Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
File:                     l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft (raw, json)
Hash identifier:          KwtEr49zWMZ43m2e92EITcRi3mLoevGnwGbMBZKkr4Q=
Subject key identifier:   87:F3:0A:B2:D8:49:4C:F2:7D:DC:26:02:6E:AE:D2:27:2D:8D:F0:5F
Authority key identifier: 97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF
Certificate issuer:       /CN=F36882A1AR/serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
Certificate serial:       044D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
Manifest number:          044B
Signing time:             Sun 05 May 2024 01:26:37 +0000
Manifest this update:     Sun 05 May 2024 01:26:37 +0000
Manifest next update:     Tue 07 May 2024 01:26:37 +0000
Files and hashes:         1: l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl (hash: ZxvMre37ARHCAA8cwwG8omDb3CG+FaLZXpwHIbbn8/I=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                          rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 07 May 2024 00:16:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1101 (0x44d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36882A1AR/serialNumber=9761A2D281DB947EFE87E5BA9150278DBB9896EF
        Validity
            Not Before: May  5 01:26:37 2024 GMT
            Not After : May  7 01:26:37 2024 GMT
        Subject: CN=6636e04d-2464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:ec:2e:13:09:d0:4d:73:a2:88:a5:bf:cd:
                    0f:2e:75:74:80:41:5a:14:b9:84:36:12:1b:e8:37:
                    19:11:b8:62:3c:2c:dc:9b:e6:a4:88:76:f8:21:6a:
                    ec:b2:df:ca:e1:0e:3a:ed:3e:71:c5:cc:54:93:de:
                    68:d3:29:56:0c:47:f5:ff:38:ea:38:c5:ce:e0:30:
                    e0:18:e3:a6:b9:1c:95:d3:ee:2d:04:42:f2:cf:56:
                    30:9d:80:53:0b:2d:ec:b1:85:c5:9f:1b:37:e0:de:
                    50:2c:39:f9:8a:13:85:82:ba:70:5e:e0:7b:8c:df:
                    ae:79:97:d5:f5:f8:13:7d:9f:ba:3f:ac:18:20:d2:
                    06:af:85:2c:0e:50:f4:ef:31:03:f8:ec:7d:6e:f1:
                    55:b6:d0:23:26:17:55:93:f0:f6:1c:39:97:4a:75:
                    f9:a9:87:c0:14:65:6c:b0:8c:8b:a1:dd:6c:65:be:
                    29:32:1d:ea:f0:2c:a1:c1:69:af:63:e3:42:6a:1c:
                    4f:a9:3c:2f:ec:7a:ff:b2:d3:67:3c:87:84:87:f8:
                    05:10:33:d2:40:8b:ca:1b:da:cb:fe:dd:0d:5b:e4:
                    f7:8a:cd:b2:79:6c:81:95:66:e5:20:47:56:fe:7b:
                    95:e1:7e:0b:85:6a:89:82:e8:61:36:70:e8:76:f9:
                    90:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:F3:0A:B2:D8:49:4C:F2:7D:DC:26:02:6E:AE:D2:27:2D:8D:F0:5F
            X509v3 Authority Key Identifier:
                keyid:97:61:A2:D2:81:DB:94:7E:FE:87:E5:BA:91:50:27:8D:BB:98:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/l2Gi0oHblH7-h-W6kVAnjbuYlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/B667B828C7C411EB9736C768F8AEA228/l2Gi0oHblH7-h-W6kVAnjbuYlu8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:2c:e5:16:4f:47:ac:54:2e:cf:87:e0:ed:f4:f4:a2:a6:43:
         a5:bc:2c:26:b9:e9:a0:5d:2f:e6:0f:88:eb:42:a5:24:7e:82:
         73:80:58:46:90:0f:02:2f:e7:2c:45:6e:22:dd:d5:fd:63:07:
         ba:4d:bf:53:1a:10:75:30:65:dc:f9:13:4f:31:60:e6:dc:2c:
         ba:6a:c0:11:b4:a5:73:83:3f:02:32:1e:cb:d3:d9:ae:8f:38:
         fc:66:71:5c:9e:07:d0:7b:11:10:b0:52:f8:69:cb:73:d5:8e:
         0a:5a:e8:d3:51:66:ed:d6:ca:a5:0e:7f:68:60:ab:2f:9e:0e:
         56:65:20:27:4c:20:fd:99:54:1e:27:79:ee:4d:41:bc:f0:51:
         65:11:b3:72:4e:a7:01:b5:24:24:93:4a:0e:10:ae:25:1b:3d:
         09:21:59:91:de:9a:70:46:8a:5d:d9:9a:2c:31:c9:5b:1a:88:
         0a:97:63:a3:3a:16:cd:19:68:ae:9f:2a:f9:14:af:d2:bb:65:
         fd:4f:11:02:0f:b3:a1:55:94:14:6a:37:82:1c:0f:2c:ba:32:
         bc:43:5c:46:84:9f:52:9d:32:d8:bd:ed:30:83:90:f5:1f:89:
         75:ad:0a:fc:e3:ec:2c:46:f9:0a:72:e6:5f:8f:8d:3e:b2:ef:
         57:da:4f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:32:47 2024 by rpki-client on console-fra.rpki-client.org