:96:cc:a9:
                    bc:9c:46:52:f4:28:ce:63:a5:25:8a:73:1c:12:ca:
                    32:a3:20:6f:ed:0c:b6:5e:ba:6f:e7:0c:1a:4d:ca:
                    f2:84:29:6b:90:0a:33:4f:c4:c7:d5:9a:ee:88:cd:
                    af:ad:2b:11:00:31:69:99:21:52:53:26:70:cb:94:
                    b7:93:ce:86:7f:ea:64:79:2f:49:31:85:61:7f:0a:
                    80:0a:cf:06:d2:6c:7f:9b:5c:9b:7c:58:c7:d8:3c:
                    cd:6f:57:f9:a3:1c:42:24:e8:f8:eb:30:61:50:c6:
                    75:13:d9:ad:95:d2:ac:6b:6f:fc:e8:27:92:a5:58:
                    95:de:99:54:33:f0:c1:74:4b:93:76:0b:a7:79:01:
                    cf:3d:e2:7b:7c:aa:1b:e1:a5:29:47:5c:0f:49:56:
                    62:be:b9:ec:f6:36:a6:15:ae:aa:78:93:59:68:04:
                    15:87:29:6f:29:e0:b2:98:46:98:da:99:f8:ec:fe:
                    32:32:f9:10:f6:69:4d:50:5a:4f:8d:b8:1d:b8:41:
                    d7:95:e5:3e:f7:38:bd:7a:92:b7:8d:b8:03:a9:ab:
                    43:56:1b:0a:0c:3a:f1:e2:a8:a0:01:2d:3c:2e:4e:
                    0e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:62:29:07:CE:61:65:34:B3:E1:A5:AC:B4:22:C1:C7:FA:3A:FA:6D
            X509v3 Authority Key Identifier:
                keyid:A8:F3:FF:CC:F2:BD:6F:17:3E:57:8D:CE:86:25:E0:1C:53:97:F7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qPP_zPK9bxc-V43OhiXgHFOX9zU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3684027/43DC0FDC207711ECB23FE226D8A014CE/qPP_zPK9bxc-V43OhiXgHFOX9zU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:54:f1:18:ad:e9:5a:47:d4:6a:13:0d:46:e1:29:ba:e2:d8:
         fe:90:72:f9:ac:59:8c:61:07:39:89:90:37:dc:04:c9:6f:4d:
         74:a0:07:c4:a2:db:72:52:52:e6:2d:69:f5:05:93:7b:7e:66:
         99:88:3d:4a:97:00:c1:9d:c7:99:51:0f:c0:70:0e:ba:2b:21:
         0d:60:4b:3d:b0:ca:b1:22:98:82:fd:fd:ed:7f:e5:bd:aa:e6:
         9f:e2:d4:0e:ce:86:a4:87:bf:09:62:81:26:83:4a:08:fd:fa:
         ea:70:ea:d2:19:f1:eb:18:92:86:23:f9:15:6a:b0:96:09:d7:
         2f:fe:eb:79:15:5c:da:9e:c9:ee:1f:dd:96:a9:5b:cc:7e:c1:
         40:c7:06:a1:01:53:7f:10:45:b4:31:77:67:de:c0:c9:4f:db:
         ff:bc:33:4f:86:4b:a8:77:04:20:48:41:19:0d:24:83:e8:6e:
         f3:d1:aa:08:35:49:94:3c:72:a8:3d:56:10:68:2f:c0:c1:e2:
         79:fb:e8:b5:d0:79:07:c4:b1:3e:8e:03:d1:8b:d9:9d:17:f1:
         b8:b3:de:2b:6c:c8:da:bd:07:f6:3b:cc:39:5d:a5:c7:2f:fd:
         52:35:5b:15:32:f1:ae:02:2a:3d:95:ce:8e:16:49:40:35:74:
         a7:bb:c5:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:03:47 2024 by rpki-client on console-fra.rpki-client.org