Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
File:                     ZoAHqf6WL0fU33c33hdQYKxavOw.mft (raw, json)
Hash identifier:          D0fow+XzF48GJZoO96sP8+uCOeY9sdguk6yaRRQHULc=
Subject key identifier:   A7:8B:BC:6D:67:F2:68:4D:E5:D9:10:5A:23:DE:C5:C4:EE:2F:12:58
Authority key identifier: 66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
Certificate issuer:       /CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
Certificate serial:       E3
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
Manifest number:          E1
Signing time:             Sun 24 Nov 2024 02:40:14 +0000
Manifest this update:     Sun 24 Nov 2024 02:40:14 +0000
Manifest next update:     Tue 26 Nov 2024 02:40:13 +0000
Files and hashes:         1: ZoAHqf6WL0fU33c33hdQYKxavOw.crl (hash: l4ptpPnFmP37peFbxJf/yNYYsQ4QvJ1WZuemdTowsXM=)
                          2: 4348CF92009411EF9CFF8618017001B1.roa (hash: kE7Wa2CuajfImbklB2Ig5E0X9bA3vR+6n/vZhq2Lzac=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                          rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 26 Nov 2024 00:21:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
        Validity
            Not Before: Nov 24 02:40:14 2024 GMT
            Not After : Nov 26 02:40:13 2024 GMT
        Subject: CN=6742920e-4599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:fc:e6:8c:38:9d:a6:5d:55:ef:28:e3:e9:
                    02:47:76:52:c2:58:09:4c:6a:12:95:35:21:f5:4f:
                    28:34:e3:d5:d6:0d:72:14:61:2c:1a:e7:b3:ae:4f:
                    8c:1e:8f:69:41:0b:c3:52:fa:17:f4:54:dd:70:b2:
                    b8:ea:8a:85:ae:e7:45:b4:f1:5b:3d:fe:17:e7:49:
                    e0:4e:d0:0a:d0:ac:eb:60:09:6f:1d:22:cd:ec:21:
                    83:49:b9:26:f2:6b:dc:c8:90:f6:ec:a4:80:a3:ab:
                    63:21:31:ce:77:d9:74:78:87:3e:35:eb:11:63:11:
                    c1:2e:85:77:1c:ce:3e:09:8a:dd:3d:ba:88:0f:04:
                    c4:db:ad:d5:0a:80:3e:c1:2b:fe:42:39:50:20:a7:
                    0d:55:f4:92:08:db:4c:1d:a5:1a:e0:73:e3:31:bc:
                    fc:c8:7f:25:f9:92:5f:78:39:c3:54:f8:c4:41:60:
                    7c:40:f2:46:36:03:56:e4:e6:85:cb:0d:77:ee:67:
                    1f:c3:42:89:0c:64:eb:d7:93:76:1d:ca:d1:a7:9c:
                    85:a0:92:e6:76:c3:19:9c:b1:19:a7:70:fa:a3:e5:
                    26:ae:7f:7b:b0:6d:da:d8:99:3f:51:63:ed:cc:63:
                    d3:85:6a:5b:60:74:1a:20:6e:cf:cd:dd:c7:af:52:
                    23:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:8B:BC:6D:67:F2:68:4D:E5:D9:10:5A:23:DE:C5:C4:EE:2F:12:58
            X509v3 Authority Key Identifier:
                keyid:66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:f5:ef:27:3d:6d:89:7a:67:03:1d:2a:ce:e8:4d:40:db:0e:
         f1:cd:4b:a6:8b:86:8f:73:63:41:ca:e7:d2:3c:2d:82:39:ee:
         71:ed:29:2c:06:97:a2:8b:43:a6:c8:b3:0a:24:5a:5e:36:83:
         9c:1e:65:83:82:0e:66:62:8c:68:12:7c:cc:81:5a:28:7e:40:
         30:7b:90:cb:21:39:6e:93:45:88:57:5a:c1:eb:7d:7f:14:ab:
         cb:5b:35:09:11:93:40:b4:92:be:49:50:00:8e:f8:56:a1:c2:
         a9:7a:ad:c1:1b:bd:a1:6e:39:14:9b:a5:46:33:de:bb:06:f8:
         7a:a6:bf:3a:52:b6:a7:3d:c3:c9:43:ec:38:05:a1:49:6c:c8:
         e3:51:98:a4:61:38:0d:a8:8d:90:36:88:07:59:1f:09:bf:71:
         93:da:ae:c4:24:04:1d:48:76:07:3d:30:cf:d0:52:0e:e9:f9:
         68:30:74:c5:fe:00:2e:4e:2c:91:cd:5f:f0:00:19:d4:40:ae:
         fc:04:53:6d:d6:fe:0d:36:99:ba:88:1e:86:c3:96:07:64:6f:
         c4:6b:77:b9:53:85:85:e8:67:ff:d3:04:9c:d8:23:da:66:66:
         4d:97:c0:2e:ae:ef:67:f9:3a:51:07:fb:64:1b:17:ca:c8:ca:
         4b:7c:35:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:29:37 2024 by rpki-client on console-fra.rpki-client.org