Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
File:                     ZoAHqf6WL0fU33c33hdQYKxavOw.mft (raw, json)
Hash identifier:          y25R9j7/iYCtVYeiTA8wClxqmaJw63K0aEsbT7+yUAk=
Subject key identifier:   A7:F1:F1:91:4D:CE:5C:C0:92:D8:DB:8A:54:21:14:20:19:0E:C9:A3
Authority key identifier: 66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
Certificate issuer:       /CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
Certificate serial:       28
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
Manifest number:          26
Signing time:             Sat 25 May 2024 02:37:17 +0000
Manifest this update:     Sat 25 May 2024 02:37:17 +0000
Manifest next update:     Mon 27 May 2024 02:37:17 +0000
Files and hashes:         1: ZoAHqf6WL0fU33c33hdQYKxavOw.crl (hash: Ov3AFmqjqDIuol/l99cKOojEJn05JTmAkDx8oqBr8Hk=)
                          2: 4348CF92009411EF9CFF8618017001B1.roa (hash: kE7Wa2CuajfImbklB2Ig5E0X9bA3vR+6n/vZhq2Lzac=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                          rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 27 May 2024 00:16:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
        Validity
            Not Before: May 25 02:37:17 2024 GMT
            Not After : May 27 02:37:17 2024 GMT
        Subject: CN=66514edd-bdf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:06:d2:1c:4b:30:fc:75:dc:33:0b:05:8a:fa:
                    a4:f3:2e:b2:9d:c0:94:60:a1:b2:06:bb:77:c2:d2:
                    9e:43:f7:d8:01:31:2b:d7:df:b0:b2:8b:80:5d:cb:
                    e2:72:2b:52:35:95:44:aa:93:69:cf:95:89:36:37:
                    bc:59:bf:45:41:e8:5c:35:b5:a2:3f:a0:03:89:c8:
                    f4:49:3a:08:09:94:29:5e:a4:9c:f6:cf:35:60:ca:
                    00:81:18:47:43:61:b0:3e:73:9e:4b:c6:af:c0:7c:
                    3b:45:8b:c8:80:d1:2f:9d:bb:cf:28:6d:e3:5b:79:
                    75:9b:86:10:0a:87:71:31:e0:f7:af:63:74:d9:c9:
                    70:dc:1a:dd:f6:51:c9:63:67:f3:5a:a2:6b:38:43:
                    f7:77:1e:3b:3f:a0:0f:14:bd:37:a5:78:d8:96:d4:
                    64:50:97:45:fb:25:a7:42:f0:2f:73:9f:9e:c9:a3:
                    66:f2:8c:d3:d7:cc:fe:e4:64:0f:b7:4b:4a:66:08:
                    1d:cf:c1:85:ac:c8:0f:94:52:68:98:08:7e:cf:af:
                    d6:32:a3:8b:cc:5a:03:7c:86:e2:10:e3:88:09:6c:
                    2e:de:0c:66:6f:ab:8c:e8:2c:98:06:99:72:c4:a6:
                    b3:c5:0f:65:05:b7:20:0d:1c:f2:18:72:c9:ec:c1:
                    0f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F1:F1:91:4D:CE:5C:C0:92:D8:DB:8A:54:21:14:20:19:0E:C9:A3
            X509v3 Authority Key Identifier:
                keyid:66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:47:14:39:fb:c4:8f:e4:59:61:7a:b7:03:c9:27:6e:5d:db:
         da:9e:68:c3:53:a0:d6:70:26:46:8b:b0:a4:c9:63:c2:14:b7:
         cb:7d:af:b9:b5:55:1c:65:99:ad:b6:55:5f:49:df:26:f7:85:
         55:9e:30:d9:4e:3d:e2:77:02:4f:00:a4:24:d5:43:c6:44:3b:
         c4:97:1e:30:7a:a6:34:4e:54:60:31:c5:a8:74:1d:6a:97:f9:
         13:75:70:36:6a:13:61:fe:91:2f:44:ea:0d:e5:6c:77:68:b4:
         43:3e:24:78:00:32:d9:e1:ba:c3:92:ad:1b:40:70:33:2c:c2:
         ff:67:52:de:fd:9d:b6:c5:f5:16:c2:de:57:5d:72:56:b4:67:
         88:52:ee:f2:07:4b:f7:9f:ea:3a:d5:96:24:41:56:31:87:84:
         57:5b:bf:5b:5c:b0:ba:34:86:5c:a2:98:a7:aa:47:f3:81:c9:
         d2:36:ba:ea:f7:6d:6b:90:ec:c1:25:50:3b:0d:a4:a0:6b:d7:
         a7:25:51:97:92:90:cd:98:2f:5a:ee:a2:8a:f8:92:56:c6:52:
         db:f5:38:31:ad:bc:cd:c2:f8:d2:2a:ad:5b:5f:ad:33:f0:f9:
         7c:15:b0:bf:72:ee:f0:3f:5e:05:f4:e0:5e:cc:6b:8a:4b:56:
         5a:23:50:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 03:05:54 2024 by rpki-client on console-fra.rpki-client.org