Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
File:                     eRR9PW5TftaH0IV7r4SSgRj9pOU.mft (raw, json)
Hash identifier:          dZPgOXzrfTaEYVKFZvZJmezaG3yiooXOmsSl6T+OQcI=
Subject key identifier:   DA:1C:19:80:52:70:73:46:BF:75:A6:10:CA:25:AA:53:8E:36:D6:92
Authority key identifier: 79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5
Certificate issuer:       /CN=F3688163AF/serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5
Certificate serial:       6B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
Manifest number:          6A
Signing time:             Mon 27 May 2024 02:32:13 +0000
Manifest this update:     Mon 27 May 2024 02:32:13 +0000
Manifest next update:     Wed 29 May 2024 02:32:13 +0000
Files and hashes:         1: eRR9PW5TftaH0IV7r4SSgRj9pOU.crl (hash: rrms8MitsklSV1eRHbRYLRJQehB5IFCM9yuPgs1Lf3Y=)
                          2: E8A5A2BCCBC911EE8E9BEF77775412E6.roa (hash: uW1ZZtqf2li8jzBd7IN42gC/xPbqnD5CcVOfHA/YQtE=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 29 May 2024 00:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688163AF/serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5
        Validity
            Not Before: May 27 02:32:13 2024 GMT
            Not After : May 29 02:32:13 2024 GMT
        Subject: CN=6653f0ad-aa8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f4:ca:11:86:82:a6:37:af:6a:02:e4:3c:ec:
                    39:c6:53:08:6a:5d:5e:f3:de:08:c2:86:20:35:c8:
                    fd:de:91:ff:76:ca:31:b3:f9:7c:8e:ee:b3:68:37:
                    7c:ba:c4:22:9a:39:a1:c0:74:f7:cc:e2:48:29:02:
                    b2:9e:09:5c:5e:51:09:8b:30:b0:2a:b4:e0:43:a3:
                    b6:14:c8:13:d8:30:6c:d2:fc:e5:38:a1:b8:31:fa:
                    ba:70:6d:82:32:8f:61:f6:25:92:6b:c0:e8:70:97:
                    33:d8:e0:56:b9:bb:91:aa:b4:03:17:aa:fa:41:98:
                    38:45:4b:ef:ac:8c:de:9e:fc:89:b8:fb:05:93:62:
                    af:ca:2b:d7:0b:c6:b9:9e:6a:e1:5b:36:fe:b7:56:
                    bb:e2:f4:6f:8c:31:ae:35:9e:fb:47:47:d1:5a:a2:
                    a3:e4:1c:7f:14:c9:a6:01:26:40:07:3a:25:b4:10:
                    de:1d:f4:ee:ef:ea:ce:3a:7e:d5:de:bc:20:63:ab:
                    f3:38:9c:4e:e7:fe:36:4d:18:96:81:d4:a4:2d:39:
                    07:78:59:71:7e:61:28:f0:c6:e0:af:89:aa:cc:d1:
                    21:0b:ec:9e:45:c8:f3:6b:ce:31:0b:49:d5:a0:66:
                    7d:eb:a0:97:c1:93:e9:ec:a0:7c:f7:0e:8d:25:98:
                    04:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1C:19:80:52:70:73:46:BF:75:A6:10:CA:25:AA:53:8E:36:D6:92
            X509v3 Authority Key Identifier:
                keyid:79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:12:0b:c8:0e:1c:a2:41:9c:ba:1c:be:fe:3e:09:8a:68:24:
         1f:df:39:8f:c5:5b:7a:69:ff:53:c2:71:4f:68:6d:05:e8:09:
         2c:2b:8d:85:9b:ae:d4:16:8e:7c:48:2f:28:62:f9:2a:73:8a:
         64:9b:0c:da:0b:1a:92:73:b7:8c:ec:83:a9:bc:1d:16:81:29:
         1f:4b:b5:a7:f4:f7:6f:e6:50:cb:ce:1d:d6:d8:04:4b:5d:fc:
         bb:d1:74:13:4b:80:93:32:33:46:b2:80:20:30:e7:05:f7:a2:
         ec:0f:78:97:8c:8a:f2:5d:4c:1c:33:f9:d4:32:b8:99:26:4b:
         97:2a:e8:0f:86:93:2e:a2:62:84:44:f2:2d:33:d1:0e:05:7c:
         2b:c8:b5:51:92:dd:ec:12:0f:65:47:c5:64:fb:13:f1:6e:c4:
         db:c0:d2:bc:99:ba:1d:a9:2e:15:f1:92:55:34:e7:19:21:69:
         1a:c1:04:2d:b9:0c:a7:69:f0:c6:72:5e:fd:b8:41:8c:a9:1e:
         fa:f1:c8:af:64:2f:fe:57:5c:71:0b:72:6b:5c:5b:d8:73:f6:
         82:a4:ba:50:9e:33:41:64:2a:e0:72:e2:5e:d9:74:80:60:c3:
         a0:5f:1a:5c:d6:93:49:5d:b9:50:b5:cd:cf:4d:8c:7d:1b:9c:
         ca:8f:8e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----