Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
File:                     0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft (raw, json)
Hash identifier:          DtmQjFkMHMQ+GEElPoIuwsWtVq0dROfJG1I3OzWgdDk=
Subject key identifier:   AB:1B:09:96:C3:B2:95:4B:1B:FD:E9:FE:CE:6D:B7:67:34:D7:E3:0D
Authority key identifier: D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C
Certificate issuer:       /CN=F3688596AF/serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
Certificate serial:       0CA1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
Manifest number:          0CA1
Signing time:             Sat 15 Jun 2024 00:40:03 +0000
Manifest this update:     Sat 15 Jun 2024 00:40:02 +0000
Manifest next update:     Mon 17 Jun 2024 00:40:02 +0000
Files and hashes:         1: 0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl (hash: z7qjh7+lRToCei8dNtEtUVu80QDV4pZrr7U7hFqro7s=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 17 Jun 2024 00:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3233 (0xca1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688596AF/serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
        Validity
            Not Before: Jun 15 00:40:02 2024 GMT
            Not After : Jun 17 00:40:02 2024 GMT
        Subject: CN=666ce2e2-dd3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:97:d0:b6:9a:22:e3:f1:27:75:ad:d2:0a:48:
                    29:03:ee:91:8d:94:4c:bb:db:42:ad:4f:c6:3c:bb:
                    b4:c6:0a:2b:31:c9:66:aa:d2:d4:7f:a8:29:51:3d:
                    c7:da:50:45:17:79:70:40:8a:0a:16:96:fa:ac:ce:
                    64:c4:75:70:9a:5d:a4:a4:e0:7c:41:1e:10:32:2f:
                    4f:b6:1e:f8:cd:6e:55:e6:01:98:9c:de:69:82:cb:
                    12:e2:03:e4:34:56:d8:8d:92:35:08:38:92:85:2c:
                    48:75:4c:f5:63:43:e4:9a:84:a2:af:da:34:b6:10:
                    24:54:11:78:b8:51:34:44:17:92:5e:83:ab:ba:c7:
                    65:83:5f:41:f3:2c:53:a6:8e:37:34:d0:dc:69:8c:
                    53:cb:0d:ee:08:d1:5e:5f:61:17:6a:12:ac:c4:e3:
                    6c:9f:46:99:ce:b1:d0:c2:a5:9b:c9:6b:e0:a6:9c:
                    64:5f:ba:27:a6:3a:db:3c:0b:60:db:9c:df:dd:05:
                    2d:44:7f:48:90:02:5a:0e:4e:b4:62:46:59:cb:4f:
                    cb:cb:2c:0d:0a:f0:10:7e:11:35:52:05:a8:6c:4e:
                    e0:6d:ad:70:b6:fe:7e:e4:8f:3b:41:92:91:6a:68:
                    87:e9:80:29:83:ba:59:df:7d:1f:e8:de:e0:18:64:
                    f1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1B:09:96:C3:B2:95:4B:1B:FD:E9:FE:CE:6D:B7:67:34:D7:E3:0D
            X509v3 Authority Key Identifier:
                keyid:D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:1a:ec:ea:3c:67:e0:ee:57:b5:04:e5:25:4f:58:56:a2:59:
         31:ee:3c:cf:77:ce:1e:26:71:f3:f8:d0:29:dd:0a:a4:cf:52:
         6a:93:c3:45:c0:09:53:4b:52:32:96:85:1b:bc:23:51:a3:1b:
         27:4e:00:d6:70:90:09:bf:de:e0:fe:1a:83:79:63:ff:02:33:
         3f:21:b2:e6:05:42:c8:31:d9:f0:0d:17:a4:4b:79:69:9a:3e:
         6b:b1:4e:90:ee:7e:12:03:b6:c6:33:d0:61:50:7c:36:5c:20:
         19:61:a0:c4:92:09:6a:a2:cd:75:7b:6e:0c:9b:72:50:ce:76:
         5a:d1:be:15:46:83:42:3f:59:f5:6e:99:a7:44:c0:56:8c:1f:
         59:c1:a3:68:7c:45:3d:9d:2a:c1:56:57:1c:0d:f8:5b:68:db:
         c0:05:15:a1:5d:5e:36:20:33:de:0c:54:ab:f5:30:9e:e6:c6:
         9f:a2:c9:3b:e2:c7:2d:b1:d1:04:da:1c:02:1d:c7:a5:a2:2b:
         5a:9d:41:8c:73:5a:12:4c:c2:3a:12:7c:7c:7d:3e:5e:98:27:
         e9:a0:ae:e9:9d:9f:74:7f:6a:d7:f0:2a:bb:4d:a0:0a:a3:b4:
         f5:4f:e7:d0:12:d0:48:96:1b:8c:6f:90:ad:84:ad:6c:b2:ec:
         ce:ea:06:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:02:41 2024 by rpki-client on console-fra.rpki-client.org