Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.mft
File:                     eIJbK8kIpA_vYrJkgtYamFdfy9M.mft (raw, json)
Hash identifier:          km7dszCn0pBgNP15ucPQns8TKRVDy4oTAJ8qKXxJCSc=
Subject key identifier:   A2:3F:C7:B0:49:2D:5C:10:F9:34:14:DB:7B:43:36:71:E6:40:F1:48
Authority key identifier: 78:82:5B:2B:C9:08:A4:0F:EF:62:B2:64:82:D6:1A:98:57:5F:CB:D3
Certificate issuer:       /CN=F368B07FAF/serialNumber=78825B2BC908A40FEF62B26482D61A98575FCBD3
Certificate serial:       09A3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eIJbK8kIpA_vYrJkgtYamFdfy9M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.mft
Manifest number:          0998
Signing time:             Sat 04 May 2024 00:47:29 +0000
Manifest this update:     Sat 04 May 2024 00:47:28 +0000
Manifest next update:     Mon 06 May 2024 00:47:28 +0000
Files and hashes:         1: eIJbK8kIpA_vYrJkgtYamFdfy9M.crl (hash: JifQNLly3OnZcKHe+Qf91nrJpjcdJuLfCacMTnr1BCY=)
                          2: 3C767B72D58F11EE82B7017B775412E6.roa (hash: znTplPDJDP2GRQbe+a3ddTqszpGpH7kL0+SOMcpCmpE=)
                          3: AA5225C0D58E11EE8D26517A775412E6.roa (hash: tJX8jsW6xqCFPxUYtuTHYXG1DXTHpA7xdmIPD9JG+dM=)
                          4: 93F20CFED58F11EE9923A77B775412E6.roa (hash: ld14Rsb4hZGdAazWEN1fP2wL4m8b8poaDRXzT0Ivgwo=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eIJbK8kIpA_vYrJkgtYamFdfy9M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 06 May 2024 00:04:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2467 (0x9a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368B07FAF/serialNumber=78825B2BC908A40FEF62B26482D61A98575FCBD3
        Validity
            Not Before: May  4 00:47:28 2024 GMT
            Not After : May  6 00:47:28 2024 GMT
        Subject: CN=663585a1-a813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3e:3d:cd:52:0c:e1:02:d9:19:3a:b5:c6:b6:
                    3c:4a:c8:4b:9a:a2:39:36:4d:a3:2c:10:9b:9b:52:
                    9b:4e:23:d5:b9:31:23:54:6c:e4:1b:8e:59:e1:e7:
                    e0:a5:68:ad:5c:41:29:a1:c5:38:a9:80:93:62:5f:
                    22:93:9c:de:2c:0b:6c:66:1d:b5:ab:3d:7c:9f:1f:
                    0d:2e:d8:b7:2d:d6:43:1a:b9:06:65:56:bf:94:a8:
                    d8:75:b3:04:69:49:e1:e9:d7:a7:5e:ca:f1:9f:0c:
                    85:cb:34:e7:d9:a1:6c:69:a8:51:fb:aa:56:23:a3:
                    5a:76:f0:00:54:5e:4c:6f:e1:59:74:ba:e5:6a:28:
                    77:4f:19:f0:3e:a9:ee:66:da:e1:96:2c:3e:73:54:
                    24:25:44:63:66:ec:b0:a7:2a:e1:d1:a0:c1:de:7a:
                    3d:65:cd:bc:12:49:e0:64:07:04:c7:52:e5:63:02:
                    a9:37:67:f8:d5:bd:33:84:e6:64:c2:d0:f9:c1:e8:
                    f5:23:fc:8c:aa:b8:9b:34:24:e3:c4:2e:65:7c:ac:
                    00:03:f1:b9:87:96:04:c1:9e:64:00:d9:9d:de:d9:
                    17:a4:ec:28:18:d2:a5:ed:1e:1a:e3:87:7f:ad:c3:
                    e5:f7:8f:97:a8:ba:02:b0:4f:55:4b:64:7d:0a:a6:
                    92:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:3F:C7:B0:49:2D:5C:10:F9:34:14:DB:7B:43:36:71:E6:40:F1:48
            X509v3 Authority Key Identifier:
                keyid:78:82:5B:2B:C9:08:A4:0F:EF:62:B2:64:82:D6:1A:98:57:5F:CB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eIJbK8kIpA_vYrJkgtYamFdfy9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:06:ac:a1:85:f5:ba:bc:95:61:a5:68:db:fb:32:88:65:91:
         08:89:bb:99:11:ca:b8:1d:64:2a:74:cb:ed:d8:58:b5:bb:31:
         55:a4:f7:fe:7b:40:6b:68:1a:6d:04:3c:57:f8:e5:f1:63:86:
         07:24:25:4a:ba:08:fc:9f:b7:e9:9d:16:fe:7c:90:32:94:5e:
         2c:f2:d3:62:c3:24:07:4b:49:de:2e:06:2d:96:e3:29:ff:6c:
         c7:0a:cd:2c:af:ab:4b:62:3b:25:35:be:4a:37:16:93:49:bf:
         4a:30:aa:77:d4:a1:2b:b2:68:32:c0:f9:3c:f4:50:ea:c0:e4:
         bf:f5:56:89:2f:be:e3:ba:b2:2e:35:42:f7:7a:ad:fb:ae:58:
         5c:57:c9:33:b3:ca:6f:2b:cf:e9:17:50:f6:05:98:c7:dd:21:
         14:78:1d:0a:c0:af:e7:dd:ad:35:35:15:b7:f7:9a:ed:50:f0:
         29:f9:6d:1d:62:d7:8c:ed:e7:4b:10:ce:93:12:f5:5f:0a:5a:
         03:89:4b:7e:94:ed:e0:1e:48:1c:36:26:6e:f8:d5:98:a6:c7:
         b9:94:37:64:5c:2b:ed:5c:52:ff:1a:4e:13:bd:69:86:79:8d:
         7a:09:84:19:52:e8:73:03:98:21:e2:49:0c:18:01:e8:85:eb:
         4b:82:cb:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:37:20 2024 by rpki-client on console-fra.rpki-client.org